Google Inc.

Alcatel-lucent USA Inc.

David Presotto

Timo Burkard

Ankur Jain

Sushant Jain

Aspi Siganporia

Leonidas Kontothanassis

Gautham K Thambidorai

Eric Henry Grosse

Ankur Taly

Paul Robert Schultz

Asim Shankar

Michal Piotr Szymaniak

James F Keller

Mark Klenk

Gautham Thambidorai

This disclosure provides systems, methods, and apparatus for providing anycast based load balancing for a plurality of servers within a network. The network includes a domain name system (DNS) server that is configured to respond to domain name queries received from one or more clients. The DNS server maintains a set of anycast IP addresses associated with a domain name. The DNS server responds to a client's request with one or more selected anycast IP addresses from the set of anycast IP addresses. The DNS server also instructs a plurality of content servers to advertise all of the anycast IP addresses to the network. The DNS server also receives load information from each of the plurality of content servers, and instructs, based on the load information, one of the plurality of content servers to cease advertising one or more of the previously advertised anycast IP addresses.

Anycast based, wide area distributed mapping and load balancing system

A client device communicates with a target entity server and one or more third party devices. The client device has a client credential that includes a client public key and a client certificate chain. The client certificate chain includes a chain of human-readable names. The client device delegates a third party device access to a service on the server by creating a delegate certificate chain for the third party device. The delegate certificate chain is bound to a public key for the third party device and includes a human-readable name with an extension selected for the third party device. The delegate certificate chain also may include a section of the human-readable name that identifies the client device. The client device transmits or otherwise presents the delegate certificate chain to the third party device.

Security model for identification and authentication in encrypted communications using delegate certificate chain bound to third party key

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for receiving a plurality of requests from a plurality of client devices sent to a public internet protocol address; routing the requests to one or more internal Internet protocol addresses, where the one or more internal Internet protocol addresses correspond to one or more compute nodes, and where the one or more compute nodes process the routed requests; determining a particular compute node is offline, where the particular compute node is assigned one or more internal Internet protocol addresses; in response to the determination that the particular node is offline, reassigning the one or more internal Internet protocol addresses corresponding to the particular compute node to one or more different compute nodes, where requests communicated to the reassigned internal Internet protocol addresses are communicated to the one or more different compute nodes for processing.

Load balancing and content preservation

A number of requests for an alternative network location are identified, where the requests for the alternative network location are generated after failure of one or more previous requests to reach a first, previous network location as a result of a network brownout. It is determined if the number of requests for the alternative network location exceed a threshold value for a period of time, and if so, an alarm is generated.

Network failure detection

A system and method is provided wherein, in one aspect, a currently-requested item of information is stored in a cache based on whether it has been previously requested and, if so, the time of the previous request. If the item has not been previously requested, it may not be stored in the cache. If the subject item has been previously requested, it may or may not be cached based on a comparison of durations, namely (1) the duration of time between the current request and the previous request for the subject item and (2) for each other item in the cache, the duration of time between the current request and the previous request for the other item. If the duration associated with the subject item is less than the duration of another item in the cache, the subject item may be stored in the cache.

System and method of selectively caching information based on the interarrival time of requests for the same information

A server system receives requests from client systems and sends responses back to the client systems. For a subset of the requests, in addition to responding to a request from a client system, the method includes creating a cryptographic object at the server system. The cryptographic object is used to cryptographically protect information related to the request, and the cryptographically protected information associated with the cryptographic object is stored at the server system. The server system then sends the cryptographic object to the client system, and in conjunction with sending the cryptographic object to the client system, irreversibly modifies the cryptographic object on the server system. For example, in some embodiments the cryptographic object includes an cryptographic key, and the server system deletes or truncates the only instances of the cryptographic object on the server system when the server system finishes responding to the request from the client system.

Privacy enhancements for server-side cookies

A system which regulates communication with a server is described. During operation, the system determines a retransmission rate of data packets during a first set of conversations between a group of users and the server via a peering link. Next, the system compares the retransmission rate and an historical retransmission rate of data packets during a second set of conversations between a second group of users and the server via the peering link. The system then adjusts a target acceptance rate of the server to requests to initiate conversations with additional users via the peering link based on the comparison of the retransmission rate and the historical retransmission rate. Additionally, the system accepts or rejects a request to initiate a conversation between another user and the server via the peering link based on an actual acceptance rate of the server to requests to initiate the conversations and the target acceptance rate.

Growing community of inventors

Palo Alto, CA, United States of America

David Presotto