Netskope, Inc.

Limelight Networks, Inc.

Lonhyn T Jasinskyj

Jason Eggleston

Piyush V Patel

Jason Hofmann

Jonathan Michael Bosanac

John Sengenberger

Christopher Robert Geeringh

Jacob S Roersma

Peter Coppola

Kenneth Smart

A system for providing policy-controlled communication between a plurality of different cloud computing environments includes a user interface that receives configuration settings to be applied to a plurality of first instances and a plurality of second instances. A plurality of collectors of the system that retrieve information from a first cloud computing environment and a second cloud computing environment, and a controller determines policies for the plurality of first instances and the plurality of second instances. A configurator of the system applies the policies to the plurality of first instances and the plurality of second instances, a first tester that inspects operations of the plurality of first instances and detects violations of the policies, and an enforcer responds to the detected violations. The controller instructs the configurator to apply the first policy to the first instance again, shut down the first instance or cut off communications with the first instance.

Policy management across multiple cloud computing environments within a network

An Internet Protocol (IP) address assignment method in a cloud-based multi-tenant system for assigning unique IP addresses to a plurality of client devices of a plurality of users. Network traffic including a data request from a client device to a cloud provider via an ingress tunnel is monitored by a mid-link server. A user of the client device is identified from the data request. A policy is identified based on the tenant of the user and a plurality of applications for the client device. An IP address is assigned to the client device of the user based on the policy. Each client device is assigned a unique IP address. The network traffic egresses via an egress tunnel from the mid-link server. The data request is routed from the client device to the cloud provider using the IP address of the client device.

Policy-based IP address allocation

A cloud network for delivering local content to a user at a user location. The cloud network includes a client device comprising a local application, a mid-link server and a cloud provider. The mid-link server receives from the client device a request for local data from the user at the user location. The user has provided the request for the local data from the user location without a data center. A sub-data center for the user location is identified and assigned an Internet Protocol (IP) address for the user location. The sub-data center is a data center nearest to the user location. Each data center has IP addresses for different locations to deliver the local content to the respective IP address for the location. The request is routed to the sub-data center which is used to provide the local data to the user by the cloud provider.

Conditional egress IP for delivery of localized content

A system for providing policy-controlled communication between a plurality of different cloud computing environments includes a user interface that receives configuration settings to be applied to a plurality of first instances within a first cloud computing environment and a plurality of second instances within a second cloud computing environment. The system also includes a plurality of collectors that retrieve information from the first cloud computing environment and the second cloud computing environment, and a controller that determines policies for the plurality of first instances and the plurality of second instances as functions of the configuration settings and the information. Further, the system includes a configurator that applies the policies to the plurality of first instances and the plurality of second instances; a first tester that inspects operations of the plurality of first instances and detects violations of the policies; and an enforcer that responds to the detected violations.

Multi-environment networking management system

A system and method for accelerating web page delivery is disclosed in one embodiment. Web content requests are made to an edge server of a first point of presence (POP) of a content delivery network (CDN). The web content has embedded resource links. The first POP can rewrite the embedded resource links to route requests for the embedded resource links to any POP in the CDN or even the origin server. In some embodiments, the first POP can decide if the first POP and/or another POP referenced in a rewritten embedded resource link should cache and/or accelerate the resource referenced in the embedded resource link.

Edge analytics query for distributed content network

A content delivery network (CDN) performs time varying traffic allocation. The network includes: one or more edge servers that store content corresponding to a domain name that is associated with a content provider, and are configured to deliver the content to end users in response to requests received at the edge servers from the end users; analytics information characterizing the CDN; and a traffic engine that periodically evaluates a service function as having a serve value or a shunt value for the domain name, based at least in part on the analytics information. The traffic engine transmits one or more IP addresses of the edge servers to an interface to a domain name service (DNS) while the service function has the serve value for the domain name; and transmits alternate domain name information of a different network to the interface while the service function has the shunt value.

Growing community of inventors

Portola Valley, CA, United States of America

Lonhyn T Jasinskyj