Abstract: A method for providing network integrated services based ReSerVation Protocol across a cryptographic network boundary includes assigning one or more DiffServ forwarding classifications to correspond to IntServ requests for QoS provisioning. A daemon in the QoS Service Provider module signals the QoS upon detecting data packets indicating a DiffServ forwarding class assigned to IntServ QoS requests. In response to the notification, the QoS Services Provider module initiates an RSVP-based request for network resources, and establishes a network path in response to acceptance of the RSVP path request. The data flow comprised of encrypted data is then transmitted over the reserved path. Multiple simultaneous aggregated flows may be provisioned. Paths may be reconfigured and resized by the QoS services provider module in response to an overlimit data flow, subject to network resource availability. An ECN bit is returnable from the destination application to signal a problem with the data transmission.