Abstract: A method for passing data from a first processing thread to a second processing thread, wherein the first processing thread produces data to be processed by the second processing thread. The data from the first processing thread may be inserted into objects that in turn are inserted into a queue of objects to be processed by the second thread. The queue may be a circular array, wherein the array includes a pointer to a head and a pointer to a tail, wherein only the first processing thread modifies the tail pointer and only the second processing thread modifies the head pointer.

Abstract: Methods and systems for detecting and responding to Denial of Service (“DoS”) attacks comprise: detecting a DoS attack or potential DoS attack against a first server system comprising one or more servers; receiving, at a second server system comprising one or more servers, network traffic directed to the first server system; subjecting requesting clients to one or more challenge mechanisms, the challenge mechanisms including one or more of challenging requesting clients to follow through HTTP redirect responses, challenging requesting clients to request Secure Sockets Layer (SSL) session resumption, or challenging requesting clients to store and transmit HTTP cookies; identifying one or more non-suspect clients, the one or more suspect clients corresponding to requesting clients that successfully complete the one or more challenge mechanisms; identifying one or more suspect clients, the one or more suspect clients corresponding to requesting clients that do not successfully complete the one or more challenge

Abstract: A method for passing data from a first processing thread to a second processing thread, wherein the first processing thread produces data to be processed by the second processing thread. The data from the first processing thread may be inserted into objects that in turn are inserted into a queue ob objects to be processed by the second thread. The queue may be a circular array, wherein the array includes a pointer to a head and a pointer to a tail, wherein only the first processing thread modifies the tail pointer and only the second processing thread modifies the head pointer.

Abstract: A system and method for improving network performance when communicating between a first site network and a second site network via an IP-based transport network. The site networks include a LAN, a plurality of host/media gateways (MGWs) connected to the LAN, and pairs of first and second Site Edge Routers (SERs) connected to the LAN for handling traffic from different host/MGWs. The SERs are configured as redundant backup pairs in which each SER in a given pair backs up the other SER in the pair. Each SER is connected to a different Provider Edge (PE) router in the transport network via a dedicated link that has sufficient spare capacity to carry traffic coming from both of the SERs in a given pair of SERs in case one of the SERs fails. The SERs provide preferred routing prefixes to the PE routers, thereby guaranteeing symmetric paths for bidirectional traffic.

Abstract: A router and a method for migrating routing protocol processes or Virtual Routers (VRs) from one Route Processor (RP) to another using graceful restart procedures for maintaining packet flow to the router and assisting the router to obtain restart information. The router includes first and second RPs and a forwarding engine for forwarding packets to neighbor routers in the network. When the routing protocol process is terminated on the first RP, the neighbor routers detect a router failure and initiate the graceful restart procedures. A filter rule in the forwarding engine causes it to forward packets to the new routing protocol process on the second RP. The new process learns the network topology from the neighbor routers, and the migration is completed without packet loss and without requiring complex changes to the network protocol stack.

Abstract: Providing resiliency for mobile terminal data sessions, wherein the data sessions rely on Internet Protocol Version 4 and wherein at least one Home Agent node maintains a mobility bindings database for all registered mobile terminals while they are away from a home network. A first aspect of the invention provides physical Home Agent redundancy, perceived by each mobile node as Home Agent IP address redundancy, and a second aspect provides session resiliency. While the second aspect of the invention provides for session resiliency, it uses a mechanism of the former for master failure detection and Home Agent IP address take-over by a backup Home Agent.

Abstract: Providing resiliency for mobile terminal data sessions, wherein the data sessions rely on Internet Protocol Version 4 and wherein at least one Home Agent node maintains a mobility bindings database for all registered mobile terminals while they are away from a home network. A first aspect of the invention provides physical Home Agent redundancy, perceived by each mobile node as Home Agent IP address redundancy, and a second aspect provides session resiliency. While the second aspect of the invention provides for session resiliency, it uses a mechanism of the former for master failure detection and Home Agent IP address take-over by a backup Home Agent.

Abstract: A router and a method for migrating routing protocol processes or Virtual Routers (VRs) from one Route Processor (RP) to another using graceful restart procedures for maintaining packet flow to the router and assisting the router to obtain restart information. The router includes first and second RPs and a forwarding engine for forwarding packets to neighbor routers in the network. When the routing protocol process is terminated on the first RP, the neighbor routers detect a router failure and initiate the graceful restart procedures. A filter rule in the forwarding engine causes it to forward packets to the new routing protocol process on the second RP. The new process learns the network topology from the neighbor routers, and the migration is completed without packet loss and without requiring complex changes to the network protocol stack.

Abstract: A system and method for improving network performance when communicating between a first site network and a second site network via an IP-based transport network. The site networks include a LAN, a plurality of host/media gateways (MGWs) connected to the LAN, and pairs of first and second Site Edge Routers (SERs) connected to the LAN for handling traffic from different host/MGWs. The SERs are configured as redundant backup pairs in which each SER in a given pair backs up the other SER in the pair. Each SER is connected to a different Provider Edge (PE) router in the transport network via a dedicated link that has sufficient spare capacity to carry traffic coming from both of the SERs in a given pair of SERs in case one of the SERs fails. The SERs provide preferred routing prefixes to the PE routers, thereby guaranteeing symmetric paths for bidirectional traffic.