Abstract: An apparatus and related method are provided for improving the performance of virtual desktop services. A network device is deployed in a network to intercept packets of a control session initiated by a client with a connection broker to obtain data from a host. The network device initiates a new control session to the connection broker on behalf of the client. The network device receives host information from the connection broker, replaces address information of the network device for the host information in a control session message and sends the control session message to the client. The network device establishes a data session with the client, initiates a data session with the host on behalf of the client and relays data between the data session with the host and the data session with the client such that the network device is transparent to the client and the host.

Abstract: An apparatus and related method are provided for improving the performance of virtual desktop services. A network device is deployed in a network to intercept packets of a control session initiated by a client with a connection broker to obtain data from a host. The network device initiates a new control session to the connection broker on behalf of the client. The network device receives host information from the connection broker, replaces address information of the network device for the host information in a control session message and sends the control session message to the client. The network device establishes a data session with the client, initiates a data session with the host on behalf of the client and relays data between the data session with the host and the data session with the client such that the network device is transparent to the client and the host.

Abstract: An apparatus and related method are provided for improving the performance of virtual desktop services. A network device is deployed in a network to intercept packets of a control session initiated by a client with a connection broker to obtain data from a host. The network device initiates a new control session to the connection broker on behalf of the client. The network device receives host information from the connection broker, replaces address information of the network device for the host information in a control session message and sends the control session message to the client. The network device establishes a data session with the client, initiates a data session with the host on behalf of the client and relays data between the data session with the host and the data session with the client such that the network device is transparent to the client and the host.

Abstract: An edge router receives datagrams to be forwarded an SVC. If the SVC is not already set up, the edge router buffers the datagrams until the SVC set up is complete. The buffered datagrams are forwarded once the SVC set up is complete. According to another aspect of the present invention, different buffering requirements are supported for different user applications. A policy table may be configured by a service provider specifying the requirements associated with potentially each flow (e.g., combination of source/destination IP addresses, source/destination port number), and the datagram on each flow may be buffered accordingly.

Abstract: Methods and apparatus are disclosed for performing layer 2 authentication of a Mobile Node supporting Mobile IP in an SSG based network. Layer 2 information including at least one of a MAC address and username associated with the Mobile Node is obtained. An orphaned host object including the layer 2 information (e.g., MAC address) is then generated. The orphaned host object is then unorphaned when an IP address associated with the layer 2 information (e.g., MAC address) is received such that the unorphaned host object includes the IP address and the layer 2 information.

Abstract: An edge router receives datagrams to be forwarded an SVC. If the SVC is not already set up, the edge router buffers the datagrams until the SVC set up is complete. The buffered datagrams are forwarded once the SVC set up is complete. According to another aspect of the present invention, different buffering requirements are supported for different user applications. A policy table may be configured by a service provider specifying the requirements associated with potentially each flow (e.g., combination of source/destination IP addresses, source/destination port number), and the datagram on each flow may be buffered accordingly.

Abstract: An edge router receives datagrams to be forwarded an SVC. If the SVC is not already set up, the edge router buffers the datagrams until the SVC set up is complete. The buffered datagrams are forwarded once the SVC set up is complete. According to another aspect of the present invention, different buffering requirements are supported for different user applications. A policy table may be configured by a service provider specifying the requirements associated with potentially each flow (e.g., combination of source/destination IP addresses, source/destination port number), and the datagram on each flow may be buffered accordingly.