Abstract: A satellite communication system that combines the benefits of Geosynchronous Equatorial Orbit (GEO) and Non-geostationary (NGSO) satellite systems into a GEO-NGSO hybrid satellite system. The hybrid system allows for various uses, such as, a NGSO-GEO-NGSO handoff, a GEO-NGSO-GEO handoff, and/or a multi-transport operation utilizing both the GEO and NGSO satellites. Based on the path delay differences of the GEO and NGSO satellites, the system may create a data buffer to ensure no data loss.

Abstract: A satellite communication system which supports encrypted DNS at the customer premise equipment terminal to provide the benefits of local DNS caching. Some implementations use Certificate Authority (CA)-signed Transport Layer Security (TLS) certificates. Implementations may provide encrypted DNS service at the CPE, where the system installs CA-signed TLS certificate at the customer premise equipment (CPE) terminal. The same certificate can be used at multiple terminals using a wild-card certificate distributed by the satellite to provide value added services at a CPE as secure web services to off-the-shelf web clients and applications.

Abstract: An Encrypted Transport Proxy Backbone Protocol module is configured to set up ET Proxy Backbone connections with another distributed proxy device with each ET Proxy Backbone connection including multiple ET Proxy Backbone channels for transmitting ET proxy packets having different QoS classes. Each ET Proxy Backbone channel includes a separate queue. The ET Proxy Backbone Protocol module is also configured to schedule transmissions of the ET proxy packets from each respective queue; multiplex the ET proxy packets from each respective queue via the associated ET Proxy Backbone channel; perform local recovery of network impairments over the access network and perform congestion control to prevent packets from client devices and web servers from causing network congestion to the access network.

Abstract: A satellite communication system which supports encrypted DNS at the customer premise equipment terminal to provide the benefits of local DNS caching. Some implementations use Certificate Authority (CA)-signed Transport Layer Security (TLS) certificates. Implementations may provide encrypted DNS service at the CPE, where the system installs CA-signed TLS certificate at the customer premise equipment (CPE) terminal. The same certificate can be used at multiple terminals using a wild-card certificate distributed by the satellite to provide value added services at a CPE as secure web services to off-the-shelf web clients and applications.

Abstract: An Encrypted Transport (ET) proxy module is configured to receive incoming ET proxy packets from an ET proxy backbone module and transmit outgoing ET proxy packets to the ET proxy backbone module. The ET proxy module is also configured to set up an HTTP tunnel with an ET proxy client of the client device or with an ET proxy at a web server for receiving incoming UDP payloads from the client device or web server and transmitting outgoing UDP payloads to the client device or web server. The ET proxy module is also configured to receive prioritization preferences from client devices or web servers pertaining to the UDP payloads indicating preferred quality-of-service (QoS) classes for the UDP payloads, and to schedule transmission of the outgoing UDP payloads via the HTTP tunnel based on QoS classes of the outgoing UPD payloads.

Abstract: An Encrypted Transport Proxy Backbone Protocol module is configured to set up ET Proxy Backbone connections with another distributed proxy device with each ET Proxy Backbone connection including multiple ET Proxy Backbone channels for transmitting ET proxy packets having different QoS classes. Each ET Proxy Backbone channel includes a separate queue. The ET Proxy Backbone Protocol module is also configured to schedule transmissions of the ET proxy packets from each respective queue; multiplex the ET proxy packets from each respective queue via the associated ET Proxy Backbone channel; perform local recovery of network impairments over the access network and perform congestion control to prevent packets from client devices and web servers from causing network congestion to the access network.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer-storage media, for traffic flow classification using machine learning. In some implementations, a communication device includes an anomaly detector comprising a machine learning model trained to predict whether data traffic patterns differ from a set of observed traffic patterns present in a set of training data. The communication device includes a traffic classifier comprising a machine learning model trained to predict a quality of service (QoS) class for network connections or data flows. The communication device is configured to evaluate network connections or data flows using the anomaly detector. The communication device may (i) use the traffic classifier to predict QoS classes for traffic that the anomaly detector predicts to be similar to the observed traffic patterns, and (ii) store data traffic that the anomaly detector predicts to be different from the observed traffic patterns.

Abstract: A satellite communication system that combines the benefits of Geosynchronous Equatorial Orbit (GEO) and Non-geostationary (NGSO) satellite systems into a GEO-NGSO hybrid satellite system. The hybrid system allows for various uses, such as, a NGSO-GEO-NGSO handoff, a GEO-NGSO-GEO handoff, and/or a multi-transport operation utilizing both the GEO and NGSO satellites. Based on the path delay differences of the GEO and NGSO satellites, the system may create a data buffer to ensure no data loss.

Abstract: A network monitoring method includes: monitoring, at a network node, one or more network statistics for each of one or more objects exchanged between a client end point and a server end point through a network connection, the network node being located between the client end point and the server end point; and determining one or more QoS metrics for each of the one or more objects based on the network statistics for respective one of the one or more objects.

Abstract: Some implementations of the disclosure relate to a backend server that is configured to perform operations including: determining one or more radio frequency (RF) gateways that are candidates for communicating with an end device over a RF link in a low-power wide-area network (LPWAN); obtaining, for each of the one or more RF gateways, a round trip time (RTT) of communications between the backend server and the RF gateway over a backhaul link; determining whether at least one of the one or more RTTs exceeds a threshold value; and when at least one of the one or more RTTs exceeds the threshold value, increasing a configured time interval between transmission of an uplink message by the end device and a downlink receive time slot in which the end device is configured to listen for a downlink message.

Abstract: A satellite communication system which supports encrypted DNS at the customer premise equipment terminal to provide the benefits of local DNS caching. Some implementations use Certificate Authority (CA)-signed Transport Layer Security (TLS) certificates. Implementations may provide encrypted DNS service at the CPE, where the system installs CA-signed TLS certificate at the customer premise equipment (CPE) terminal. The same certificate can be used at multiple terminals using a wild-card certificate distributed by the satellite to provide value added services at a CPE as secure web services to off-the-shelf web clients and applications.

Abstract: Computer-implemented systems and methods for diagnosing and correcting connectivity problems in a network are provided. The method includes obtaining, at a network node disposed at an edge of the network, measurements of one or more attributes of network traffic exchanged between a content server and a client device via the network. The network traffic is associated with streaming video content transmitted from the content server to the client device over the network. The method also includes analyzing the one or more attributes of the network traffic to estimate Quality of Experience (QoE) performance metrics related to the streaming video content at the client device, and adjusting one or more network operating parameters of the network responsive to QoE performance metrics falling below a predetermined threshold.

Abstract: A method wherein resource data for a web resource is generated can include age, confidence level, cacheability level, cache expiration, and/or priority level. Resource readiness for the web page is prepared based on the resource data. This can include preconnecting to a domain having the web resource when the resource data indicates a first level of resource readiness; preloading the web resource from the domain when the browser is open when the resource data indicates a second level of resource readiness, where the second level of resource readiness is greater than the first level of resource readiness; or prefetching the web resource from the domain prior to opening of the browser when the resource data indicates a third level of resource readiness, where the third level of resource readiness is greater than the second level of resource readiness.

Abstract: A method and system for delivering services to terminals and associated edge devices in a satellite communication system. A network node remotely creates at least one service appliance within a terminal of the satellite communication system and customer premise equipment (CPE) connected to the terminal. Containerized applications are then transmitted from the network node to the service appliance. The service appliance subsequently executes the containerized application using hardware resources of the terminal and CPE. Usage of the containerized application can also be monitored.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer-storage media, for traffic flow classification using machine learning. In some implementations, a communication device includes an anomaly detector comprising a machine learning model trained to predict whether data traffic patterns differ from a set of observed traffic patterns present in a set of training data. The communication device includes a traffic classifier comprising a machine learning model trained to predict a quality of service (QoS) class for network connections or data flows. The communication device is configured to evaluate network connections or data flows using the anomaly detector. The communication device may (i) use the traffic classifier to predict QoS classes for traffic that the anomaly detector predicts to be similar to the observed traffic patterns, and (ii) store data traffic that the anomaly detector predicts to be different from the observed traffic patterns.

Abstract: Computer-implemented systems and methods for diagnosing and correcting connectivity problems in a network are provided. The method includes obtaining, at a network node disposed at an edge of the network, measurements of one or more attributes of network traffic exchanged between a content server and a client device via the network. The network traffic is associated with streaming video content transmitted from the content server to the client device over the network. The method also includes analyzing the one or more attributes of the network traffic to estimate Quality of Experience (QoE) performance metrics related to the streaming video content at the client device, and adjusting one or more network operating parameters of the network responsive to QoE performance metrics falling below a predetermined threshold.

Abstract: Approaches for determining link conditions within a client network are provided. Network protocol statistics are recorded for network connections over the client network, wherein each connection provides data communications between a client terminal node and a different respective client device, and the client terminal node provides access to a broadband communications network for each of the different respective client device(s). Connection metrics are determined for each of the network connections, wherein each connection metric is determined based on the network protocol statistics associated with the respective network connection. Diagnoses of network conditions regarding connections over the client network that are of interest, wherein each diagnosis is performed based on an analysis of a respective set of the connection metrics for the respective network connection. Results of each diagnosis are provided to a system operator.

Abstract: A network monitoring method includes: monitoring, at a network node, one or more network statistics for each of one or more objects exchanged between a client end point and a server end point through a network connection, the network node being located between the client end point and the server end point; and determining one or more QoS metrics for each of the one or more objects based on the network statistics for respective one of the one or more objects.

Abstract: Systems and methods are disclosed, and one includes a computer-implemented method for predicting quality of experience (QoE) for application downloading a webpage from a server stack, including determining a stat data corresponding to a traffic through a network node, generating a feature vector using the stat data, estimating a download performance metric for the application in a downloading of the webpage, using feature vector data, and estimating a QoE value, using the estimated performance metric.

Abstract: A method wherein resource data for a web resource is generated can include age, confidence level, cacheability level, cache expiration, and/or priority level. Resource readiness for the web page is prepared based on the resource data. This can include preconnecting to a domain having the web resource when the resource data indicates a first level of resource readiness; preloading the web resource from the domain when the browser is open when the resource data indicates a second level of resource readiness, where the second level of resource readiness is greater than the first level of resource readiness; or prefetching the web resource from the domain prior to opening of the browser when the resource data indicates a third level of resource readiness, where the third level of resource readiness is greater than the second level of resource readiness.