Abstract: An approach is provided for supporting retrieval of a web page over a data network from a web site is disclosed. A downstream proxy communicating with a host executing a browser receives a request message from a browser to retrieve the web page. An upstream proxy parses the web page to determine an object embedded in the web page, wherein a promise list is generated specifying the embedded object that is to be pre-fetched according to a criterion. The promise list is transmitted to the downstream proxy, wherein the upstream proxy pre-fetches the embedded object from the web site. The upstream proxy determines whether to forward one of the pre-fetched embedded object to the downstream proxy based on a comparison of cookies associated with one of the pre-fetched objects supplied, respectively, by the browser and the web site. This approach as particular applicability in relatively high latency networks, such as a satellite communications system.

Abstract: An approach for adaptively providing network performance enhancing functions in a secure environment, such as a virtual private network, is disclosed. Traffic, for example, Internet Protocol (IP) packets, is received for transport over an access network (e.g., satellite network). Next, characteristics (e.g., latency) of the access network are determined. A connection (which supports the performance enhancing functions) is selectively established based on the determined characteristics for transport the received packets over the access network. An encrypted tunnel is provided over the established connection to transmit the received packets.

Abstract: An approach is provided for providing quality of service reservations in a packet-based radio communication network is disclosed. Connection information including connection rate is extracted from a dataflow from an application requesting connection-oriented service. A request message is sent to a proxy for establishing a connection based on the connection information over the network, wherein the proxy configures a classification rule based on flow criteria from the request message and accordingly initiates establishment of the connection over the network to a destination terminal. A confirmation that the connection can be established is selectively received according to the connection information, wherein the dataflow satisfying the flow criteria from the application is transported over the established connection to the destination terminal. This approach as particular applicability to shared capacity systems, such as a satellite communication system.

Abstract: An approach for providing access in a communications system is disclosed. A network node (or terminal) generates duplicate bursts. The network node then transmits the duplicate bursts over a contention channel according to a pre-determined quality-of-service (QoS) designation. The contention channel can be established based on a diversity ALOHA protocol. The present invention has particular applicability to a radio communications system, such as a satellite network that provides data communication services.

Abstract: An approach is provided for managing bandwidth in a data network. Capacity is allocated on a communication channel, which can be utilized for transporting data traffic or support network administrative functions (e.g., ranging), for a terminal to transmit data over the communication channel. In anticipation of the terminal having to transmit additional data, additional capacity is allocated on the communication channel for the terminal prior to receiving a request for bandwidth by the terminal. The anticipatory allocation is determined according to loading of the data network. This approach as particular applicability to shared capacity systems, such as a satellite communication system.

Abstract: An approach for providing stateless compression is disclosed. A message (such as an HTTP (HyperText Transfer Protocol) GET request message or a Domain Name Service (DNS) message) is received from a host. A stateful compressor is initialized with a prescribed sequence to yield a primed state. The message is input into a stateful compressor, which outputs a compressed message based upon the primed state. The stateless compression scheme has particular applicability to networks with high latency—e.g., a satellite network.

Abstract: A communications system includes a plurality of communications channels for transporting packets. The system also includes a gateway that is coupled to the communications channels. The gateway is configured to buffer a packet that is received over one of the communications channel from a first host in a queue and to determine a window value for maximizing transmission rate based upon occupancy of the queue. The gateway is configured to a second host according to a prescribed protocol to force use of the determined window value in the second host over another one of the communications channels. The present invention has particular applicability to an asymmetric bandwidth network, such as a two-way satellite system.

Abstract: An apparatus for transmitting and receiving signals over a two-way satellite communication system is disclosed. A receiving unit receives data from a user terminal. A transmitting unit is coupled to the receiving unit and transmits the data to an antenna. The data is transmitted over a return channel that is established over the satellite to a hub; the hub has connectivity to a packet switched network.

Abstract: An approach is provided for providing quality of service reservations in a packet-based radio communication network is disclosed. Connection information including connection rate is extracted from a dataflow from an application requesting connection-oriented service. A request message is sent to a proxy for establishing a connection based on the connection information over the network, wherein the proxy configures a classification rule based on flow criteria from the request message and accordingly initiates establishment of the connection over the network to a destination terminal. A confirmation that the connection can be established is selectively received according to the connection information, wherein the dataflow satisfying the flow criteria from the application is transported over the established connection to the destination terminal. This approach as particular applicability to shared capacity systems, such as a satellite communication system.

Abstract: A system in which a personal computer sends messages into a TCP/IP network using a conventional dial-up link and downloads data from the TCP/IP network using a high-speed one-way satellite link. A preferred embodiment uses a conventional SLIP provider to connect to the TCP/IP network and uses a commercial software TCP/IP package that has a standard driver interface. A spoofing protocol compensates for the long propagation delays inherent to satellite communication.

Abstract: An approach is provided for supporting retrieval of a web page over a data network from a web site is disclosed. A downstream proxy communicating with a host executing a browser receives a request message from a browser to retrieve the web page. An upstream proxy parses the web page to determine an object embedded in the web page, wherein a promise list is generated specifying the embedded object that is to be pre-fetched according to a criterion. The promise list is transmitted to the downstream proxy, wherein the upstream proxy pre-fetches the embedded object from the web site. The upstream proxy determines whether to forward one of the pre-fetched embedded object to the downstream proxy based on a comparison of cookies associated with one of the pre-fetched objects supplied, respectively, by the browser and the web site. This approach as particular applicability in relatively high latency networks, such as a satellite communications system.

Abstract: A communication system for retrieving web content is disclosed. A downstream proxy server receives a URL request message from a web browser, in which the URL request message specifies a URL content that has an embedded object. An upstream proxy server receives the URL request message from the downstream proxy server. The upstream proxy server selectively forwards the URL request message to a web server and receives the URL content from the web server, wherein the upstream proxy server forwards the URL content to the downstream proxy server and parses the URL content to obtain the embedded object prior to receiving a corresponding embedded object request message initiated by the web browser.

Abstract: An approach is provided for multicasting of a list of network addresses that are pre-loaded into caches of the terminals. The list can be generated based on popularity of the domain names, by tracking, for example, hit counts. A predetermined number of the domain names are selected for multicast to the terminals over, for example, a fixed, low bit rate. Upon receipt of the multicast of the list, the domain names are loaded into the terminal's cache in advance of any request by a host to access a device associated with the pre-loaded domain names. This approach as particular applicability in relatively high latency networks, such as a satellite communications system.

Abstract: An approach is provided for managing bandwidth in a data network. Capacity is allocated on a communication channel, which can be utilized for transporting data traffic or support network administrative functions (e.g., ranging), for a terminal to transmit data over the communication channel. In anticipation of the terminal having to transmit additional data, additional capacity is allocated on the communication channel for the terminal prior to receiving a request for bandwidth by the terminal. The anticipatory allocation is determined according to loading of the data network. This approach as particular applicability to shared capacity systems, such as a satellite communication system.

Abstract: An approach for enhancing performance of an access network (e.g., a satellite network) in a secure environment (e.g., Virtual Private Network (VPN)) is disclosed. A plurality of connections is established with respective peer nodes over the network. Each of the peers is configured to provide performance enhancing functions for the network via the connections. The approach enables selection of one of the connections, such that the selected connection includes a secure tunnel to the peer associated with the selected connection.

Abstract: An approach for providing access in a communications system is disclosed. A network node (or terminal) generates duplicate bursts. The network node then transmits the duplicate bursts over a contention channel according to a pre-determined quality-of-service (QoS) designation. The contention channel can be established based on a diversity ALOHA protocol. The present invention has particular applicability to a radio communications system, such as a satellite network that provides data communication services.

Abstract: An approach for supporting security in a communications network is disclosed. A network device includes a security peer that establishes a secure tunnel over a data network (e.g., satellite network) for transport of encrypted traffic. The device also includes a performance peer for establishing a connection supported by the secure tunnel. The performance peer includes a plurality of modules for providing respective performance enhancing functions to minimize performance impact of latency of the network.

Abstract: An approach for adaptively providing network performance enhancing functions in a secure environment, such as a virtual private network, is disclosed. Traffic, for example, Internet Protocol (IP) packets, is received for transport over an access network (e.g., satellite network). Next, characteristics (e.g., latency) of the access network are determined. A connection (which supports the performance enhancing functions) is selectively established based on the determined characteristics for transport the received packets over the access network. An encrypted tunnel is provided over the established connection to transmit the received packets.

Abstract: An approach for providing integrated firewall and network acceleration functions is disclosed. An integrated firewall and network accelerator filters packets received from a host, according to a security policy, to establish a connection for accelerating the filtered packets over a network (e.g., satellite network). The method further includes selectively triggering establishment of a tunnel (e.g., Virtual Private Network (VPN) tunnel) over the established connection, wherein the filtered packets are encrypted through the tunnel.

Abstract: An approach is provided for shaping traffic of a communication system. Resource usage of a network element of the communication system is determined. The usage is compared with thresholds that are established according to loading of the communication system; these thresholds correspond to various transmission states that limit usage of the resources of the communication system (e.g., bandwidth). Further, based on the comparison, the resource usage of the network element is controlled according to a particular transmission state, thereby ensuring fair access. This approach as particular applicability to shared capacity systems, such as a satellite communication system.