Abstract: A default gateway router of a multi-homed site is configured for supplying, to a host device, a plurality of address prefixes having been advertised by respective exit routers providing respective connecting links for the multi-homed site to a wide area network. The default gateway router sends the address prefixes to the host device in a determined order based on a determined preference in the default gateway router for reaching the respective exit routers. The host device is configured for selecting a source address according to the determined order supplied by the default gateway router. The address also prefixes may be grouped according to identified destination prefixes, enabling the host device to select, for a given identified destination prefix, the source address according to the ordering of address prefixes within the corresponding group.

Abstract: A mobile router and a correspondent router, each configured for routing services for nodes within their routing prefixes associated with their respective routing tables, establish a secure, bidirectional tunnel based on a messaging protocol between each other and a route server resource. A reactive (i.e., on-demand) protocol is used that enables the requesting device (e.g, the mobile router, correspondent router), to obtain routing information in a secure manner from the route server. The mobile router sends a query via its home agent to the route server resource to identify the correspondent router serving the correspondent node. The mobile router sends a binding update request, specifying a home address and care-of address for the mobile router, to the correspondent router for establishment of a bidirectional tunnel. The correspondent router establishes the bidirectional tunnel, and updates its routing tables based on information from the route server resource.

Abstract: Each network node having at least one destination-oriented link toward a directed acyclic graph (DAG) destination can receive a corresponding set of path performance metrics via the destination-oriented link. The set of path performance metrics, initiated by the DAG destination outputting initial link metrics on each of its source-connecting links, identifies aggregate link metrics for a corresponding path to the DAG destination via the corresponding destination-oriented link. The network node outputs a corresponding updated set of path performance metrics on each of its source-connecting links based on the received set of path performance metrics and the corresponding link metric for the corresponding source-connecting link. Hence, each network node in the DAG can assess the performance of each connected path to the DAG destination, and forward a data packet via a selected destination-oriented link based on the corresponding path performance metrics and forwarding policies for the forwarded data packet.

Abstract: A router is configured for sharing routing rules with other routers, the routing rules defining aggregated routes according to a prescribed topology. Each routing rule, used by the router for routing a packet having a corresponding matching destination address prefix, specifies a corresponding address prefix pattern rule for extracting an identified pattern from a portion of the destination address, and a gateway address pattern rule for generating a gateway address, for a gateway providing reachability to the destination address, based on applying the identified pattern to a specified portion of the gateway address. The router generates a routing update message that describes the address prefix pattern rule and the gateway address pattern rule, and outputs the routing update message to a second router according to a prescribed distance vector routing protocol (e.g., Multiprotocol Extension for Border Gateway Protocol).

Abstract: Each network node having at least one destination-oriented link toward a directed acyclic graph (DAG) destination can receive a corresponding set of path performance metrics via the destination-oriented link. The set of path performance metrics, initiated by the DAG destination outputting initial link metrics on each of its source-connecting links, identifies aggregate link metrics for a corresponding path to the DAG destination via the corresponding destination-oriented link. The network node outputs a corresponding updated set of path performance metrics on each of its source-connecting links based on the received set of path performance metrics and the corresponding link metric for the corresponding source-connecting link. Hence, each network node in the DAG can assess the performance of each connected path to the DAG destination, and forward a data packet via a selected destination-oriented link based on the corresponding path performance metrics and forwarding policies for the forwarded data packet.

Abstract: Each network node in a network is configured for calculating a directed acyclic graph that provides at least one path from all the other network nodes toward the one network node. The network node performs a modified shortest path first calculation by identifying next-hop nodes adjacent to the network node, and orienting the link of each next-hop node toward itself (i.e., the origin). The network node also identifies secondary adjacent nodes, adjacent to each of the next hop nodes, and extends paths from next-hop nodes to the associated secondary adjacent nodes while orienting each of the links of the path between adjacent nodes and next-hop nodes toward the next hop nodes. The paths of the nodes form a directed acyclic graph from any other network node toward the origin, enabling distribution of the directed acyclic graph to the other network nodes for optimized reachability to the network node.

Abstract: A network includes network nodes and a gateway. Each network node has a corresponding unique in-site IPv6 address for communication within a prescribed site, each in-site IPv6 address having a first IPv6 address prefix that is not advertised outside of the prescribed site. Network nodes can obtain from within the prescribed site a unique extra-site IPv6 address for mobile or extra-site communications. The extra-site IPv6 address has a second IPv6 address prefix, distinct from the first IPv6 address prefix, advertised by the gateway to the prescribed site and the wide area network. The gateway establishes a secure connection (e.g., tunnel) with each corresponding IPv6 node using its corresponding extra-site IPv6 address, and creates a corresponding binding cache entry specifying the corresponding extra-site IPv6 address and in-site IPv6 address. Hence, the gateway provides wide area network access while maintaining secrecy of the in-site IPv6 addresses.

Abstract: Each router in a network is configured for executing a link state routing protocol based on outputting a corresponding first link state advertisement message describing a connected link of the router and that specifies a first dynamic routing metric identifying a first cost of the connected link, and a corresponding variation metric identifying a statistical variation of the dynamic routing metric. Each router also is configured for selectively outputting a corresponding second link state advertisement message describing the connected link and that specifies the corresponding variation metric and an updated dynamic routing metric identifying an updated cost of the connected link relative to the first cost, the second link state advertisement message selectively output based on the updated dynamic routing metric differing from the first dynamic routing metric by more than the variation metric, or the router having received another link state advertisement from another router in the network.

Abstract: A mobile router and a correspondent router, each configured for routing services for nodes within their routing prefixes associated with their respective routing tables, establish a secure, bidirectional tunnel based on a messaging protocol between each other and a route server resource having a prescribed security relationship with the mobile router and correspondent router. The mobile router sends a query via its home agent to the route server resource to identify the correspondent router serving the correspondent node. The mobile router sends a binding update request, specifying a home address and care-of address for the mobile router, to the correspondent router for establishment of a bidirectional tunnel. The correspondent router, upon validating the home address is reachable via the care-of address, establishes the bidirectional tunnel, and updates its routing tables to specify that prescribed address prefixes are reachable via the mobile router home address.

Abstract: A network includes network nodes and a gateway. Each network node has a corresponding unique in-site IPv6 address for communication within a prescribed site, each in-site IPv6 address having a first IPv6 address prefix that is not advertised outside of the prescribed site. Network nodes can obtain from within the prescribed site a unique extra-site IPv6 address for mobile or extra-site communications. The extra-site IPv6 address has a second IPv6 address prefix, distinct from the first IPv6 address prefix, advertised by the gateway to the prescribed site and the wide area network. The gateway establishes a secure connection (e.g., tunnel) with each corresponding IPv6 node using its corresponding extra-site IPv6 address, and creates a corresponding binding cache entry specifying the corresponding extra-site IPv6 address and in-site IPv6 address. Hence, the gateway provides wide area network access while maintaining secrecy of the in-site IPv6 addresses.

Abstract: Mobile routers in a tree-based network topology with a single clusterhead in an ad hoc network establish connectivity based on each attached mobile router sending a neighbor advertisement message to an attachment mobile router via a corresponding egress interface. Any neighbor advertisement message received by a mobile router is used to identify specified network prefixes that are reachable via the source of the neighbor advertisement message. Each attached mobile router outputs to its attachment router another neighbor advertisement message that specifies the network prefix used by the mobile router, and the specified network prefixes from its attached mobile routers. The mobile router also identifies peer mobile routers having the same depth, and selectively shares limited routing information with the peer routers, enabling the mobile router to bypass the clusterhead and reach remote prefixes via the peer routers without burdening the tree.

Abstract: A router (e.g., a home agent for an IPv6 mobile router) is configured for determining a destination router (e.g., the IPv6 mobile router) for a received packet based on accessing a routing table having multiple routing entries, each routing entry including a routing key and a routing field that specifies one of a prescribed address specifying the destination router and a computation tag. The computation tag specifies a prescribed function to be executed to calculate a determined address for the destination router (e.g., the home address for the IPv6 mobile router). The router identifies, for each received packet, the matching routing entry based on the corresponding routing key, and in response to detecting the computation tag in the routing field, selectively executes the corresponding function to calculate the determined address for the destination router.

Abstract: A method and system for controlling and guaranteeing a service level agreement (SLA) based on a communications outbound link bandwidth usage to a plurality of customers having electronic business activity hosted by at least one server as a server farm, includes monitoring the outbound communications bandwidth usage by each customer traffic to determine a level of service being provided to each customer with respect to the agreed service level agreement in each service cycle time per unit of time. The flow of incoming requests to each customer business activity application is controlled so as to guarantee a level of service previously agreed to the customer by queuing requests to the customer and by selectively dropping requests to the customer to guarantee the agreed service levels to the customer. The controlling process controls and guarantees each outbound link usage based service level agreement by controlling the flow of incoming requests to the at least one server.

Abstract: A mobile router and a correspondent router, each configured for routing services for nodes within their routing prefixes associated with their respective routing tables, establish a secure, bidirectional tunnel based on a messaging protocol between each other and a route server resource. A reactive (i.e., on-demand) protocol is used that enables the requesting device (e.g, the mobile router, correspondent router), to obtain routing information in a secure manner from the route server. The mobile router sends a query via its home agent to the route server resource to identify the correspondent router serving the correspondent node. The mobile router sends a binding update request, specifying a home address and care-of address for the mobile router, to the correspondent router for establishment of a bidirectional tunnel. The correspondent router establishes the bidirectional tunnel, and updates its routing tables based on information from the route server resource.

Abstract: A router is configured for sharing routing rules with other routers, the routing rules defining aggregated routes according to a prescribed topology. Each routing rule, used by the router for routing a packet having a corresponding matching destination address prefix, specifies a corresponding address prefix pattern rule for extracting an identified pattern from a portion of the destination address, and a gateway address pattern rule for generating a gateway address, for a gateway providing reachability to the destination address, based on applying the identified pattern to a specified portion of the gateway address. The router generates a routing update message that describes the address prefix pattern rule and the gateway address pattern rule, and outputs the routing update message to a second router according to a prescribed distance vector routing protocol (e.g., Multiprotocol Extension for Border Gateway Protocol).

Abstract: A mobile router and a correspondent router, each configured for routing services for nodes within their routing prefixes associated with their respective routing tables, establish a secure, bidirectional tunnel based on a messaging protocol between each other and a route server resource having a prescribed security relationship with the mobile router and correspondent router. The mobile router sends a query via its home agent to the route server resource to identify the correspondent router serving the correspondent node. The mobile router sends a binding update request, specifying a home address and care-of address for the mobile router, to the correspondent router for establishment of a bidirectional tunnel. The correspondent router, upon validating the home address is reachable via the care-of address, establishes the bidirectional tunnel, and updates its routing tables to specify that prescribed address prefixes are reachable via the mobile router home address.

Abstract: A router (e.g., a home agent for an IPv6 mobile router) is configured for determining a destination router (e.g., the IPv6 mobile router) for a received packet based on accessing a routing table having multiple routing entries, each routing entry including a routing key and a routing field that specifies one of a prescribed address specifying the destination router and a computation tag. The computation tag specifies a prescribed function to be executed to calculate a determined address for the destination router (e.g., the home address for the IPv6 mobile router). The router identifies, for each received packet, the matching routing entry based on the corresponding routing key, and in response to detecting the computation tag in the routing field, selectively executes the corresponding function to calculate the determined address for the destination router.

Abstract: A system and method for hierarchically caching objects includes one or more level 1 nodes, each including at least one level 1 cache; one or more level 2 nodes within which the objects are permanently stored or generated upon request, each level 2 node coupled to at least one of the one or more level 1 nodes and including one or more level 2 caches; and means for storing, in a coordinated manner, one or more objects in at least one level 1 cache and/or at least one level 2 cache, based on a set of one or more criteria.

Abstract: A system and method for hierarchically caching objects includes one or more level 1 nodes, each including at least one level 1 cache; one or more level 2 nodes within which the objects are permanently stored or generated upon request, each level 2 node coupled to at least one of the one or more level 1 nodes and including one or more level 2 caches; and means for storing, in a coordinated manner, one or more objects in at least one level 1 cache and/or at least one level 2 cache, based on a set of one or more criteria.

Abstract: A system and method for hierarchically caching objects includes one or more level 1 nodes, each including at least one level 1 cache; one or more level 2 nodes within which the objects are permanently stored or generated upon request, each level 2 node coupled to at least one of the one or more level 1 nodes and including one or more level 2 caches; and a storage control device for storing, in a coordinated manner, one or more objects in at least one level 1 cache and/or at least one level 2 cache, based on a set of one or more criteria.