Abstract: A method and system for processing Domain name Services (DNS) request in a gateway with at least one local area network (LAN) interface and at least one wide area network (WAN) interface. The gateway receives a first DNS request from a first host via one of the at least one LAN interface of the gateway. The gateway then selects a plurality of DNS servers. At least one of the plurality of DNS server is accessible through at least one tunnel. The gateway transmits a plurality of new DNS requests to the plurality of DNS servers. The contents of the plurality of new DNS requests are the same as the content of the first DNS request.

Abstract: The present disclosure provides for devices, systems, and methods which optimize throughput of bonded connections over multiple variable bandwidth logical paths by adjusting a tunnel bandwidth weighting schema during a data transfer session in response to a change in bandwidth capabilities of one or more tunnels. By making such adjustments, embodiments of the present invention are able to optimize the bandwidth potential of multiple connections being used in a session, while minimizing the adverse consequences of reduced bandwidth issues which may occur during the data transfer session.

Abstract: Methods and systems for processing Domain Name Service (DNS) request in a gateway with a plurality of WAN network interfaces. After receiving a first DNS request via one of network interfaces of the gateway, the gateway selects at least one DNS server and at least one access network and then transmits a plurality of new DNS requests to the selected at least one DNS server through the selected at least one access network and via one of network interfaces of the gateway.

Abstract: A method and system for configuring a network device according to the identity of a plurality of removable wireless communications devices (RWCDs), the method comprising the steps of: determining the identities of the plurality of RWCDs; determining whether the network device is capable of using the plurality RWCDs; retrieving policy settings from an authorized party or a storage medium of the network device according to the identities of the plurality of RWCDs, determining priority of policy settings; and configuring the network device according to the policy settings. The priority of policy settings are based on the positions of the RWCDs when there are conflict among policy settings. The plurality of RWCDs are plugged to the network device and the network device provides wireless wide area network (WAN) connectivity through the plurality of RWCDs.

Abstract: The present invention discloses methods and systems carried out at a network device for reducing network congestion by establishing an aggregated connection, wherein the aggregated connection comprise a plurality of virtual private network (VPN) tunnels. The system further comprises assigning default weights to the plurality of VPN tunnels along with transmitting and receiving data packets of a data session through the aggregated connection. When there is a missing data packet in the received data packets, the missing data packet is recreated based on a previous or a next data packet. Furthermore the present invention discloses methods and systems for determining whether a VPN tunnel from the plurality of VPN tunnels is experiencing an unacceptable packet drop rate. If it is seen that a VPN tunnel is experiencing an unacceptable packet drop rate, an effective weight of the at least one VPN tunnel is decreased in order to overcome the setback.

Abstract: A method and system for transmitting and receiving data packets between two network nodes via one or more end-to-end connections. An interface is provided for selecting one or more possible end-to-end connection(s) or established end-to-end connection(s). The method and system may further comprise receiving a policy, wherein one or more selected end-to-end connections are established based, at least in part, on the policy. The policy may also restrict or promote selection of certain established end-to-end connection(s) via the interface provided. The selected and established end-to-end connection(s) are used for transmitting and receiving data packets.

Abstract: A method carried out by a first communication gateway for transmitting broadcast data. Broadcast data is first received through a first network interface. The first communication gateway determines whether the broadcast data satisfies at least one condition, and forwards the broadcast data through at least one tunnel and through a second network interface to a second communication gateway if the broadcast data satisfies the at least one condition. The broadcast data is encapsulated in at least one encapsulating packet and the at least one encapsulating packet is decapsulated by the second communication gateway in order to retrieve the broadcast data. The broadcast data is then distributed by the second communication gateway to a second network.

Abstract: The present disclosure provides for devices, systems, and methods which optimize throughput of bonded connections over multiple variable bandwidth logical paths by adjusting a tunnel bandwidth weighting schema during a data transfer session in response to a change in bandwidth capabilities of one or more tunnels. By making such adjustments, embodiments of the present invention are able to optimize the bandwidth potential of multiple connections being used in a session, while minimizing the adverse consequences of reduced bandwidth issues which may occur during the data transfer session.

Abstract: The present invention discloses methods and systems for processing data packets received at a first network node and for processing encapsulating packets received at a second network node. The first network node receives data packets from its network interface. It then selects a first tunnel and selects none or at least one second tunnel according to a selection policy. Original encapsulating packets (OEPs) are transmitted to a second network node through the first tunnel and at least one duplicate encapsulating packet (DEP) is transmitted through the at least one second tunnel. The second network node receives an encapsulating packet with a global sequence number (GSN) through an aggregated connection. The second network node determines whether one or more data packets corresponding to the encapsulating packet have been received earlier. The second network node may then determine whether or not to forward the one or more data packets.

Abstract: The present invention discloses methods and systems for configuring a second system. The system of the present invention determines the identity information of the second system and at least one configuration. The at least one configuration is then sent to the second system. The second system is configured with the at least one configuration. The at least one configuration can be sent through an SMS message, a USB modem plugged in the second system, or NFC. Additionally, the at least one configuration may comprise an APN. The at least one configuration may also be used to configure the second system to establish one or more VPN connections.

Abstract: The present invention discloses methods and systems for forwarding Internet Protocol (IP) data packets at a first network gateway. The first network gateway comprises a plurality of wide area network (WAN) network interfaces and at least one local area network (LAN) network interface. A first WAN network interface of the plurality of WAN network interfaces is not assigned with an IP address. When first IP data packets are received through the first WAN network interface, the first network gateway inspects the first IP data packets. The first IP data packets are forwarded through one of the at least one LAN network interfaces when it is determined not to intercept the first IP data packets. When the first network gateway receives second IP data packets through one of the at least one LAN network interface, the first network gateway inspects the second IP packets.

Abstract: The present invention discloses methods and systems for recreating missing data packets of a data session established between a first communications router and a second communications router through an aggregated connection. The first communications router receives data packets belonging to a data session from the second communications router through the aggregated connection. The data packets are destined to a first host reachable through the first communications router. The first communications router transmits the data packets to the first host and determines whether there is one or more missing data packets. If there is one or more missing data packets, the first communications router determines global sequence number(s) (GSN) and per tunnel sequence numbers (PTSN) of the one or more missing data packets and recreates payload(s) of the one or more missing data packet(s). One or more new data packets are then transmitted to the first host.

Abstract: The present invention discloses methods and systems for a VPN gateway to establish virtual private network (VPN) connections with at least one other VPN gateways. The VPN gateway determines that it is classified into a first VPN gateway group by a VPN management server, and the VPN gateway determines which other VPN gateways belong to the same first VPN gateway group. The VPN gateway then determines and sends information about the number of remaining possible VPN connections (RPVPNC) to the VPN management server, such that the VPN management server is able to send a first configuration to the first VPN gateway. The first VPN gateway is then configured according to the first configuration, and the first VPN gateway establishes VPN connections with other VPN gateways based on VPN connection topology, configuration, and number of RPVPNC of the first VPN gateway and other VPN gateways.

Abstract: Method and system for reduction of time variance of packets received from bonded communication links. Embodiments of present inventions can be applied to bonded communication links, including wireless connection, Ethernet connection, Internet Protocol connection, asynchronous transfer mode, virtual private network, WiFi, high-speed downlink packet access, GPRS, LTE, X.25 and etc. The present invention presents methods comprising the steps of determining latency difference among bonded communication links, receiving one or more packets from the bonded communication links, and delivering the one or more packets according to the latency difference.

Abstract: Methods and systems which receive and transmit an IP data packet at a network device via a first network interface if the IP data packet satisfies an interception policy, and via a second network interface if the IP data packet does not satisfy the interception policy. The decision to use the first network interface or the second network interface depends on whether the IP data packet satisfies the interception policy. The IP data packet is either received by the network device or created by the network device. If the IP data packet is created by the network device, the source address of the IP data packet is reachable via the first network interface. When the IP data packet is received by the network device and also satisfies the interception policy, another IP data packet is transmitted via the first network interface as a response and its source address is an IP address reachable via the first network interface. Its destination address is source address of the IP data packet received by the network device.

Abstract: The present invention discloses methods and systems for transmitting data packets from a first communications router to a second communications router through an aggregated connection comprising a plurality of tunnels. The first communications router receives a first data packet belonging to a data session from a first host. The first communications router then transmits the first data packet to the second communications router and stores the first data packet in a local storage medium. The first communications router determines whether an error correction mode is activated. If an error correction mode is activated, the first communications router retransmits the first data packet and also transmits an error correction packet corresponding to the first data packet.

Abstract: A method carried out by a network node for sending update messages to a server when a predefined event occurs or periodically. The network node comprises a plurality of network interfaces. The update message is embedded with a unique identifier corresponding to the network node, and a network interface identifier corresponding to at least one of the plurality of network interfaces. In particular, the network interface identifier is corresponding to network interface(s) at which a predefined event has occurred. The present invention further comprises a method carried out by a server for resolving a DNS request by retrieving DNS resource records of a network node and/or network interface specified in the DNS request, and replying to the DNS request with the DNS resource records. The DNS resource records are created based on in part at least one update message received from the network node.

Abstract: Methods and systems for forwarding data between a first network element and a terminal at a management server, comprising the steps of receiving a request from the terminal to communicate with the first network element during a first data session; determining whether a first connection has been established with the first network element; establishing the first connection with the first network element if the first connection has not been established with the first network element; and forwarding data between the first network element and the terminal using the first connection during the first data session.

Abstract: A method and system for processing Domain name Services (DNS) request in a gateway with at least one local area network (LAN) interface and at least one wide area network (WAN) interface. The gateway receives a first DNS request from a first host via one of the at least one LAN interface of the gateway. The gateway then selects a plurality of DNS servers. At least one of the plurality of DNS server is accessible through at least one tunnel. The gateway transmits a plurality of new DNS requests to the plurality of DNS servers. The contents of the plurality of new DNS requests are the same as the content of the first DNS request.

Abstract: The present invention discloses methods and systems for monitoring a network connected device by a monitoring server. The monitoring server sends notifications to the network connected device periodically according to a time interval. The time interval is set to a normal value and the notifications include a request for the monitoring data. Then the network connected device sends the monitoring data to monitoring server upon receiving the notifications. Monitoring server receives and stores the monitoring data from the network connected device. When one condition is satisfied, the time interval is changed to a lower value. Therefore, the frequency of sending notifications to network connected device from monitoring server is changed.