Abstract: A method for traffic management and resource allocation on a shared access network including estimating a bandwidth capacity of a gateway, determining a demand rate of an IP gateway, allocating bandwidth to the IP gateway based on the demand rate, traffic priority, or traffic weighting, allocating bandwidth to the IP gateway in advance of demand when excess bandwidth is available, scheduling traffic at the IP gateway based on traffic priority, service plan of a VSAT, or physical layer properties of the VSAT, performing priority queue servicing of traffic at a gateway using a real time traffic priority queue, a non-real time traffic priority queue, two or more modulation and coding queue groups, and a code block queue.

Abstract: A method for traffic management and resource allocation on a shared access network including estimating a bandwidth capacity of a gateway, determining a demand rate of an IP gateway, allocating bandwidth to the IP gateway based on the demand rate, traffic priority, or traffic weighting, allocating bandwidth to the IP gateway in advance of demand when excess bandwidth is available, scheduling traffic at the IP gateway based on traffic priority, service plan of a VSAT, or physical layer properties of the VSAT, performing priority queue servicing of traffic at a gateway using a real time traffic priority queue, a non-real time traffic priority queue, two or more modulation and coding queue groups, and a code block queue.

Abstract: A method for controlling data traffic with random early detection and window size adjustments including performing random early detection on incoming data packets, calculating a simple moving average of packet dropping probabilities for the data packets as calculated when performing random early detection, decreasing an advertised window size if the simple moving average is greater than a probability target plus a tolerance factor, increasing the advertised window size if the simple moving average is less than the probability target minus a tolerance factor, and not adjusting the window size if the simple moving average is not greater than a probability target plus a tolerance factor and not less than a probability target minus a tolerance factor.

Abstract: A method for inroute bandwidth allocation supporting multiple traffic priorities in a satellite network including generating a backlog report, transmitting the backlog report to an inroute group manager, receiving a bandwidth allocation from the inroute group manager, and servicing priority queues and transmitting data to a satellite based on the bandwidth allocation from the inroute group manager.

Abstract: A method for traffic management and resource allocation on a shared access network including estimating a bandwidth capacity of a gateway, determining a demand rate of an IP gateway, allocating bandwidth to the IP gateway based on the demand rate, traffic priority, or traffic weighting, allocating bandwidth to the IP gateway in advance of demand when excess bandwidth is available, scheduling traffic at the IP gateway based on traffic priority, service plan of a VSAT, or physical layer properties of the VSAT, performing priority queue servicing of traffic at a gateway using a real time traffic priority queue, a non-real time traffic priority queue, two or more modulation and coding queue groups, and a code block queue.

Abstract: A system and method for association of remote nodes with respective aggregation nodes in a high capacity shared bandwidth communications network, which meets various requirements and desires associated with efficient, robust, reliable and flexible broadband services, and which is relatively efficient and automated from a network management and load balancing standpoint, is provided. A remote node receives a message transmitted by a gateway over the communications network, wherein the message includes service codes identifying one or more service capabilities of the gateway. The remote node determines, based on the service codes, whether the gateway is an eligible gateway for servicing one or more service requirements of the remote node. The remote node then adds the gateway to a pool of eligible gateways within the communications network.

Abstract: A method and apparatus for dynamically balancing traffic loads in a communications system (such as satellite communications systems), based on a control of collision rates via the real-time control of throughput of channels of the communications system (such as a real time throughput of random access channels in a satellite network). The method and apparatus generates and transmits to remote nodes or terminals an operating probability based on the determined throughput for transmission using the communications channel. Also, the method and apparatus includes receiving by at least one terminal the generated operating probability and determining by the at least one terminal a transmission probability for the communications channel based upon the received operating probability, which can further be adjusted by one or more of a received upper or lower limit of the generated operating probability or a collision rate for the communications channel.

Abstract: Methods and apparatus for performing dynamic load balancing across transmission channels in a communications system, for loads of multiple priorities for a plurality of terminals are provided. Priority levels for a plurality of traffic flows from the plurality of terminals are determined, and the traffic flows are assigned to a plurality of transmission channels to load balance the traffic flows based on the determined priority levels. The load balancing includes generating a load vector for each of the transmission channels, and determining a load balancing target for the load vectors. The load balancing further includes determining a centroid point for the generated load vectors, wherein the centroid point is the load balancing target, and iteratively converging to the centroid point as the load balancing target by determining cancellation pairs for the load vectors, to balance loads of multiple priorities.

Abstract: A method for inroute bandwidth allocation supporting multiple traffic priorities in a satellite network including generating a backlog report, transmitting the backlog report to an inroute group manager, receiving a bandwidth allocation from the inroute group manager, and servicing priority queues and transmitting data to a satellite based on the bandwidth allocation from the inroute group manager.

Abstract: A method for traffic management and resource allocation on a shared access network including estimating a bandwidth capacity of a gateway, determining a demand rate of an IP gateway, allocating bandwidth to the IP gateway based on the demand rate, traffic priority, or traffic weighting, allocating bandwidth to the IP gateway in advance of demand when excess bandwidth is available, scheduling traffic at the IP gateway based on traffic priority, service plan of a VSAT, or physical layer properties of the VSAT, performing priority queue servicing of traffic at a gateway using a real time traffic priority queue, a non-real time traffic priority queue, two or more modulation and coding queue groups, and a code block queue.

Abstract: A method for controlling data traffic with random early detection and window size adjustments including performing random early detection on incoming data packets, calculating a simple moving average of packet dropping probabilities for the data packets as calculated when performing random early detection, decreasing an advertised window size if the simple moving average is greater than a probability target plus a tolerance factor, increasing the advertised window size if the simple moving average is less than the probability target minus a tolerance factor, and not adjusting the window size if the simple moving average is not greater than a probability target plus a tolerance factor and not less than a probability target minus a tolerance factor.

Abstract: Method and apparatus for enhancing the performance of a network. The performance enhancing functions described are applicable to a wide variety of communication links, including both slow and fast links, high latency links, and links with low and high error rates. The performance enhancing functions, which may be implemented either singly or in combination, include selective spoofing which allows flexible configuration of which connections should be spoofed, spoofing of the conventional TCP three-way handshake, local data acknowledgement, which allows data windows to increase at local speeds, multiplexing multiple connections across a single connection, data compression/encryption, prioritization, and path selection. The performance enhancing features described are particularly useful for links with high latency and/or high bit error rates.

Abstract: A communication system for retrieving content stored in a content server (e.g., web server) is disclosed. The system includes a client that is configured to transmit a message requesting content specifying an object from a content server. The system also includes a plurality of proxy servers that include a downstream proxy server and an upstream proxy server. The downstream proxy server is configured to communicate with the client. The upstream proxy server is configured to retrieve the content from the content server and to forward information associated with the object over a data network to the downstream proxy server prior to the client transmitting another message requesting the object. The above arrangement has particular application to a wide area network, such as a satellite network.

Abstract: An approach for adaptively providing network performance enhancing functions in a secure environment, such as a virtual private network, is disclosed. Traffic, for example, Internet Protocol (IP) packets, is received for transport over an access network (e.g., satellite network). Next, characteristics (e.g., latency) of the access network are determined. A connection (which supports the performance enhancing functions) is selectively established based on the determined characteristics for transport the received packets over the access network. An encrypted tunnel is provided over the established connection to transmit the received packets.

Abstract: A communication system having a proxy architecture is disclosed. The system includes a platform that provides performance enhancing functions. The platform includes a spoofing apparatus that routes the information within the communication system. The spoofing apparatus receives spoofing selection and spoofing parameters from the platform and maintains the current parameters in one or more spoofing profiles. The spoofing apparatus routes packets of information throughout the communication system based on the spoofing selection and/or spoofing profile. The spoofing apparatus may also compensate for maximum segment size mismatches during the routing of information. This compensation may include dynamically resizing data segments or disabling three-way handshake spoofing. The above arrangement has particular applicability to a bandwidth constrained communication system, such as a satellite network.

Abstract: An approach for supporting security in a communications network is disclosed. A network device includes a security peer that establishes a secure tunnel over a data network (e.g., satellite network) for transport of encrypted traffic. The device also includes a performance peer for establishing a connection supported by the secure tunnel. The performance peer includes a plurality of modules for providing respective performance enhancing functions to minimize performance impact of latency of the network.

Abstract: An approach for adaptively providing network performance enhancing functions in a secure environment, such as a virtual private network, is disclosed. Traffic, for example, Internet Protocol (IP) packets, is received for transport over an access network (e.g., satellite network). Next, characteristics (e.g., latency) of the access network are determined. A connection (which supports the performance enhancing functions) is selectively established based on the determined characteristics for transport the received packets over the access network. An encrypted tunnel is provided over the established connection to transmit the received packets.

Abstract: An approach for routing over a radio network is provided. A terminal receives a packet over the radio network, which supports meshed connectivity, wherein the packet is destined for a destination host. The terminal determines whether the destination host is reachable by a communication interface based upon a route table, and selectively redirects the packet over the radio network according to the route table. A route server is provided to collect routes from the terminal as well as other terminals within the radio network. The route server then disseminates the collect routes to the terminals for updating of their respective route tables. The present invention has particular applicability to a fully meshed satellite network.

Abstract: An approach is provided for supporting retrieval of a web page over a data network from a web site is disclosed. A downstream proxy communicating with a host executing a browser receives a request message from a browser to retrieve the web page. An upstream proxy parses the web page to determine an object embedded in the web page, wherein a promise list is generated specifying the embedded object that is to be pre-fetched according to a criterion. The promise list is transmitted to the downstream proxy, wherein the upstream proxy pre-fetches the embedded object from the web site. The upstream proxy determines whether to forward one of the pre-fetched embedded object to the downstream proxy based on a comparison of cookies associated with one of the pre-fetched objects supplied, respectively, by the browser and the web site. This approach as particular applicability in relatively high latency networks, such as a satellite communications system.

Abstract: An approach for adaptively providing network performance enhancing functions in a secure environment, such as a virtual private network, is disclosed. Traffic, for example, Internet Protocol (IP) packets, is received for transport over an access network (e.g., satellite network). Next, characteristics (e.g., latency) of the access network are determined. A connection (which supports the performance enhancing functions) is selectively established based on the determined characteristics for transport the received packets over the access network. An encrypted tunnel is provided over the established connection to transmit the received packets.