Abstract: An approach is provided for delivering high throughput inroute bandwidth to a terminal in a shared bandwidth satellite communications system. A backlog level of each of a number of remote terminals is monitored, wherein the backlog level of each terminal reflects an amount of data traffic awaiting transmission via an inroute channel of the communications system. When it is determined that the backlog level of one terminal meets a first threshold level, the terminal is assigned to an express priority bandwidth allocation stage. The backlog level of the terminal is monitored while assigned to the express priority stage. When it is determined that the backlog level of the terminal has fallen below a second threshold level, the terminal is removed from the express priority stage. Further, a probability is applied to a qualifying terminal, where the probability controls whether the terminal is assigned to the express priority bandwidth stage.

Abstract: An approach is provided for bandwidth allocation on a per terminal utilization and per inroute/inroute group basis, which optimizes bandwidth utilization. An aggregate average bandwidth usage of a plurality of remote terminals over a wireless communications channel is determined. A maximum rate for bandwidth allocations to each of the remote terminals for respective data transmissions over the channel is determined. A utilization metric reflecting a bandwidth utilization by one of the remote terminals for data transmissions over the channel is determined. An updated rate for bandwidth allocations to the one terminal is determined based on the utilization metric for the terminal, a target bandwidth utilization and tolerance range for the one terminal, and the maximum rate for the data allocations to each of the remote terminals. The updated rate for the bandwidth allocations to the one terminal is applied to subsequent bandwidth allocations for the one terminal.

Abstract: Methods and apparatus for performing dynamic load balancing across transmission channels in a communications system, for loads of multiple priorities for a plurality of terminals are provided. Priority levels for a plurality of traffic flows from the plurality of terminals are determined, and the traffic flows are assigned to a plurality of transmission channels to load balance the traffic flows based on the determined priority levels. The load balancing includes generating a load vector for each of the transmission channels, and determining a load balancing target for the load vectors. The load balancing further includes determining a centroid point for the generated load vectors, wherein the centroid point is the load balancing target, and iteratively converging to the centroid point as the load balancing target by determining cancellation pairs for the load vectors, to balance loads of multiple priorities.

Abstract: An approach for providing secure communication services is disclosed. A secure data tunnel from a source node to a destination node is established via a plurality of secure segments across a data communications network. A data path is established via the secure data tunnel, where the data path supports a performance enhancing mechanism that improves performance of data communications over the data path. The performance enhancing mechanism multiplexes data packet flows from the source node for transmission over the data path, and performs one or more of connection startup latency reduction, acknowledgment message spoofing, window sizing adjustment, compression and selective retransmission.

Abstract: An approach for providing secure communication services is disclosed. A secure (e.g., a Virtual Private Network (VPN)) tunnel from a source node over an access network, such as a satellite network, to a destination node, wherein the nodes are external to the network. A connection that supports a mechanism for enhancing performance of the network is established for a portion of the secure tunnel that traverses the network.

Abstract: A method for traffic management and resource allocation on a shared access network including estimating a bandwidth capacity of a gateway, determining a demand rate of an IP gateway, allocating bandwidth to the IP gateway based on the demand rate, traffic priority, or traffic weighting, allocating bandwidth to the IP gateway in advance of demand when excess bandwidth is available, scheduling traffic at the IP gateway based on traffic priority, service plan of a VSAT, or physical layer properties of the VSAT, performing priority queue servicing of traffic at a gateway using a real time traffic priority queue, a non-real time traffic priority queue, two or more modulation and coding queue groups, and a code block queue.

Abstract: A method for traffic management and resource allocation on a shared access network including estimating a bandwidth capacity of a gateway, determining a demand rate of an IP gateway, allocating bandwidth to the IP gateway based on the demand rate, traffic priority, or traffic weighting, allocating bandwidth to the IP gateway in advance of demand when excess bandwidth is available, scheduling traffic at the IP gateway based on traffic priority, service plan of a VSAT, or physical layer properties of the VSAT, performing priority queue servicing of traffic at a gateway using a real time traffic priority queue, a non-real time traffic priority queue, two or more modulation and coding queue groups, and a code block queue.

Abstract: A method for controlling data traffic with random early detection and window size adjustments including performing random early detection on incoming data packets, calculating a simple moving average of packet dropping probabilities for the data packets as calculated when performing random early detection, decreasing an advertised window size if the simple moving average is greater than a probability target plus a tolerance factor, increasing the advertised window size if the simple moving average is less than the probability target minus a tolerance factor, and not adjusting the window size if the simple moving average is not greater than a probability target plus a tolerance factor and not less than a probability target minus a tolerance factor.

Abstract: A method for inroute bandwidth allocation supporting multiple traffic priorities in a satellite network including generating a backlog report, transmitting the backlog report to an inroute group manager, receiving a bandwidth allocation from the inroute group manager, and servicing priority queues and transmitting data to a satellite based on the bandwidth allocation from the inroute group manager.

Abstract: A method for traffic management and resource allocation on a shared access network including estimating a bandwidth capacity of a gateway, determining a demand rate of an IP gateway, allocating bandwidth to the IP gateway based on the demand rate, traffic priority, or traffic weighting, allocating bandwidth to the IP gateway in advance of demand when excess bandwidth is available, scheduling traffic at the IP gateway based on traffic priority, service plan of a VSAT, or physical layer properties of the VSAT, performing priority queue servicing of traffic at a gateway using a real time traffic priority queue, a non-real time traffic priority queue, two or more modulation and coding queue groups, and a code block queue.

Abstract: A system and method for association of remote nodes with respective aggregation nodes in a high capacity shared bandwidth communications network, which meets various requirements and desires associated with efficient, robust, reliable and flexible broadband services, and which is relatively efficient and automated from a network management and load balancing standpoint, is provided. A remote node receives a message transmitted by a gateway over the communications network, wherein the message includes service codes identifying one or more service capabilities of the gateway. The remote node determines, based on the service codes, whether the gateway is an eligible gateway for servicing one or more service requirements of the remote node. The remote node then adds the gateway to a pool of eligible gateways within the communications network.

Abstract: A method and apparatus for dynamically balancing traffic loads in a communications system (such as satellite communications systems), based on a control of collision rates via the real-time control of throughput of channels of the communications system (such as a real time throughput of random access channels in a satellite network). The method and apparatus generates and transmits to remote nodes or terminals an operating probability based on the determined throughput for transmission using the communications channel. Also, the method and apparatus includes receiving by at least one terminal the generated operating probability and determining by the at least one terminal a transmission probability for the communications channel based upon the received operating probability, which can further be adjusted by one or more of a received upper or lower limit of the generated operating probability or a collision rate for the communications channel.

Abstract: Methods and apparatus for performing dynamic load balancing across transmission channels in a communications system, for loads of multiple priorities for a plurality of terminals are provided. Priority levels for a plurality of traffic flows from the plurality of terminals are determined, and the traffic flows are assigned to a plurality of transmission channels to load balance the traffic flows based on the determined priority levels. The load balancing includes generating a load vector for each of the transmission channels, and determining a load balancing target for the load vectors. The load balancing further includes determining a centroid point for the generated load vectors, wherein the centroid point is the load balancing target, and iteratively converging to the centroid point as the load balancing target by determining cancellation pairs for the load vectors, to balance loads of multiple priorities.

Abstract: A method for inroute bandwidth allocation supporting multiple traffic priorities in a satellite network including generating a backlog report, transmitting the backlog report to an inroute group manager, receiving a bandwidth allocation from the inroute group manager, and servicing priority queues and transmitting data to a satellite based on the bandwidth allocation from the inroute group manager.

Abstract: A method for traffic management and resource allocation on a shared access network including estimating a bandwidth capacity of a gateway, determining a demand rate of an IP gateway, allocating bandwidth to the IP gateway based on the demand rate, traffic priority, or traffic weighting, allocating bandwidth to the IP gateway in advance of demand when excess bandwidth is available, scheduling traffic at the IP gateway based on traffic priority, service plan of a VSAT, or physical layer properties of the VSAT, performing priority queue servicing of traffic at a gateway using a real time traffic priority queue, a non-real time traffic priority queue, two or more modulation and coding queue groups, and a code block queue.

Abstract: A method for controlling data traffic with random early detection and window size adjustments including performing random early detection on incoming data packets, calculating a simple moving average of packet dropping probabilities for the data packets as calculated when performing random early detection, decreasing an advertised window size if the simple moving average is greater than a probability target plus a tolerance factor, increasing the advertised window size if the simple moving average is less than the probability target minus a tolerance factor, and not adjusting the window size if the simple moving average is not greater than a probability target plus a tolerance factor and not less than a probability target minus a tolerance factor.

Abstract: Method and apparatus for enhancing the performance of a network. The performance enhancing functions described are applicable to a wide variety of communication links, including both slow and fast links, high latency links, and links with low and high error rates. The performance enhancing functions, which may be implemented either singly or in combination, include selective spoofing which allows flexible configuration of which connections should be spoofed, spoofing of the conventional TCP three-way handshake, local data acknowledgement, which allows data windows to increase at local speeds, multiplexing multiple connections across a single connection, data compression/encryption, prioritization, and path selection. The performance enhancing features described are particularly useful for links with high latency and/or high bit error rates.

Abstract: A communication system for retrieving content stored in a content server (e.g., web server) is disclosed. The system includes a client that is configured to transmit a message requesting content specifying an object from a content server. The system also includes a plurality of proxy servers that include a downstream proxy server and an upstream proxy server. The downstream proxy server is configured to communicate with the client. The upstream proxy server is configured to retrieve the content from the content server and to forward information associated with the object over a data network to the downstream proxy server prior to the client transmitting another message requesting the object. The above arrangement has particular application to a wide area network, such as a satellite network.

Abstract: An approach for adaptively providing network performance enhancing functions in a secure environment, such as a virtual private network, is disclosed. Traffic, for example, Internet Protocol (IP) packets, is received for transport over an access network (e.g., satellite network). Next, characteristics (e.g., latency) of the access network are determined. A connection (which supports the performance enhancing functions) is selectively established based on the determined characteristics for transport the received packets over the access network. An encrypted tunnel is provided over the established connection to transmit the received packets.

Abstract: A communication system having a proxy architecture is disclosed. The system includes a platform that provides performance enhancing functions. The platform includes a spoofing apparatus that routes the information within the communication system. The spoofing apparatus receives spoofing selection and spoofing parameters from the platform and maintains the current parameters in one or more spoofing profiles. The spoofing apparatus routes packets of information throughout the communication system based on the spoofing selection and/or spoofing profile. The spoofing apparatus may also compensate for maximum segment size mismatches during the routing of information. This compensation may include dynamically resizing data segments or disabling three-way handshake spoofing. The above arrangement has particular applicability to a bandwidth constrained communication system, such as a satellite network.