Abstract: The present invention discloses methods and systems for transmitting a received packet at a first network node through an aggregated connection. The first network node determines session information of the received packet and determines whether a new tunnel needs to be selected for transmitting the received packet. When a new tunnel needs to be selected, a hash result is determined. The hash result is substantially based on the session information and the number of available tunnels. A first tunnel is determined for transmitting the received packet according to the hash result. The session information and tunnel ID of the first tunnel is then stored in a first database. The received packet is transmitted through the first tunnel. When a new tunnel need not be selected, a lookup is performed to determine a tunnel ID substantially based on the session information. The received packet is transmitted through the determined tunnel.

Abstract: A network system and method regarding data flow transmission, including: a first network connection interface interconnecting with a transmitter; at least two second network connection interfaces interconnecting with a receiver through at least two access networks; and a control unit, used for receiving packets of a data flow from the transmitter by the first network connection interface, selecting an access network from the access networks connecting to the at least two second network connection interfaces to send the packets embedded with the packets of the data flow to the receiver, determining whether to generate at least one nominal reception acknowledgement message corresponding to the packets of the data flow, generating the nominal reception acknowledgement message on behalf receiver if it is determined to generate the nominal reception acknowledgement message, and sending the nominal reception acknowledgement message to the transmitter; and at least one storage medium.

Abstract: The present invention discloses methods and systems for managing VPN tunnels. A VPN concentrator establishes a first aggregated VPN connection and a second aggregated VPN connection with a first host and a first network device respectively. When the first aggregated VPN connection comprises a first plurality of VPN tunnels, the VPN concentrator applies uplink and downlink bandwidth limits to each of the plurality of VPN tunnels. Similarly, when the second aggregated VPN connection comprise a second plurality of VPN tunnels, the VPN concentrator applies uplink and downlink bandwidth limits to each of the plurality of VPN tunnels. The first host encapsulates a first data packet in a first encapsulating packet and transmits the first encapsulating packet to a VPN concentrator using a first aggregated VPN connection.

Abstract: The present invention discloses methods and systems for managing an error correction mode at a first communications router. The first communication router transmits data packets to a second communications router and stores the first data packet in a local storage medium, When a delay inquiry message is received from the second communications router, the first communications router activates the error correction mode. When the error correction mode is activated, the first data packet is retransmitted to the second communications router and an error correction packet corresponding to the first data packet is also transmitted. When a back-to-normal message is received from the second communications router, the first communications router deactivates the error correction mode. The back-to-normal message indicates that the first communications router no longer needs to be in error correction mode.

Abstract: A method and system for a first node to transmit packets to a second none, comprising receiving a packet from a local area network (LAN) interface, inspecting the packet; determining whether the packet satisfies at least one packet condition; transmitting the packet through a predefined tunnel if the packet satisfies the at least one packet condition; transmitting the packet through a second tunnel if the packet does not satisfy the at least one packet condition. The predefined tunnel is a first tunnel and is established before the packet is received by the first node. The second tunnel belongs to a first tunnel group or a second tunnel group. The first tunnel, the second tunnel and other tunnels may together form an aggregated connection. Further, the use of predefined tunnel may be based on whether the packets satisfy a session condition.

Abstract: A method and a first communications router for transmitting data packets to a second communications router by establishing an aggregated end-to-end connection with the second communications router. The aggregated end-to-end connection comprises a plurality of established end-to-end connections. Data packets are transmitted through a first established end-to-end connection when a first condition is satisfied, and through a second established end-to-end connection when a second condition is satisfied. The first and second established end-to-end connections belong to the aggregated end-to-end connection. The first communications router comprises a plurality of network interfaces.

Abstract: The present invention discloses a method carried out by a first communications device for determining performance of a plurality of connections and selecting at least one first connection from the plurality of connections substantially based on performance. Data packets are then transmitted through the at least one first connection. The plurality of connections are aggregated to form an aggregated connection. The determining of performance is performed by transmitting evaluation packets through the plurality of connections. The evaluation packets are based on data packets that are received by the first communication device but have not yet been transmitted through the aggregated connection. The data packets may be designated for a host or node reachable through the aggregated connection. Alternatively, the evaluation packets may be based on predefined information when there are no data packets to be transmitted through the aggregated connection. The performance may be determined periodically.

Abstract: Methods and systems for creating protocol header to allow network device to transfer and receive layer two packets through multiple network links. One or more layer three packets are used to encapsulate layer two packets. The protocol header includes a network link identification and a tunnel sequence number. The network link identification is used to identify the network link and the tunnel sequence number is used to identify the sequence of the one or more layer three packets in a network link. A layer two packet may be encrypted first before being embedded in the one or more layer three packets.

Abstract: The present invention discloses methods and network nodes for distributing data packets through a plurality of wide area network (WAN) interfaces and through a gateway at a network node. In order to determine whether the gateway is a slave gateway, identification request is sent to the gateway by a network node. When the gateway is configured as a slave gateway, transmitting instruction to the gateway. Further, weighting may be assigned to the WAN interfaces. Further, connections may be established through WAN interfaces of the network node and WAN interfaces of the gateway. The connections may further be aggregated together to form an aggregated connection.

Abstract: The present invention discloses methods and systems for processing data packets received at a first network node and for processing encapsulating packets received at a second network node. The first network node receives data packets from its network interface. It then selects a first tunnel and selects none or at least one second tunnel according to a selection policy. Original encapsulating packets (OEPs) are transmitted to a second network node through the first tunnel and at least one duplicate encapsulating packet (DEP) is transmitted through the at least one second tunnel. The second network node receives an encapsulating packet with a global sequence number (GSN) through an aggregated connection. The second network node determines whether one or more data packets corresponding to the encapsulating packet have been received earlier. The second network node may then determine whether or not to forward the one or more data packets.

Abstract: A method carried out by a first communication gateway for transmitting broadcast data. Broadcast data is first received through a first network interface. The first communication gateway determines whether the broadcast data satisfies at least one condition, and forwards the broadcast data through at least one tunnel and through a second network interface to a second communication gateway if the broadcast data satisfies the at least one condition. The broadcast data is encapsulated in at least one encapsulating packet and the at least one encapsulating packet is decapsulated by the second communication gateway in order to retrieve the broadcast data. The broadcast data is then distributed by the second communication gateway to a second network.

Abstract: A method and a first communications router for transmitting data packets to a second communications router by establishing an aggregated end-to-end connection with the second communications router. The aggregated end-to-end connection comprises a plurality of established end-to-end connections. Data packets are transmitted through a first established end-to-end connection when a first condition is satisfied, and through a second established end-to-end connection when a second condition is satisfied. The first and second established end-to-end connections belong to the aggregated end-to-end connection. The first communications router comprises a plurality of network interfaces.

Abstract: The present invention discloses methods and systems for transmitting a received packet at a first network node through an aggregated connection. The first network node determines session information of the received packet and determines whether a new tunnel needs to be selected for transmitting the received packet. When a new tunnel needs to be selected, a hash result is determined. The hash result is substantially based on the session information and the number of available tunnels. A first tunnel is determined for transmitting the received packet according to the hash result. The session information and tunnel ID of the first tunnel is then stored in a first database. The received packet is transmitted through the first tunnel. When a new tunnel need not be selected, a lookup is performed to determine a tunnel ID substantially based on the session information. The received packet is transmitted through the determined tunnel.

Abstract: The present invention discloses methods and systems for transmitting broadcast data at a communication gateway. When the communication gateway receives a broadcast packet from a host or node, the communication gateway determines whether the broadcast packet satisfies at least one condition. If the broadcast packet satisfies the at least one condition, it is determined whether or not to modify a time to live (TTL) value. The TTL value of the broadcast packet is modified if it is determined to modify the TTL value. The broadcast packet is then forwarded to the destination address of the broadcast packet based on the TTL value. The destination address is reachable through an interconnected network.

Abstract: The present invention discloses methods and systems for transmitting data packets through a plurality of connections and through a gateway at a network node. The network node receives network performance observation report (NPOR) from the gateway. Based on the NPOR, the network node determines at least one of the plurality of wide area network (WAN) interfaces of the gateway for transmitting data packets. The network node then creates and transmits an instruction to the gateway. When the network node transmits the data packets to the gateway, the network node also creates and transmits an instruction to the gateway to determine the WAN interface(s) of the gateway for transmitting the packets.

Abstract: The present invention discloses methods and systems carried out at a network device for reducing network congestion by establishing an aggregated connection, wherein the aggregated connection comprise a plurality of virtual private network (VPN) tunnels. The system further comprises assigning default weights to the plurality of VPN tunnels along with transmitting and receiving data packets of a data session through the aggregated connection. When there is a missing data packet in the received data packets, the missing data packet is recreated based on a previous or a next data packet. Furthermore the present invention discloses methods and systems for determining whether a VPN tunnel from the plurality of VPN tunnels is experiencing an unacceptable packet drop rate. If it is seen that a VPN tunnel is experiencing an unacceptable packet drop rate, an effective weight of the at least one VPN tunnel is decreased in order to overcome the setback.

Abstract: The present invention discloses methods and systems for managing VPN tunnels. A VPN concentrator establishes a first aggregated VPN connection and a second aggregated VPN connection with a first host and a first network device respectively. When the first aggregated VPN connection comprises a first plurality of VPN tunnels, the VPN concentrator applies uplink and downlink bandwidth limits to each of the plurality of VPN tunnels. Similarly, when the second aggregated VPN connection comprise a second plurality of VPN tunnels, the VPN concentrator applies uplink and downlink bandwidth limits to each of the plurality of VPN tunnels. The first host encapsulates a first data packet in a first encapsulating packet and transmits the first encapsulating packet to a VPN concentrator using a first aggregated VPN connection.

Abstract: The present invention discloses a method carried out by a first communications device for determining performance of a plurality of connections and selecting at least one first connection from the plurality of connections substantially based on performance. Data packets are then transmitted through the at least one first connection. The plurality of connections are aggregated to form an aggregated connection. The determining of performance is performed by transmitting evaluation packets through the plurality of connections. The evaluation packets are based on data packets that are received by the first communication device but have not yet been transmitted through the aggregated connection. The data packets may be designated for a host or node reachable through the aggregated connection. Alternatively, the evaluation packets may be based on predefined information when there are no data packets to be transmitted through the aggregated connection. The performance may be determined periodically.

Abstract: The present disclosure provides for devices, systems, and methods which optimize throughput of bonded connections over multiple variable bandwidth logical paths by adjusting a tunnel bandwidth weighting schema during a data transfer session in response to a change in bandwidth capabilities of one or more tunnels. By making such adjustments, embodiments of the present invention are able to optimize the bandwidth potential of multiple connections being used in a session, while minimizing the adverse consequences of reduced bandwidth issues which may occur during the data transfer session.

Abstract: The present invention discloses methods and systems carried out at a network device for reducing network congestion by establishing an aggregated connection, wherein the aggregated connection comprise a plurality of virtual private network (VPN) tunnels. The system further comprises assigning default weights to the plurality of VPN tunnels along with transmitting and receiving data packets of a data session through the aggregated connection. When there is a missing data packet in the received data packets, the missing data packet is recreated based on a previous or a next data packet. Furthermore the present invention discloses methods and systems for determining whether a VPN tunnel from the plurality of VPN tunnels is experiencing an unacceptable packet drop rate. If it is seen that a VPN tunnel is experiencing an unacceptable packet drop rate, an effective weight of the at least one VPN tunnel is decreased in order to overcome the setback.