Abstract: The present invention discloses methods and systems for transmitting data packets through a plurality of connections and through a gateway at a network node. The network node receives network performance observation report (NPOR) from the gateway. Based on the NPOR, the network node determines at least one of the plurality of wide area network (WAN) interfaces of the gateway for transmitting data packets. The network node then creates and transmits an instruction to the gateway. When the network node transmits the data packets to the gateway, the network node also creates and transmits an instruction to the gateway to determine the WAN interface(s) of the gateway for transmitting the packets.

Abstract: Method and system for storing packets received from a bonded communication links according to latency of the communication link that has the largest latency among all communication links of the bonded communication links. Embodiments of present inventions can be applied to bonded communication links, including wireless connection, Ethernet connection, Internet Protocol connection, asynchronous transfer mode, virtual private network, WiFi, high-speed downlink packet access, GPRS, LTE, and X.25. The present invention presents methods comprising the steps of estimating storage size of a queue, wherein the queue is for storage the one or more packets received from the bonded communication links.

Abstract: The present invention discloses methods and systems carried out at a network device for reducing network congestion by establishing an aggregated connection, wherein the aggregated connection comprise a plurality of virtual private network (VPN) tunnels. The system further comprises assigning default weights to the plurality of VPN tunnels along with transmitting and receiving data packets of a data session through the aggregated connection. When there is a missing data packet in the received data packets, the missing data packet is recreated based on a previous or a next data packet. Furthermore the present invention discloses methods and systems for determining whether a VPN tunnel from the plurality of VPN tunnels is experiencing an unacceptable packet drop rate. If it is seen that a VPN tunnel is experiencing an unacceptable packet drop rate, an effective weight of the at least one VPN tunnel is decreased in order to overcome the setback.

Abstract: The present invention discloses methods and systems for managing a node through a management server. The management server verifies whether a management confirmation has been received and allows a second user group to manage the node if the management confirmation is received. If the management confirmation is not received by the management server, the second user group is not allowed to manage the node through the management server.

Abstract: The present invention discloses methods and systems for managing VPN tunnels. A VPN concentrator establishes a first aggregated VPN connection and a second aggregated VPN connection with a first host and a first network device respectively. When the first aggregated VPN connection comprises a first plurality of VPN tunnels, the VPN concentrator applies uplink and downlink bandwidth limits to each of the plurality of VPN tunnels. Similarly, when the second aggregated VPN connection comprise a second plurality of VPN tunnels, the VPN concentrator applies uplink and downlink bandwidth limits to each of the plurality of VPN tunnels. The first host encapsulates a first data packet in a first encapsulating packet and transmits the first encapsulating packet to a VPN concentrator using a first aggregated VPN connection.

Abstract: The present invention discloses methods and systems for managing a power over Ethernet (PoE) capable device through a manual information input module. Information is obtained through the manual information input module, and a current power mode is determined. Based on the information, a power mode is reset or applied. If it is determined to apply a power mode, internal switches are opened or closed and the device supplies or receives power over Ethernet according to the power mode.

Abstract: The present invention discloses a method carried out by a first communications device for determining performance of a plurality of connections and selecting at least one first connection from the plurality of connections substantially based on performance. Data packets are then transmitted through the at least one first connection. The plurality of connections are aggregated to form an aggregated connection. The determining of performance is performed by transmitting evaluation packets through the plurality of connections. The evaluation packets are based on data packets that are received by the first communication device but have not yet been transmitted through the aggregated connection. The data packets may be designated for a host or node reachable through the aggregated connection. Alternatively, the evaluation packets may be based on predefined information when there are no data packets to be transmitted through the aggregated connection. The performance may be determined periodically.

Abstract: A method and system for processing Domain name Services (DNS) request in a gateway with at least one local area network (LAN) interface and at least one wide area network (WAN) interface. The gateway receives a first DNS request from a first host via one of the at least one LAN interface of the gateway. The gateway then selects a plurality of DNS servers. At least one of the plurality of DNS server is accessible through at least one tunnel. The gateway transmits a plurality of new DNS requests to the plurality of DNS servers. The contents of the plurality of new DNS requests are the same as the content of the first DNS request.

Abstract: Methods and systems for processing Domain Name Service (DNS) request in a gateway with a plurality of WAN network interfaces. After receiving a first DNS request via one of network interfaces of the gateway, the gateway selects at least one DNS server and at least one access network and then transmits a plurality of new DNS requests to the selected at least one DNS server through the selected at least one access network and via one of network interfaces of the gateway.

Abstract: The present invention discloses methods and systems carried out at a network device for reducing network congestion by establishing an aggregated connection, wherein the aggregated connection comprise a plurality of virtual private network (VPN) tunnels. The system further comprises assigning default weights to the plurality of VPN tunnels along with transmitting and receiving data packets of a data session through the aggregated connection. When there is a missing data packet in the received data packets, the missing data packet is recreated based on a previous or a next data packet. Furthermore the present invention discloses methods and systems for determining whether a VPN tunnel from the plurality of VPN tunnels is experiencing an unacceptable packet drop rate. If it is seen that a VPN tunnel is experiencing an unacceptable packet drop rate, an effective weight of the at least one VPN tunnel is decreased in order to overcome the setback.

Abstract: A method and system for transmitting and receiving data packets between two network nodes via one or more end-to-end connections. An interface is provided for selecting one or more possible end-to-end connection(s) or established end-to-end connection(s). The method and system may further comprise receiving a policy, wherein one or more selected end-to-end connections are established based, at least in part, on the policy. The policy may also restrict or promote selection of certain established end-to-end connection(s) via the interface provided. The selected and established end-to-end connection(s) are used for transmitting and receiving data packets.

Abstract: The present invention discloses a method carried out by a first communications device for determining performance of a plurality of connections and selecting at least one first connection from the plurality of connections substantially based on performance. Data packets are then transmitted through the at least one first connection. The plurality of connections are aggregated to form an aggregated connection. The determining of performance is performed by transmitting evaluation packets through the plurality of connections. The evaluation packets are based on data packets that are received by the first communication device but have not yet been transmitted through the aggregated connection. The data packets may be designated for a host or node reachable through the aggregated connection. Alternatively, the evaluation packets may be based on predefined information when there are no data packets to be transmitted through the aggregated connection. The performance may be determined periodically.

Abstract: The present invention discloses methods and systems for recreating missing data packets of a data session established between a first communications router and a second communications router through an aggregated connection. The first communications router receives data packets belonging to a data session from the second communications router through the aggregated connection. The data packets are destined to a first host reachable through the first communications router. The first communications router transmits the data packets to the first host and determines whether there is one or more missing data packets. If there is one or more missing data packets, the first communications router determines global sequence number(s) (GSN) and per tunnel sequence numbers (PTSN) of the one or more missing data packets and recreates payload(s) of the one or more missing data packet(s). One or more new data packets are then transmitted to the first host.

Abstract: A method carried out at a network node for managing aggregated Virtual Private Network (VPN) connection. The network node establishes an aggregated VPN connection with a network element and determines a first uplink bandwidth limit and/or a first downlink bandwidth limit. The uplink bandwidth at the network node is limited to the first uplink bandwidth limit if the first uplink bandwidth limit is determined. The downlink bandwidth at the network node is limited to the first downlink bandwidth limit if the first downlink bandwidth limit is determined. The network node encapsulates first data packets in first encapsulating packets and then transmits the first encapsulating packets to the network element through the aggregated VPN connection within the first uplink bandwidth limit. The network node receives second encapsulating packets from the network element within the first downlink bandwidth limit, and then decapsulates second data packets from the second encapsulating packets.

Abstract: The present invention discloses methods and systems for transmitting data packets through a plurality of connections and through a gateway at a network node. The network node receives network performance observation report (NPOR) from the gateway. Based on the NPOR, the network node determines at least one of the plurality of wide area network (WAN) interfaces of the gateway for transmitting data packets. The network node then creates and transmits an instruction to the gateway. When the network node transmits the data packets to the gateway, the network node also creates and transmits an instruction to the gateway to determine the WAN interface(s) of the gateway for transmitting the packets.

Abstract: A method and device for allowing users to manage policy(s) of the device through a manual information input module. The manual information input module is a physical interface which allows manipulation of the policy(s). The manual information input may include, but not limited to, a button a knob, a display panel, etc. Policy(s) are assigned to the manual information input module and the assigned policy(s) are executed by interacting with the manual information input module. The policy(s) of the device are stored in the computer readable storage medium and the policy(s) associated with the manual information input module are retrieved by the processor of the device from the computer readable storage medium of the device in order to execute the policy(s).

Abstract: Method and system for reduction of time variance of packets received from bonded communication links. Embodiments of present inventions can be applied to bonded communication links, including wireless connection, Ethernet connection, Internet Protocol connection, asynchronous transfer mode, virtual private network, WiFi, high-speed downlink packet access, GPRS, LTE, X.25 and etc. The present invention presents methods comprising the steps of determining latency difference among bonded communication links, receiving one or more packets from the bonded communication links, and delivering the one or more packets according to the latency difference.

Abstract: A method and system for processing Domain name Services (DNS) request in a gateway with at least one local area network (LAN) interface and at least one wide area network (WAN) interface. The gateway receives a first DNS request from a first host via one of the at least one LAN interface of the gateway. The gateway then selects a plurality of DNS servers. At least one of the plurality of DNS server is accessible through at least one tunnel. The gateway transmits a plurality of new DNS requests to the plurality of DNS servers. The contents of the plurality of new DNS requests are the same as the content of the first DNS request.

Abstract: A method and system for a first node to transmit packets to a second none, comprising receiving a packet from a local area network (LAN) interface, inspecting the packet; determining whether the packet satisfies at least one packet condition; transmitting the packet through a predefined tunnel if the packet satisfies the at least one packet condition; transmitting the packet through a second tunnel if the packet does not satisfy the at least one packet condition. The predefined tunnel is a first tunnel and is established before the packet is received by the first node. The second tunnel belongs to a first tunnel group or a second tunnel group. The first tunnel, the second tunnel and other tunnels may together form an aggregated connection. Further, the use of predefined tunnel may be based on whether the packets satisfy a session condition.

Abstract: A method and system for processing Domain name Services (DNS) request in a gateway. The gateway receives a DNS request from a host from its local area network. The gateway then selects DNS server(s) and transmits a new DNS request to at least one DNS server(s). DNS server(s) may or may not be accessible through a first tunnel. The contents of the new DNS request are the same as the content of the received DNS request. Further, when the gateway receives a DNS response corresponding to the DNS request, it determines a decision whether to transfer data to the host whose IP address is specified in the DNS response through a second tunnel. The decision may be based on a geographical location of an IP address.