Abstract: A method for implementing multicast data exchange over a partitioned network having an encrypted domain with HAIPE devices at the edges consists of proxies running at an ingress edge and at egress edges of the encrypted domain. The proxies at the ingress edge device modify the multicast data packet to replace the destination address with the address of a proxy running on an egress edge device, such that the encrypted domain routes the packet directly to the proxy at the egress edge device without processing it as a multicast data packet. At the egress edge devices, the proxies restore the original address and send the multicast packets to the appropriate destinations.

Abstract: A device and method for implementing a measurement based admission control (MBAC) protocol consists of various devices having software modules running thereon which are capable of calculating a congestion level based upon the detection of incoming packets having Explicit Congestion Notification (ECN) bits set by one or more routers in an encrypted core domain of a partitioned network. Upon detecting a certain congestion level at an egress edge of the network, a UDP packet is transmitted back to the ingress edge of the network wherein certain types or percentages of certain types of packets are blocked to relieve the congestion on the network. Once the congestion level on the network falls below a certain level, those packets may be transmitted.