Abstract: Virtual Private Network (VPN) tunnels through a backbone network operated by a service provider may be considered as a logical grouping where the VPN tunnels share certain characteristics. The forwarding of a received packet onto a particular one of these VPN tunnels may be determined through a cascade of lookup tables. According to satisfaction of classification criteria, a given received packet may be modified for special treatment within the backbone network.

Abstract: The present invention generally relates to the acceleration of customer premises equipment based virtual private networks (CPE-VPN). To provide virtual private network service from an enterprise network to a mobile client in a secure manner apparatus and method are provided whereby VPN service is provided which allows the wireless network to use data acceleration techniques. This is accomplished by providing a VPN acceleration server that terminates VPN tunnel from the enterprise network, accelerates the data for wireless transmission then encrypts the data for transmission to the mobile client (VPN acceleration client) over an encrypted acceleration tunnel. The encrypted acceleration tunnel may use PKI encryption.

Abstract: A multi-staged services policer implements multiple policies, at an edge device of network, on the data traffic of a single customer. In such a multi-staged services policer, services policers in a given stage may receive information from policers in subsequent stages. This information may be used when policing in the given stage.

Abstract: An overlay network includes a virtual content server for representing a content provider in a virtual content network and at least a client having a membership in the virtual content network and a content path between the virtual content server and the client. Each node in the content path is also a member of the virtual content network and each link between nodes is provided by a tunnel to ensure trust and integrity at the content level.

Abstract: In a generic, end-to-end address resolution methodology, destination addresses in one format are translated into local addresses of different formats for purposes of routing calls across a plurality of interconnected networks which use different address formats. Translation of addresses is accomplished through either database query or by conversion algorithm. To facilitate routing across a particular network, the signaling message of the call is repacked with the local address as the routing address. The original destination address is preserved and carried transparently across that network. The signaling message is then repacked with the destination address as the routing address. Bi-level addressing schemes are supported, so that a network-level destination address and user-level destination address may both be carried transparently across a particular network.

Abstract: In a generic, end-to-end address resolution methodology, destination addresses in one format are translated into local addresses of different formats for purposes of routing calls across a plurality of interconnected networks which use different address formats. Translation of addresses is accomplished through either database query or by conversion algorithm. To facilitate routing across a particular network, the signaling message of the call is repacked with the local address as the routing address. The original destination address is preserved and carried transparently across that network. The signaling message is then repacked with the destination address as the routing address. Bi-level addressing schemes are supported, so that a network-level destination address and user-level destination address may both be carried transparently across a particular network.