Abstract: A method and a first communications router for transmitting data packets to a second communications router by establishing an aggregated end-to-end connection with the second communications router. The aggregated end-to-end connection comprises a plurality of established end-to-end connections. Data packets are transmitted through a first established end-to-end connection when a first condition is satisfied, and through a second established end-to-end connection when a second condition is satisfied. The first and second established end-to-end connections belong to the aggregated end-to-end connection. The first communications router comprises a plurality of network interfaces.

Abstract: The present invention discloses a method carried out by a first communications device for determining performance of a plurality of connections and selecting at least one first connection from the plurality of connections substantially based on performance. Data packets are then transmitted through the at least one first connection. The plurality of connections are aggregated to form an aggregated connection. The determining of performance is performed by transmitting evaluation packets through the plurality of connections. The evaluation packets are based on data packets that are received by the first communication device but have not yet been transmitted through the aggregated connection. The data packets may be designated for a host or node reachable through the aggregated connection. Alternatively, the evaluation packets may be based on predefined information when there are no data packets to be transmitted through the aggregated connection. The performance may be determined periodically.

Abstract: A method for displaying network performance information by selecting an aggregated end-to-end connection profile, and then displaying network performance information corresponding to the aggregated end-to-end connection profile. The network performance information corresponding to the aggregated end-to-end connection profile is retrieved from a local storage unit or a remote storage unit. The aggregated end-to-end connection profile is corresponding to an aggregated end-to-end connection comprising a plurality of end-to-end connections. In one embodiment, identities of all WAN interfaces corresponding to the aggregated end-to-end connection are displayed. Alternatively, identities of a plurality of WAN interfaces corresponding to the aggregated end-to-end connection are displayed, where the plurality of WAN interfaces are selected according to a policy or a user's selection.

Abstract: The present invention discloses methods and systems for transmitting and receiving packets through a plurality of logical connections based on priority levels. When an encapsulating packets is received from a second network device via a logical network connection, priority level of a packet encapsulated in the encapsulating packet is determined, and the encapsulating packet is stored in a queue or transmitted to a host based on GSEQ, PSEQ, TSEQ, and the priority level. When a packet is received from a host via a LAN connection, the packet is retrieved from a priority queue based on the priority level a first logical network connection is selected for transmitting the packet. The packet is encapsulated in an encapsulating packet, and the payload of the encapsulating packet comprises the packet, GSEQ, TSEQ, PSEQ, and priority level of the packet. The encapsulating packet is then sent through the first logical network connection.

Abstract: Methods and systems for creating protocol header to allow network device to transfer and receive layer two packets through multiple network links. One or more layer three packets are used to encapsulate layer two packets. The protocol header includes a network link identification and a tunnel sequence number. The network link identification is used to identify the network link and the tunnel sequence number is used to identify the sequence of the one or more layer three packets in a network link. A layer two packet may be encrypted first before being embedded in the one or more layer three packets.

Abstract: The present invention discloses methods and network nodes for distributing data packets through a plurality of wide area network (WAN) interfaces and through a gateway at a network node. In order to determine whether the gateway is a slave gateway, identification request is sent to the gateway by a network node. When the gateway is configured as a slave gateway, transmitting instruction to the gateway. Further, weighting may be assigned to the WAN interfaces. Further, connections may be established through WAN interfaces of the network node and WAN interfaces of the gateway. The connections may further be aggregated together to form an aggregated connection.

Abstract: The present invention discloses methods and systems for processing data packets received at a first network node and for processing encapsulating packets received at a second network node. The first network node receives data packets from its network interface. It then selects a first tunnel and selects none or at least one second tunnel according to a selection policy. Original encapsulating packets (OEPs) are transmitted to a second network node through the first tunnel and at least one duplicate encapsulating packet (DEP) is transmitted through the at least one second tunnel. The second network node receives an encapsulating packet with a global sequence number (GSN) through an aggregated connection. The second network node determines whether one or more data packets corresponding to the encapsulating packet have been received earlier. The second network node may then determine whether or not to forward the one or more data packets.

Abstract: A method and a first communications router for transmitting data packets to a second communications router by establishing an aggregated end-to-end connection with the second communications router. The aggregated end-to-end connection comprises a plurality of established end-to-end connections. Data packets are transmitted through a first established end-to-end connection when a first condition is satisfied, and through a second established end-to-end connection when a second condition is satisfied. The first and second established end-to-end connections belong to the aggregated end-to-end connection. The first communications router comprises a plurality of network interfaces.

Abstract: The present invention discloses methods and systems for transmitting a received packet at a first network node through an aggregated connection. The first network node determines session information of the received packet and determines whether a new tunnel needs to be selected for transmitting the received packet. When a new tunnel needs to be selected, a hash result is determined. The hash result is substantially based on the session information and the number of available tunnels. A first tunnel is determined for transmitting the received packet according to the hash result. The session information and tunnel ID of the first tunnel is then stored in a first database. The received packet is transmitted through the first tunnel. When a new tunnel need not be selected, a lookup is performed to determine a tunnel ID substantially based on the session information. The received packet is transmitted through the determined tunnel.

Abstract: The present invention discloses methods and systems for transmitting data packets through a plurality of connections and through a gateway at a network node. The network node receives network performance observation report (NPOR) from the gateway. Based on the NPOR, the network node determines at least one of the plurality of wide area network (WAN) interfaces of the gateway for transmitting data packets. The network node then creates and transmits an instruction to the gateway. When the network node transmits the data packets to the gateway, the network node also creates and transmits an instruction to the gateway to determine the WAN interface(s) of the gateway for transmitting the packets.

Abstract: Method and system for storing packets received from a bonded communication links according to latency of the communication link that has the largest latency among all communication links of the bonded communication links. Embodiments of present inventions can be applied to bonded communication links, including wireless connection, Ethernet connection, Internet Protocol connection, asynchronous transfer mode, virtual private network, WiFi, high-speed downlink packet access, GPRS, LTE, and X.25. The present invention presents methods comprising the steps of estimating storage size of a queue, wherein the queue is for storage the one or more packets received from the bonded communication links.

Abstract: The present invention discloses methods and systems carried out at a network device for reducing network congestion by establishing an aggregated connection, wherein the aggregated connection comprise a plurality of virtual private network (VPN) tunnels. The system further comprises assigning default weights to the plurality of VPN tunnels along with transmitting and receiving data packets of a data session through the aggregated connection. When there is a missing data packet in the received data packets, the missing data packet is recreated based on a previous or a next data packet. Furthermore the present invention discloses methods and systems for determining whether a VPN tunnel from the plurality of VPN tunnels is experiencing an unacceptable packet drop rate. If it is seen that a VPN tunnel is experiencing an unacceptable packet drop rate, an effective weight of the at least one VPN tunnel is decreased in order to overcome the setback.

Abstract: A method for displaying network performance information by selecting an aggregated end-to-end connection profile, and then displaying network performance information corresponding to the aggregated end-to-end connection profile. The network performance information corresponding to the aggregated end-to-end connection profile is retrieved from a local storage unit or a remote storage unit. The aggregated end-to-end connection profile is corresponding to an aggregated end-to-end connection comprising a plurality of end-to-end connections. In one embodiment, identities of all WAN interfaces corresponding to the aggregated end-to-end connection are displayed. Alternatively, identities of a plurality of WAN interfaces corresponding to the aggregated end-to-end connection are displayed, where the plurality of WAN interfaces are selected according to a policy or a user's selection.

Abstract: The present invention discloses methods and systems for managing VPN tunnels. A VPN concentrator establishes a first aggregated VPN connection and a second aggregated VPN connection with a first host and a first network device respectively. When the first aggregated VPN connection comprises a first plurality of VPN tunnels, the VPN concentrator applies uplink and downlink bandwidth limits to each of the plurality of VPN tunnels. Similarly, when the second aggregated VPN connection comprise a second plurality of VPN tunnels, the VPN concentrator applies uplink and downlink bandwidth limits to each of the plurality of VPN tunnels. The first host encapsulates a first data packet in a first encapsulating packet and transmits the first encapsulating packet to a VPN concentrator using a first aggregated VPN connection.

Abstract: The present invention discloses a method carried out by a first communications device for determining performance of a plurality of connections and selecting at least one first connection from the plurality of connections substantially based on performance. Data packets are then transmitted through the at least one first connection. The plurality of connections are aggregated to form an aggregated connection. The determining of performance is performed by transmitting evaluation packets through the plurality of connections. The evaluation packets are based on data packets that are received by the first communication device but have not yet been transmitted through the aggregated connection. The data packets may be designated for a host or node reachable through the aggregated connection. Alternatively, the evaluation packets may be based on predefined information when there are no data packets to be transmitted through the aggregated connection. The performance may be determined periodically.

Abstract: The present disclosure provides for devices, systems, and methods which optimize throughput of bonded connections over multiple variable bandwidth logical paths by adjusting a tunnel bandwidth weighting schema during a data transfer session in response to a change in bandwidth capabilities of one or more tunnels. By making such adjustments, embodiments of the present invention are able to optimize the bandwidth potential of multiple connections being used in a session, while minimizing the adverse consequences of reduced bandwidth issues which may occur during the data transfer session.

Abstract: A method and system for configuring a network device according to the identity of a plurality of removable wireless communications devices (RWCDs), the method comprising the steps of: determining the identities of the plurality of RWCDs; determining whether the network device is capable of using the plurality RWCDs; retrieving policy settings from an authorized party or a storage medium of the network device according to the identities of the plurality of RWCDs, determining priority of policy settings; and configuring the network device according to the policy settings. The priority of policy settings are based on the positions of the RWCDs when there are conflict among policy settings. The plurality of RWCDs are plugged to the network device and the network device provides wireless wide area network (WAN) connectivity through the plurality of RWCDs.

Abstract: The present invention discloses methods and systems carried out at a network device for reducing network congestion by establishing an aggregated connection, wherein the aggregated connection comprise a plurality of virtual private network (VPN) tunnels. The system further comprises assigning default weights to the plurality of VPN tunnels along with transmitting and receiving data packets of a data session through the aggregated connection. When there is a missing data packet in the received data packets, the missing data packet is recreated based on a previous or a next data packet. Furthermore the present invention discloses methods and systems for determining whether a VPN tunnel from the plurality of VPN tunnels is experiencing an unacceptable packet drop rate. If it is seen that a VPN tunnel is experiencing an unacceptable packet drop rate, an effective weight of the at least one VPN tunnel is decreased in order to overcome the setback.

Abstract: A method and system for transmitting and receiving data packets between two network nodes via one or more end-to-end connections. An interface is provided for selecting one or more possible end-to-end connection(s) or established end-to-end connection(s). The method and system may further comprise receiving a policy, wherein one or more selected end-to-end connections are established based, at least in part, on the policy. The policy may also restrict or promote selection of certain established end-to-end connection(s) via the interface provided. The selected and established end-to-end connection(s) are used for transmitting and receiving data packets.

Abstract: The present invention discloses a method carried out by a first communications device for determining performance of a plurality of connections and selecting at least one first connection from the plurality of connections substantially based on performance. Data packets are then transmitted through the at least one first connection. The plurality of connections are aggregated to form an aggregated connection. The determining of performance is performed by transmitting evaluation packets through the plurality of connections. The evaluation packets are based on data packets that are received by the first communication device but have not yet been transmitted through the aggregated connection. The data packets may be designated for a host or node reachable through the aggregated connection. Alternatively, the evaluation packets may be based on predefined information when there are no data packets to be transmitted through the aggregated connection. The performance may be determined periodically.