Abstract: Application layer throughput (ALT) shaping is provided for a streaming media session is provided. A request for a content segment is received. The receipt time of the request is recorded and the request is forwarded to a content server. A response message is received from the server. The receipt time of the response and a segment size is determined. An ALT for the current segment is determined based on the receipt times of the request and response messages and the segment size. The ALT rate is compared to a target ALT rate required for a desired session PBR. When the ALT rate is higher than the target ALT rate, the content response is held for a time period determined to lower the current ALT rate to the target ALT rate, and then released to the client device. Otherwise, the content response is promptly provided to the client device.

Abstract: Methods and systems of history-based instantaneous QoS class classification of traffic flow. QoS classifications are mapped to target destinations such that, when a first flow parcket packet of a traffic flow requesting access to a resource associated with the target destination, a classifier can instantaneously classify the traffic flow as belonging to a particular QoS class for servicing of the traffic flow.

Abstract: A method for application aware multihoming with multipath tunneling protocols is provided. A message client data packet is classified based an application from which the data packet originated. The header structure of the data packet is modified to generate a proxy data packet comprising the client data payload and a proxy header structure. The proxy header structure comprises source-client and destination-server parameters and an identifier of a client-proxy device, protocol parameters indicating a source protocol sequencing of the message client data packet, and protocol parameters including source parameters of the client-proxy device and destination parameters of a server-proxy device. A network communications link is selected for transmission of the proxy data packet to the server-proxy device, where the selection is based on the classification of the message client data packet. The proxy data packet is transmitted to the server-proxy device via the network communications link.

Abstract: Methods and systems of history-based instantaneous QoS class classification of traffic flow. QoS classifications are mapped to target destinations such that, when a first flow parcket packet of a traffic flow requesting access to a resource associated with the target destination, a classifier can instantaneously classify the traffic flow as belonging to a particular QoS class for servicing of the traffic flow.

Abstract: Application layer throughput (ALT) shaping is provided for a streaming media session is provided. A request for a content segment is received. The receipt time of the request is recorded and the request is forwarded to a content server. A response message is received from the server. The receipt time of the response and a segment size is determined. An ALT for the current segment is determined based on the receipt times of the request and response messages and the segment size. The ALT rate is compared to a target ALT rate required for a desired session PBR. When the ALT rate is higher than the target ALT rate, the content response is held for a time period determined to lower the current ALT rate to the target ALT rate, and then released to the client device. Otherwise, the content response is promptly provided to the client device.

Abstract: A method for application aware multihoming with multipath tunneling protocols is provided. A message client data packet is classified based an application from which the data packet originated. The header structure of the data packet is modified to generate a proxy data packet comprising the client data payload and a proxy header structure. The proxy header structure comprises source-client and destination-server parameters and an identifier of a client-proxy device, protocol parameters indicating a source protocol sequencing of the message client data packet, and protocol parameters including source parameters of the client-proxy device and destination parameters of a server-proxy device. A network communications link is selected for transmission of the proxy data packet to the server-proxy device, where the selection is based on the classification of the message client data packet. The proxy data packet is transmitted to the server-proxy device via the network communications link.

Abstract: Mechanisms for controlling traffic on a communication network are described. The mechanisms can be implemented, for example, using signaling messages. For example, a receiver can send a permission message to allow the sender to send a given amount of data along a particular path. As another example, a sender can send a query message indicating a volume of data that has been sent since the sender received a permission message. Upon receiving the query message, a receiver (or another device such as a router, etc.) can detect an attack by comparing the volume of data in the query message with the volume of data that has been received by the receiver. Upon detecting an attack, the receiver can drop unauthorized packets or request the sender to use a security protocol (e.g., IPsec AH) when transmitting data packets and/or change the path of the data flow (e.g., using multi-homing).

Abstract: Methods and systems for controlling traffic on a communication network are provided. In accordance with some embodiments, methods for controlling traffic on a communication network are provided, the methods comprising—receiving, at a processor in a receiver, a query message for permission to send a data flow to the receiver; sending a permission message from the receiver; defecting that at least one of a message and a data packet being sent to the receiver has been dropped; and causing the path for sending the data flow to be changed.