Ericsson Ab

Raytheon Bbn Technologies Corp.

Gregory Stephen Lauer

Walter Clark Milliken

Gregory Donald Troxel

William Timothy Strayer

Craig Partridge

David Patrick Mankins

Robert J Walsh

Josh Forrest Karlin

Laura Jane Poplawski Ma

Paul F Langille

Andrew V Hoar

Frank Kastenholtz

Todd Andrew Snide

Joseph A Laria

Systems, methods, and devices for decoy routing and covert channel bonding are described. The decoy routing system includes a client computing device, a decoy router, and a decoy proxy such that packets addressed to a decoy destination are re-routed by the decoy router to a covert destination via the decoy proxy. The decoy routing method may be applied to a covert channel bonding process, in which a plurality of packet data streams are sent to one or more decoy destinations, re-routed appropriately via one or more decoy routers and/or decoy proxies, and assembled together into a single packet data stream at either a decoy proxy, or a final covert destination.

Systems and methods for decoy routing and covert channel bonding

A packet is classified into a class. A priority value is assigned to the packet wherein packets in a flow are assigned priorities according to some probability distribution within some band. A determination is made, at a network device for a highest latency class, whether a sum of queued packet sizes of previously received packets having an equal or smaller latency class than the packet and larger or equal priority than the packet is larger than a threshold value. When the sum is larger, the packet is dropped, otherwise a determination is made whether a latency class of the packet is less than the latency class of the network device. When the latency class is not less, the packet is stored in a queue for the latency class. When the latency class is less, then the process is repeated until the packet is dropped or stored in a queue.

Method and apparatus providing precedence drop quality of service (PDQoS) with class-based latency differentiation

A system and method for generating a service level agreement (SLA) template are disclosed. The SLA template generated by the disclosed system enables deployment of resources to support a number of SLAs and associated VPNs. The SLA template generated by operation of the disclosed system may include a first graphical user interface (GUI) template that specifies, at least in part, a GUI for use by a customer service representative (CSR) when accepting a service request or order from a customer. The disclosed SLA template may further include a number of SLA defaults, which may consist of default values and or software program code logic. The SLA defaults enable an SLA GUI to be configured such that a relatively small amount of information can be collected and used to derive other necessary configuration data. A second GUI template may be included in the SLA template to specify information to be obtained regarding networking devices and associated resources that must be used to provide a VPN over which are provided the services described in a particular SLA.

System and method for generating a service level agreement template

A network device includes a virtual router subsystem having potentially numerous virtual routers associated with corresponding different virtual private routed networks (VPRN) and employing generic interface identifiers to identify interfaces at which VPRN traffic is received or transmitted. A virtual interface subsystem couples the virtual router subsystem to physical interfaces of the device. The virtual interface subsystem includes virtual interfaces organized into linked sets, and each set associates a generic identifier of a virtual router with a physical interface to another network device serving the same VPRN. A basic type of set includes two VIs for interfacing a virtual router to a customer access link, and a more complicated set includes multiple pairs of several types of VIs to interface a virtual router to redundant label-switched paths on a channel-oriented backbone link such as an ATM link.

Network device virtual interface

A method for performing rate policing and re-marking in a packet switched communications network that can be used to enforce and/or monitor Class of Services (CoS) contracts including terms for single or multiple classes of service. A switching system configured as an ingress node on the network includes a network switch and rate policing and re-marking logic. The switch receives a data packet transmitted on the network, extracts information from at least one header field of the packet including a CoS parameter, a primary flow ID established for the packet, and a packet byte count, and provides the extracted information to the rate policing/re-marking logic. Next, the rate policing/re-marking logic performs flow record and token bucket processing on the primary packet flow to determine whether the packets of the primary flow conform to the bandwidth requirements specified in the CoS contract. In the event the primary flow is a sub-flow of an aggregated packet flow, the logic also performs flow record and token bucket processing on the aggregated flow to determine whether the packets of the aggregated flow comply with the terms of the CoS contract. The logic then provides the token bucket processing results to the switch. Based on these results, the switch may pass the packet unmodified on the network, pass the packet re-marked with a new CoS on the network, or drop the packet from the network.

Dual use rate policer and re-marking logic

Growing community of inventors

Sudbury, MA, United States of America

Gregory Stephen Lauer