At+t Corp.

Ensim Corporation

Digital Asset Enterprises, L.l.c.

Other

AT&T Intellectual Property I, LP

Pawan Goyal

Kadangode K Ramakrishnan

Albert Gordon Greenberg

Partho Pratim Mishra

Srinivasan Keshav

Rosen Sharma

Xun Wilson Huang

Nicholas G Duffield

Peter J Newman

Gisli Hjalmtysson

Snorri Gylfason

Jacobus Erasmus Van Der Merwe

Jacobus Frasmus Van Der Merwe

Selected processes are associated with sets of specific network addresses, and the associations are stored. When a selected process creates a child process, an association between the child process and the set of network addresses with which the parent process is associated is stored. When a selected process is deleted, the association between the selected process and its set of network addresses is deleted. Each selected process is restricted to network address-based communication via its associated set of network addresses. Certain communication protocol subroutines associated with network address-based communication are intercepted by an interception module. The interception module detects attempts by selected processes to communicate via network addresses. If a selected process attempts to communicate via an unassociated network addresses, the attempted communication is prohibited.

Restricting communication of selected processes to a set of specific network addresses

A method and system allows a service provider to provide Intranet services remotely by assigning private virtual servers to customers. Each customer addresses transmissions to one or more private virtual servers using private addresses from the customer's private Intranet. The addresses of different private virtual servers do not have to be unique and may overlap. Customers exchange privately-addressed transmissions with the service provider using tunnels to traverse the local or regional network connecting the customer with the service provider. The service provider routes the transmissions to the relevant private virtual server belonging to the customer that sent the transmission. The service provider also routes privately-addressed transmissions back to individual customers using tunnels.

Enabling a service provider to provide intranet services

Signaling messages are exchanged for a call between a calling party to a called party. A setup message for the call is exchanged through at least one gate controller. Network resources are reserved for the call based on the exchanged setup messages. An end-to-end message for the call is exchanged without the end-to-end message being routed through the at least one gate controller.

Method for bandwidth management by resizing pipes

A method facilitates providing appropriate quality of service guarantees to a plurality of virtual hosts on a single physical host computer. A server application program and its child processes service communication requests made to the plurality of virtual hosts. Quality of service parameters associated with the virtual hosts are stored. Communication requests made to a specific one of the virtual hosts are detected. The quality of service parameters associated with the specific virtual host are obtained. Operating system resources are utilized to guarantee, to a child process of the server application program, a quality of service according to the obtained quality of service parameters associated with the virtual host. Communication between the virtual host and the client is allowed to proceed, the communication being managed by the child process.

Providing quality of service guarantees to virtual hosts

The invention provides apparatus and methods for a Virtual Private Network (VPN) in a network that offers a simple user interface for efficient utilization of network resources. The VPN is defined for a specified set of endpoints each of which is associated with a single 'hose.' A hose provides access to the VPN through an access point which may be a node of the network, for example. The hose is a single interface to the VPN for communication to all other endpoints of the VPN. The VPN achieves network resource allocation efficiency by exploiting resource sharing possibilities via multiplexing routing paths between endpoints and dynamic resource allocation techniques that permit real time resource allocation resizing. When a VPN is established with a VPN service provider, the routing paths between the endpoints of the VPN is optimized for multiplexing opportunities so that resource allocations between nodes along routing paths within the IP network is reduced to a minimum.

Virtual private network

Multiple virtual processes are each associated with a unique virtual process identifier. For each virtual process, a separate initialization process is started, from which all other processes included in the virtual process originate. The initialization process is associated with the appropriate virtual process identifier. System calls that create new processes are intercepted, and created processes are associated with the virtual process identifier of the appropriate initialization process. Multiple virtual processes are provided on a single, physical computer system.

Associating identifiers with virtual processes

Resource requests from a plurality of schedulable entities are scheduled while limiting the maximum and minimum quality of service allocated to each schedulable entity. The resource scheduler of the present invention requires less memory maintain state information than existing rate-controlling schedulers, and is thus more easily scalable to large numbers of users. The resource scheduler also schedules resources fairly among competing schedulable entities. A fair-share scheduling algorithm is used by a resource scheduler to select resource requests to service. A rate controller checks to ensure that servicing the selected request will not cause the associated user's maximum quality of service to be exceeded. If the maximum quality of service will not be exceeded, the virtual time used in the scheduling algorithm is incremented, and the request is serviced. If the maximum quality of service will be exceeded, the virtual time is still incremented, but the request is not serviced and remains pending.

Fairly partitioning resources while limiting the maximum fair share

The present invention permits quality-of-service routing without using any flow pinning or per-flow state mechanisms. In accordance with the present invention, load insensitive routing techniques are utilized for QoS traffic while load sensitive routing techniques are utilized for best effort traffic. In accordance with a preferred embodiment of the present invention, conventional static shortest path routing is utilized for flows that require QoS guarantees while known QoS routing techniques are utilized for best effort flows. Unlike the prior art, a single queue per class per link can be utilized at a network node. The present invention has numerous advantages over the prior art including reduced protocol overhead, lower cost, and reduced route instability.

Growing community of inventors

Mountain View, CA, United States of America

Pawan Goyal