Firewall system for quality of service management

• US 6,341,309 B1
• Filed: 12/24/1997
• Issued: 01/22/2002
• Est. Priority Date: 05/27/1997
• Status: Expired due to Term

• Current Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Original Assignee: Novell Incorporated (Open Text Corporation)
• Inventors: Sawhney, Sanjay, Vaid, Aseem
• Primary Examiner(s): Sheikh, Ayaz
• Assistant Examiner(s): Tran, Philip B.
• Application Number:
  US08/998,314
• Time in Patent Office: 1,490 Days
• Field of Search: 709/223, 709/226, 709/245, 709/235, 709/241, 709/225, 709/233, 709/234, 375/225, 370/234, 370/254, 370/389, 370/232, 370/230
• US Class Current: 709/223
• CPC Class Codes: H04L 1/1854 Scheduling and prioritising arrangements
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/0896 Bandwidth or capacity management, i.e. automatically increasing or decreasing capacities flow or congestion control using dynamic resource allocation, e.g. in-call renegotiation, H04L47/76
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 41/5022 by giving priorities, e.g. assigning classes of service
• CPC Class Codes: H04L 43/00 Arrangements for monitoring or testing data switching networks
• CPC Class Codes: H04L 43/0829 Packet loss
• CPC Class Codes: H04L 43/0852 Delays
• CPC Class Codes: H04L 43/087 Jitter
• CPC Class Codes: H04L 43/0888 Throughput
• CPC Class Codes: H04L 47/11 Identifying congestion
• CPC Class Codes: H04L 47/15 in relation to multipoint traffic arrangements for broadcast or multicast in data networks H04L12/18
• CPC Class Codes: H04L 47/20 Traffic policing
• CPC Class Codes: H04L 47/2441 relying on flow classification, e.g. using integrated services [IntServ]
• CPC Class Codes: H04L 47/283 in response to processing delays, e.g. caused by jitter or round trip time [RTT]
• CPC Class Codes: H04L 47/323 Discarding or blocking control packets, e.g. ACK packets
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 47/788 Autonomous allocation of resources
• CPC Class Codes: H04L 47/803 Application aware
• CPC Class Codes: H04L 47/805 : QOS or priority aware
• CPC Class Codes: H04L 47/821 : Prioritising resource allocation or reservation requests
• CPC Class Codes: H04L 47/822 : Collecting or measuring resource availability data
• CPC Class Codes: H04L 63/0263 : Rule management

Abstract

A novel system for a network of computers to improve quality of services using a combination of a bandwidth mangement tool in a firewall. The present system includes, among other elements, a plurality of computers, which are each coupled to each other to form an internal network of computers (e.g., local area network or LAN). The system also includes a server, which has a memory sufficient to store a firewall program. The server is coupled to at least one of the plurality of computers, where the server is also coupled to an outgoing line to a wide area network of computers, which can be, for example, the Intenet. A bandwidth management tool is coupled to or stored in the server, where the bandwidth management tool is capable of monitoring incoming and outgoing information to and from the server.

Claims

1. A system for monitoring quality of service within a network of computers, said system comprising:

a plurality of computers coupled to form an internal network of computers;

a firewall server comprising a firewall program coupled to at least one of said plurality of computers and coupled to an outgoing line to a wide area network of computers, said firewall server being configured to receive a connection request, estimate a bit rate over a round-trip-time between said at least one of said plurality of computers and the wide area network of computers, receive a receive acknowledgment signal at said at least one of said plurality of computers, delay transmission of a receive acknowledgment signal when the bit rate is greater than a bit rate limit, and transmit the receive acknowledgment signal over the outgoing line when the bit rate is not greater than the bit rate limit; and

a bandwidth management tool coupled to said firewall server, said bandwidth management tool being capable of monitoring and managing incoming and outgoing information to and from said firewall server by classifying the connection request received at said firewall server into a traffic class from a plurality of traffic classes, determining a minimum bandwidth for said plurality of traffic classes, determining a maximum latency for said plurality of traffic classes, and dynamically allocating bandwidth to the connection request based on the traffic class into which the connection request is classified, said traffic class having a minimum bandwidth and/or a maximum latency, and the total traffic on the system.

2. The system of claim 1 wherein said incoming information is transmission control protocol/Internet protocol.

3. The system of claim 1 wherein said outgoing information is transmission control protocol/Intenet protocol.

4. The system of claim 1 wherein said firewall server is configured as a gateway.

5. The system of claim 1 wherein said monitoring occurs by filtering of data packet acknowledgments (ACKs).

6. The system of claim 1 wherein said monitoring occurs by invoking a transmission control protocol/Intenet protocol native source flow control.

7. The system of claim 1 wherein said system comprises a computer readable memory.

8. The system of claim 7 wherein said computer readable memory comprises said firewall program and said bandwidth management tool.

9. The system of claim 1 wherein said firewall server provides a single access point for said firewall program and said bandwidth management tool.

10. The system as recited in claim 1 wherein the connection request received by the firewall server is classified into a traffic class based on properties of the connection request, the properties selectable from a group of properties including source of the connection request, destination of the connection request, data-type of the connection request, type of the connection request, direction of the connection request, protocol used by the connection request, and characteristics of users of the connection request.

11. A method for installing a bandwidth management tool into a firewall for a network of computers, said network of computers each being coupled to each other to form a local aea network;

said network of computers being coupled to a firewall server having computer memory, said firewall server being configured to receive a connection request, comprising;

estimating a bit rate over a round-trip-time between said at least one of said plurality of computers and the wide area network of computers, receive a receive acknowledgment signal at said at least one of said plurality of computers, delay transmission of a receive acknowledgment signal when the bit rate is greater than a bit rate limit, and transmit the receive acknowledgment signal over the outgoing line when the bit rate is not greater than the bit rate limit to conserve bandwidth; and

,

installing a bandwidth management tool into a portion of said computer memory, said bandwidth management tool being into a portion of said computer memory, said bandwidth management tool being capable of monitoring and managing incoming and outgoing information to and from said firewall server by classifying the connection request received at said firewall server by classifyring the connection request received at said firewall server into a traffic class from a plurality of traffic classes, dotennning the minimum bandwidth for said plurality of traffic classes, determining the minimum bandwidth for said plurality of traffic classes, determining the maximum latency for said plurality of traffic classes, and dynamically allocating bandwidth to the connection request based on the traffic class into which the connection request is classified, said traffic class having a minimum bandwidth and a maximum latency, and tho total traffic on the system.

12. The method of claim 11 wherein said incoming information is transmission control protocol/Internet protocol.

13. The method of claim 11 wherein said outgoing information is transmission control protocol/Internet protocol.

14. The method of claim 11 wherein said firewall server is configured as a gateway.

15. The system of claim 11 wherein said monitoring occurs by filtering of data packet acknowledgments (ACKs).

16. The system of claim 11 wherein said monitoring occurs by invoking a transmission control protocol/Internet protocol native source flow control.

17. The method of claim 11 wherein said firewall server provides a single access point for said firewall program and said bandwidth management tool.

18. The method as recited in claim 11 wherein the connection request received by the firewall server is classified into a traffic class based on properties of the connection request, the properties selectable from a group of properties including source of the connection request, destination of the connection request, data-type of the connection request, type of the connection request, direction of the connection request, protocol used by the connection request, and characteristics of users of the connection request.

19. A computer readable media having instructions written thereon for the practice of a method for installing a bandwidth management tool into a firewall for a network of computers, said network of computers each being coupled to each other to form a local area network, said network of computers being coupled to a firewall server having computer memory, said firewall server being configured to receive a connection request, comprising:

estimating a bit rate over a round-trip-time between said at least one of said plurality of computers and the wide area network of computers, receive a receive acknowledgment signal when the bit rate is greater than a bit rate limit, and transmit the receive acknowledgement signal over the outgoing line when the bit rate is not greater than the bit rate limit to conserve bandwidth; and

,

installing a bandwidth management tool into a portion of said computer memory, said bandwidth management tool being into a portion of said computer memory, said bandwidth management tool being capable of monitoring and managing incoming and outgoing information to and from said firewall server by classifying the connection request received at said firewall server by classifying The connection request received at said firewall server into a traffic class from a plurality of traffic classes, determining the is width for said plurality of traffic classes, determining the maximum latency for said plurality of traffic classes, and dynamically allocating bandwidth to the connection request based on the traffic class into which the connection request is classified, said traffic class having a minimum bandwidth and a maximum latency, and the total traffic on the system.

20. Electromagnetic signals propagating on a computer network, said electromagnetic signals carrying information for the practice of a method for installing a bandwidth management tool into a firewall for a network of computers, said network of computers cachl being coupled to each other to form a local area network, said network of computers being coupled to a firewall server having computer memory, said firewall server being configured to receive a connection request, comprising:

estimating a bit rate over a round-trip-time between said at least one of said plurality of computers and the wide area network of computers, receive a receive acknowledgement signal at said at least one of said plurality of computers, delay transmission of a receive acknowledgement signal when the bit rate is greater than a bit rate limit, and transmit the receive acknowledgment signal over the outgoing line when the bit rate is not greater than the bit rate limit to conserve bandwidth; and

,

installing a bandwidth management tool into a portion of said computer memory, said bandwidth management tool being into a portion of said computer memory, said bandwidth management tool being capable of monitoring and managing incoming and outgoing information to and from said firewall server by classiing the connection request received at said firewall server by classifying the connection request received at said firewall server into traffic class from a prlity of traffic classes, determining the minimum bandwidth for said plurality of traffic classes, determining the minimum bandwidth for said plurality of traffic classes, determining the maximum latency for said plurality of traffic classes, and dynamically allocating bandwidth to the connection request based on the traffic class into which the connection request is classified, said traffic class having a minimum bandwidth and a maximum latency, and the total traffic on the system.