Method and system for improving network performance using a performance enhancing proxy

• US 7,219,158 B2
• Filed: 07/12/2001
• Issued: 05/15/2007
• Est. Priority Date: 07/21/2000
• Status: Expired due to Term

• Current Assignee: Hughes Network Systems LLC (Echostar Corporation)
• Original Assignee: Hughes Network Systems LLC (Echostar Corporation)
• Inventors: Border, John, Burrell, Ken
• Primary Examiner(s): Cardone; Jason
• Assistant Examiner(s): Swearingen; Jeffrey R
• Application Number:
  US09/903,832
• Publication Number:
  US 20020059435A1
• Time in Patent Office: 2,133 Days
• Field of Search: 709217-219, 709227-235, 370229-235, 710/68
• US Class Current: 709/240
• CPC Class Codes: H04B 7/18582 Arrangements for data linking, i.e. for data framing, for error recovery, for multiple access
• CPC Class Codes: H04B 7/18584 Arrangements for data networking, i.e. for data packet routing, for congestion control data switching networks H04L12/00
• CPC Class Codes: H04L 12/2854 Wide area networks, e.g. public data networks
• CPC Class Codes: H04L 12/4604 LAN interconnection over a backbone network, e.g. Internet, Frame Relay
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 41/046 comprising network management agents or mobile agents therefor
• CPC Class Codes: H04L 41/06 Management of faults, events, alarms or notifications
• CPC Class Codes: H04L 41/083 for increasing network speed
• CPC Class Codes: H04L 41/0873 Checking configuration conflicts between network elements
• CPC Class Codes: H04L 41/0896 Bandwidth or capacity management, i.e. automatically increasing or decreasing capacities flow or congestion control using dynamic resource allocation, e.g. in-call renegotiation, H04L47/76
• CPC Class Codes: H04L 41/5022 by giving priorities, e.g. assigning classes of service
• CPC Class Codes: H04L 43/00 Arrangements for monitoring or testing data switching networks
• CPC Class Codes: H04L 43/0811 by checking connectivity
• CPC Class Codes: H04L 45/00 Routing or path finding of packets in data switching networks routing or path finding in wireless networks H04W40/00
• CPC Class Codes: H04L 45/22 Alternate routing
• CPC Class Codes: H04L 45/24 Multipath
• CPC Class Codes: H04L 45/28 using route fault recovery
• CPC Class Codes: H04L 45/30 Routing of multiclass traffic
• CPC Class Codes: H04L 45/306 Route determination based on the nature of the carried application
• CPC Class Codes: H04L 45/308 Route determination based on user's profile, e.g. premium users
• CPC Class Codes: H04L 47/10 : Flow control; Congestion control
• CPC Class Codes: H04L 47/193 : at the transport layer, e.g. TCP related
• CPC Class Codes: H04L 47/2408 : for supporting different services, e.g. a differentiated services [DiffServ] type of service
• CPC Class Codes: H04L 47/2433 : Allocation of priorities to traffic types
• CPC Class Codes: H04L 47/2491 : Mapping quality of service [QoS] requirements between different networks
• CPC Class Codes: H04L 47/40 : using split connections
• CPC Class Codes: H04L 47/50 : Queue scheduling
• CPC Class Codes: H04L 49/90 : Buffering arrangements
• CPC Class Codes: H04L 49/901 : using storage descriptor, e.g. read or write pointers
• CPC Class Codes: H04L 49/9042 : Separate storage for different parts of the packet, e.g. header and payload
• CPC Class Codes: H04L 49/9094 : Arrangements for simultaneous transmit and receive, e.g. simultaneous reading/writing from/to the storage element
• CPC Class Codes: H04L 63/0281 : Proxies
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/1466 : Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
• CPC Class Codes: H04L 67/2871 : Implementation details of single intermediate entities
• CPC Class Codes: H04L 67/563 : Data redirection of data network streams
• CPC Class Codes: H04L 67/566 : Grouping or aggregating service requests, e.g. for unified processing
• CPC Class Codes: H04L 67/59 : Providing operational support to end devices by off-loading in the network or by emulation, e.g. when they are unavailable
• CPC Class Codes: H04L 67/61 : taking into account QoS or priority requirements
• CPC Class Codes: H04L 67/63 : Routing a service request depending on the request content or context
• CPC Class Codes: H04L 69/14 : Multichannel or multilink protocols
• CPC Class Codes: H04L 69/16 : Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/161 : Implementation details of TCP/IP or UDP/IP stack architecture; Specification of modified or new header fields
• CPC Class Codes: H04L 69/163 : In-band adaptation of TCP data exchange; In-band control procedures
• CPC Class Codes: H04L 69/165 : Combined use of TCP and UDP protocols; selection criteria therefor
• CPC Class Codes: H04L 69/18 : Multiprotocol handlers, e.g. single devices capable of handling multiple protocols
• CPC Class Codes: H04L 69/22 : Parsing or analysis of headers
• CPC Class Codes: H04L 69/329 : in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 : Network security protocols
• CPC Class Codes: H04W 28/10 : Flow control between communication endpoints
• CPC Class Codes: H04W 28/18 : Negotiating wireless communication parameters
• CPC Class Codes: H04W 40/02 : Communication route or path selection, e.g. power-based or shortest path routing
• CPC Class Codes: H04W 8/04 : Registration at HLR or HSS [Home Subscriber Server]
• CPC Class Codes: Y02D 30/70 : in wireless communication networks

Abstract

A network apparatus for performing functions to enhance performance of a communication network is provided. The network apparatus includes a spoofing module that is configured to selectively spoof a multiple connections associated with a multiple hosts based upon corresponding spoofing criteria and to provide local acknowledgement of received messages over the connections. Additionally, the network apparatus includes a connection module that multiplexes the connections over a common backbone connection, and a prioritization module that prioritizes access to the backbone connection based upon prioritization criteria. Further, the network apparatus includes a path selection module that determines a path to transmit the received messages based upon path selection criteria. The spoofing module allocates a connection control block corresponding to a spoofed connection. Each of the connection control blocks stores information related to the connections. The above arrangement has particular applicability to a bandwidth constrained communication system, such as a satellite network.

Claims

1. A network apparatus for performing functions to enhance performance of a communication network, comprising:

a protocol spoofing module configured to selectively spoof a plurality of connections associated with a plurality of hosts based upon corresponding spoofing criteria and to provide local acknowledgement of received messages over the connections;

a connection module configured to multiplex the plurality of connections over a common backbone connection;

a prioritization module configured to prioritize access to the backbone connection based upon prioritization criteria;

a path selection module configured to determine a path among a plurality of paths to transmit the received messages based upon path selection criteria; and

a data compression module configured to apply compression on the backbone connection or to apply different compression schemes on individual ones of the plurality of connections.

2. The network apparatus according to claim 1, wherein the protocol spoofing module is configured to allocate a connection control block among a plurality of connection control blocks corresponding to a spoofed connection, each of the plurality of connection control blocks storing information related to the plurality of connections, wherein the quantity of connection control blocks is configurable.

3. The network apparatus according to claim 2, further comprising:

a mapping table to store connection control block allocation information.

4. The network apparatus according to claim 2, further comprising:

a hash function logic configured to output pointers corresponding to the plurality of connection control blocks.

5. The network apparatus according to claim 1, wherein the backbone connection is a satellite link, the apparatus further comprising:

an encryption module configured to encrypt the satellite link.

6. The network apparatus according to claim 1, wherein the plurality of connections are established according to the Transmission Control Protocol (TCP).

7. The network apparatus according to claim 1, wherein the spoofing criteria includes at least one of Destination IP (Internet Protocol) address;

Source IP address;

TCP port numbers;

TCP options;

or IP differentiated services (DS) field.

8. The network apparatus according to claim 1, wherein the prioritization criteria includes at least one of Destination IP (Internet Protocol) address, Source IP address, IP next protocol, TCP (Transmission Control Protocol) port numbers, UDP (User Datagram Protocol) port numbers, or IP differentiated services (DS) field.

9. The network apparatus according to claim 1, wherein the prioritization module sets priority of one of the received messages, the one message being an IP (Internet Protocol) packet, wherein the path selection criteria includes at least one of the priority of the IP packet, Destination IP address, Source IP address, IP next protocol, TCP (Transmission Control Protocol) port numbers, UDP (User Datagram Protocol) port numbers, or IP differentiated services (DS) field.

10. A method for performing functions to enhance performance of a communication network, the method comprising:

selectively applying protocol spoofing to a plurality of connections associated with a plurality of hosts based upon corresponding spoofing criteria;

providing local acknowledgement of received messages over the connections;

multiplexing the plurality of connections over a common backbone connection;

prioritizing access to the backbone connection based upon prioritization criteria;

determining a path among a plurality of paths to transmit the received messages based upon path selection criteria; and

applying data compression on the backbone connection or applying different compression schemes on individual ones of the plurality of connections.

11. The method according to claim 10, further comprising:

allocating a connection control block among a plurality of connection control blocks corresponding to a spoofed connection, each of the plurality of connection control blocks storing information related to the plurality of connections, wherein the quantity of connection control blocks is configurable.

12. The method according to claim 11, further comprising:

storing connection control block allocation information in a mapping table.

13. The method according to claim 11, further comprising:

outputting pointers corresponding to the plurality of connection control blocks.

14. The method according to claim 10, wherein the backbone connection in the multiplexing step is a satellite link, the method further comprising:

encrypting the satellite link.

15. The method according to claim 10, wherein the plurality of connections in the step of selectively spoofing are established according to the Transmission Control Protocol (TCP).

16. The method according to claim 10, wherein the spoofing criteria in the step of selectively spoofing includes at least one of Destination IP (Internet Protocol) address;

Source IP address;

TCP port numbers;

TCP options;

or IP differentiated services (DS) field.

17. The method according to claim 10, wherein the prioritization criteria in the prioritizing step includes at least one of Destination IP address, Source IP address, IP next protocol, TCP (Transmission Control Protocol) port numbers, UDP (User Datagram Protocol) port numbers, or IP differentiated services (DS) field.

18. The method according to claim 10, further comprising:

setting priority of one of the received messages, the one message being an IP (Internet Protocol) packet, wherein the path selection criteria in the includes at least one of the priority of the IP packet, Destination IP address, Source IP address, IP next protocol, TCP (Transmission Control Protocol) port numbers, UDP (User Datagram Protocol) port numbers, or IP differentiated services (DS) field.

19. A network apparatus for performing functions to enhance performance of a communication network, the network apparatus comprising:

selectively applying protocol spoofing to a plurality of connections associated with a plurality of hosts based upon corresponding spoofing criteria;

means for providing local acknowledgement of received messages over the connections;

means for multiplexing the plurality of connections over a common backbone connection;

means for prioritizing access to the backbone connection based upon prioritization criteria;

means for determining a path among a plurality of paths to transmit the received messages based upon path selection criteria; and

means for applying data compression on the backbone connection or applying different compression schemes on individual ones of the plurality of connections.

20. The network apparatus according to claim 19, further comprising:

means for allocating a connection control block among a plurality of connection control blocks corresponding to a spoofed connection, each of the plurality of connection control blocks storing information related to the plurality of connections, wherein the quantity of connection control blocks is configurable.

21. The network apparatus according to claim 20, further comprising:

means for storing connection control block allocation information in a mapping table.

22. The network apparatus according to claim 20, further comprising:

means for outputting pointers corresponding to the plurality of connection control blocks.

23. The network apparatus according to claim 19, wherein the backbone connection is a satellite link, the apparatus further comprising:

means for encrypting the satellite link.

24. The network apparatus according to claim 19, wherein the plurality of connections are established according to the Transmission Control Protocol (TCP).

25. The network apparatus according to claim 19, wherein the spoofing criteria includes at least one of Destination IP (Internet Protocol) address;

Source IP address;

TCP port numbers;

TCP options;

or IP differentiated services (DS) field.

26. The network apparatus according to claim 19, wherein the prioritization criteria includes at least one of Destination IP address, Source IP address, IP next protocol, TCP (Transmission Control Protocol) port numbers, UDP (User Datagram Protocol) port numbers, or IP differentiated services (DS) field.

27. The network apparatus according to claim 19, wherein the prioritization module sets priority of one of the received messages, the one message being an IP (Internet Protocol) packet, wherein the path selection criteria includes at least one of the priority of the IP packet, Destination IP address, Source IP address, IP next protocol, TCP (Transmission Control Protocol) port numbers, UDP (User Datagram Protocol) port numbers, or IP differentiated services (DS) field.

28. A computer-readable medium carrying one or more sequences of one or more instructions for performing functions to enhance performance of a communication network, the one or more sequences of one or more instructions including instructions which, when executed by one or more processors, cause the one or more processors to perform the steps of:

selectively applying protocol spoofing to a plurality of connections associated with a plurality of hosts based upon corresponding spoofing criteria;

providing local acknowledgement of received messages over the connections;

multiplexing the plurality of connections over a common backbone connection;

prioritizing access to the backbone connection based upon prioritization criteria;

determining a path among a plurality of paths to transmit the received messages based upon path selection criteria; and

applying data compression on the backbone connection or applying different compression schemes on individual ones of the plurality of connections.

29. The computer-readable medium according to claim 28, wherein the one or more processors further perform the step of:

allocating a connection control block among a plurality of connection control blocks corresponding to a spoofed connection, each of the plurality of connection control blocks storing information related to the plurality of connections, wherein the quantity of connection control blocks is configurable.

30. The computer-readable medium according to claim 29, wherein the one or more processors further perform the step of:

storing connection control block allocation information in a mapping table.

31. The computer-readable medium according to claim 29, wherein the one or more processors further perform the step of:

outputting pointers corresponding to the plurality of connection control blocks.

32. The computer-readable medium according to claim 28, wherein the backbone connection in the multiplexing step is a satellite link, and the one or more processors further perform the step of:

encrypting the satellite link.

33. The computer-readable medium according to claim 28, wherein the plurality of connections in the step of selectively spoofing are established according to the Transmission Control Protocol (TCP).

34. The computer-readable medium according to claim 28, wherein the spoofing criteria in the step of selectively spoofing includes at least one of Destination IP (Internet Protocol) address;

Source IP address;

TCP port numbers;

TCP options;

or IP differentiated services (DS) field.

35. The computer-readable medium according to claim 28, wherein the prioritization criteria in the prioritizing step includes at least one of Destination IP (Internet Protocol) address, Source IP address, IP next protocol, TCP (Transmission Control Protocol) port numbers, UDP (User Datagram Protocol) port numbers, or IP differentiated services (DS) field.

36. The computer-readable medium according to claim 28, wherein the one or more processors further perform the step of:

setting priority of one of the received messages, the one message being an IP (Internet Protocol) packet, wherein the path selection criteria in the includes at least one of the priority of the IP packet, Destination IP address, Source IP address, IP next protocol, TCP (Transmission Control Protocol) port numbers, UDP port numbers, or IP differentiated services (DS) field.