ENABLING QoS FOR MACsec PROTECTED FRAMES
AssigneeCisco Technology, Inc.
InventorsBrian Weis, Saurabh Mohan, Chandramouli Radhakrishnan
Life of this patent
Estimating the term…
Abstract
Embodiments associated with enabling Quality of Service (QoS) for MACsec protected frames are described. One example method includes identifying a security indicator in an encrypted network communication and selectively forwarding the encrypted network communication according to a QoS policy. The example method may also include selectively storing a control packet security indicator sniffed from a control packet network communication in response to determining that a match exists between a control packet identification field and a QoS database entry.
Claims22
A computer readable medium storing computer readable instructions that when executed by a computer cause the computer to perform a method, the method comprising:
- identifying a security indicator in an encrypted network communication;
- and
- selectively forwarding the encrypted network communication according to a policy associated with a known security indicator in a Quality of Service (QoS) database, the known security indicator being selected based, at least in part, on the security indicator identified in the encrypted network communication, where the policy controls QoS associated with a connection over which the encrypted network communication is forwarded.
An apparatus, comprising:
- a Quality of Service (QoS) data store to store a QoS policy;
- an identification logic to detect a passport signal in an encrypted network communication;
- a compare logic to determine if the passport signal is a known passport signal in the QoS data store, where a known passport signal is associated with the QoS policy that controls QoS associated with a connection;
- and
- a forwarding logic to selectively relay the encrypted network communication as a function of the passport signal identified in the encrypted network communication.
A data processing system, comprising:
- one or more processors;
- means for storing a Quality of Service (QoS) policy;
- means for identifying a security signal in a communication;
- and
- means for selectively forwarding the communication according to the QoS policy associated with the security signal.
A method, comprising:
- identifying a security indicator in an encrypted network communication;
- and
- selectively forwarding the encrypted network communication according to a policy associated with a known security indicator in a Quality of Service (QoS) database, the known security indicator being selected based, at least in part, on the security indicator identified in the encrypted network communication, where the policy controls QoS associated with a connection over which the encrypted network communication is forwarded.
Dependencies are inferred from the claim text.