Call Admission Control and Preemption Control Over a Secure Tactical Network

A program storage device, readable by machine, tangibly embodying instructions executable by the machine to cause the machine to perform operations comprising:

• determining whether data traffic is using Transmission Control Protocol (TCP);
• in response to determining that the data traffic is using TCP, calculating a required bandwidth for sending the data traffic along a path in a secured network and determining whether the secure network is congested based on the required bandwidth;
• in response to determining that the secure network is not congested, admitting the data traffic into the secure network;
• and
• in response to determining that the secure network is congested:
• determining preempted data traffic comprising a quantity of the data traffic to be preempted to remove congestion,
• rejecting the preempted data traffic from admission into the secure network according to a priority policy, and
• admitting the data traffic that is not preempted traffic into the secure network.

A method comprising:

• determining whether data traffic is using Transmission Control Protocol (TCP);
• in response to determining that the data traffic is using TCP, calculating a required bandwidth for sending the data traffic through the secure network and determining whether the secure network is congested based on the required bandwidth;
• in response to determining that the secure network is not congested, calculating whether the required bandwidth is less than an available bandwidth multiplied by η, where η is a tunable parameter;
• in response to determining that the required bandwidth is less than the available bandwidth multiplied by η, admitting the data traffic into the secure network;
• and
• in response to determining that the required bandwidth is not less than the available bandwidth multiplied by η or that the secure network is congested:
• determining preempted data traffic comprising a quantity of the data traffic to be preempted to remove congestion,
• rejecting the preempted data traffic from admission into the secure network according to a priority policy, and
• admitting the data traffic that is not preempted traffic into the secure network.

A program storage device, readable by a machine, tangibly embodying a program of instructions executable by the machine to cause the machine to perform operations comprising:

• determining whether data traffic is using Transmission Control Protocol (TCP);
• in response to determining that the data traffic is using TCP, calculating a required bandwidth for sending the data traffic through the secure network and determining whether the secure network is congested based on the required bandwidth;
• in response to determining that the secure network is not congested, calculating whether the required bandwidth is less than an available bandwidth multiplied by η, where η is a tunable parameter;
• in response to determining that the required bandwidth is less than the available bandwidth multiplied by η, admitting the data traffic into the secure network;
• and
• in response to determining that the required bandwidth is not less than the available bandwidth multiplied by η or that the secure network is congested:
• determining preempted data traffic comprising a quantity of the data traffic to be preempted to remove congestion,
• rejecting the preempted data traffic from admission into the secure network according to a priority policy, and
• admitting the data traffic that is not preempted traffic into the secure network.

A method comprising:

• receiving at a bandwidth broker computing device from a destination measurement device information regarding calculated carried traffic received at the destination measurement device;
• calculating at the bandwidth broker computing device an amount of traffic to be preempted from a source network associated with the bandwidth broker computing device to remove congestion through a secure network, the calculation including at least in part the information regarding calculated carried traffic;
• building at the bandwidth broker computing device a priority table of traffic to be introduced into the secure network according to a priority policy;
• and
• selecting at the bandwidth broker computing device traffic flows from the source network from the priority table starting with the lowest priority until the selected traffic flow is equal to or greater than the calculated amount of traffic to be preempted.

A storage device, readable by machine, tangibly embodying instructions executable by the machine to cause the machine to perform actions comprising:

• receiving information regarding calculated carried traffic received at a destination measurement device;
• calculating an amount of traffic to be preempted from a source network in order to remove congestion through a secure network, the calculation including at least in part the information regarding calculated carried traffic;
• building a priority table of traffic to be introduced into the secure network according to a priority policy;
• and
• selecting traffic flows from the priority table starting with the lowest priority until the selected traffic flow is equal to or greater than the calculated amount of traffic to be preempted.