Hierarchical enforcement of service flow quotas

An overlay router comprising:

• a quota initializer to determine a local traffic quota for a service reachable via an overlay network based on one or more communications with one or more servers connected to the overlay router;
• a quota allocator to determine an allocation of the local traffic quota across a set of data sources associated with the overlay network, wherein the set of data sources is to include a plurality of devices and the overlay router further includes a proxy component to track individual connections between the plurality of devices and the service, and monitor the individual connections for unauthorized behavior;
• and
• an allocation enforcer to impose the allocation on one or more packets received from the set of data sources, wherein the allocation enforcer includes:
• a compliance component to send the one or more packets to the one or more servers if delivery of the one or more packets to the one or more servers complies with the allocation;
• and
• a non-compliance component to delay delivery of the one or more packets to the one or more servers if the one or more packets do not comply with the allocation.

A method comprising:

• determining a local traffic quota for a service reachable via an overlay network based on one or more communications with one or more servers connected to the overlay router;
• determining an allocation of the local traffic quota across a set of data sources associated with the overlay network;
• and
• imposing the allocation on one or more packets received at an overlay router from the set of data sources, wherein imposing the allocation includes:
• sending the one or more packets to the one or more servers if delivery of the one or more packets to the one or more servers complies with the allocation;
• and
• delaying delivery of the one or more packets to the one or more servers if the one or more packets do not comply with the allocation.

At least one non-transitory computer readable storage medium comprising a set of instructions which, when executed by a processor, cause the processor to:

• determine a local traffic quota for a service reachable via an overlay network based on one or more communications with one or more servers connected to the overlay router;
• determine an allocation of the local traffic quota across a set of data sources associated with the overlay network;
• and
• impose the allocation on one or more packets received at an overlay router from the set of data sources, wherein the processor is to:
• send the one or more packets to the one or more servers if delivery of the one or more packets to the one or more servers complies with the allocation;
• and
• delay delivery of the one or more packets to the one or more servers if the one or more packets do not comply with the allocation.

An apparatus comprising:

• means for determining a local traffic quota for a service reachable via an overlay network based on one or more communications with one or more servers connected to the overlay router;
• means for determining an allocation of the local traffic quota across a set of data sources associated with the overlay network;
• and
• means for imposing the allocation on one or more packets received at an overlay router from the set of data sources, wherein the means for imposing the allocation includes:
• means for sending the one or more packets to the one or more servers if delivery of the one or more packets to the one or more servers complies with the allocation;
• and
• means for delaying delivery of the one or more packets to the one or more servers if the one or more packets do not comply with the allocation.