Dynamic response to traffic bursts in a computer network

A node, comprising:

• one or more network interfaces configured to receive and forward traffic;
• one or more processors coupled to the network interfaces and configured to execute one or more processes;
• and
• a memory configured to store a burst response process executable by each processor, the burst response process when executed operable to:
• i) receive traffic sent from one or more sources toward one or more destinations;
• and ii) detect an occurrence of a burst of traffic in the received traffic (“burst traffic”) based on one or more characteristics of traffic that, if surpassed by the received traffic, trigger detection of the burst traffic;
• the memory further configured to store a traffic shaping process and a store and forward process, each cooperating with the burst response process and, when executed, operable to, respectively:
• iii) in response to detection of the burst traffic, apply traffic shaping to the burst traffic, the traffic shaping configured to forward burst traffic received below a configurable threshold at a configurable pace and to drop burst traffic received above the configurable threshold;
• iv) store the burst traffic dropped by the traffic shaping;
• v) apply a second configurable threshold to the stored burst traffic;
• vi) forward stored burst traffic that is below the second configurable threshold toward the one or more destinations after a configurable delay;
• and
• vii) forward stored burst traffic above the second configurable threshold toward the one or more destinations without added delay.

An apparatus, comprising:

• means for receiving traffic sent from one or more sources toward one or more destinations;
• means for detecting an occurrence of a burst of traffic in the received traffic (“burst traffic”) based on one or more characteristics of traffic that, if surpassed by the received traffic, trigger detection of the burst traffic;
• means for applying traffic shaping to the burst traffic in response to detection of the burst traffic, the traffic shaping configured to forward burst traffic received below a configurable threshold at a configurable pace and to drop burst traffic received above the configurable threshold;
• means for storing the burst traffic dropped by traffic shaping;
• means for applying a second threshold to the stored burst traffic;
• means for forwarding stored burst traffic that is below the second configurable threshold toward the one or more destinations after a configurable delay;
• and
• means for forwarding stored burst traffic above the second configurable threshold toward the one or more destinations without added delay.

A method, comprising:

• monitoring a flow of traffic received at a node from one or more sources and directed toward one or more destinations;
• determining if particular traffic in the flow of traffic is part of a burst of traffic (“burst traffic”), or is not part of a burst of traffic (“non-burst traffic”), based on one or more characteristics that trigger detection of a burst of traffic;
• in response to determining that the particular traffic in the flow of traffic is burst traffic,
• applying traffic shaping to the burst traffic by the node, the traffic shaping to forward burst traffic received below a threshold at a configurable pace and to drop burst traffic received above the threshold,
• storing, at the node, the burst traffic dropped by the traffic shaping,
• forwarding stored burst traffic that is below a second threshold after a configurable delay, and
• forwarding stored burst traffic that is above the second threshold without added delay;
• in response to determining the particular traffic in the flow of traffic is non-burst traffic, forwarding the non-burst traffic toward the one or more destinations by the node, without applying traffic shaping by the node.

An apparatus, comprising:

• one or more network interfaces configured to receive and forward traffic;
• a processor coupled to the one or more network interfaces and configured to execute one or more processes;
• and
• a memory configured to store one or more processes executable by the processor, the one or more processes operable, when executed, to
• monitor a flow of traffic received on the one or more network interfaces from one or more sources and directed toward one or more destinations,
• determine if particular traffic in the flow of traffic is part of a burst of traffic (“burst traffic”), or is not part of a burst of traffic (“non-burst traffic”), based on one or more characteristics that trigger detection of a burst of traffic,
• in response to a determination that the particular traffic in the flow of traffic is burst traffic,
• apply traffic shaping to the burst traffic, the traffic shaping to forward burst traffic received below a threshold at a configurable pace and to drop burst traffic received above the threshold,
• store the burst traffic dropped by the traffic shaping,
• forward stored burst traffic that is below a second threshold after a configurable delay, and
• forward stored burst traffic that is above the second threshold without added delay, and
• in response to a determination that the particular traffic in the flow of traffic is non-burst traffic, forward the non-burst traffic toward the one or more destinations without application of traffic shaping.