Call admission control and preemption control over a secure tactical network

A non-transitory computer readable medium, having instructions stored thereon that, in response to execution by a device, cause the device to perform operations comprising:

• determining whether data traffic is using Transmission Control Protocol (TCP);
• in response to determining that the data traffic is using TCP:
• calculating a required bandwidth for sending the data traffic to a destination through an encrypted network with a call admission control and preemption control;
• and
• determining with the call admission control and preemption control whether to admit or deny data traffic into the encrypted network based at least in part on a carried traffic per differentiated services code point (DSCP) calculated and provided by a destination measurement device located at the destination to the call admission control and preemption control, wherein the calculated carried traffic per DSCP is based on information regarding data traffic received at the destination from a source over the encrypted network, wherein the information comprises at least one of an ingress time stamp of received packets or a packet sequence of received packets;
• wherein all parameters of the encrypted network are unknown to the destination measurement device and the call admission control and preemption control, except via the information received by the destination measurement device at the destination regarding at least one of the ingress time stamp of the received packets or the packet sequence of the received packets.