Dynamic assignment and enforcement of application-driven per-connection service level agreements

A non-transitory computer readable medium comprising instructions that, when executed by a computer processor, perform a method for handling connection requests, the method comprising:

• receiving, by an operating system (OS), a first request from an application to create a first connection,
• wherein the first request comprises a first connection identifier and a first service-level agreement (SLA) comprising a value for each of a plurality of SLA parameters, and
• wherein the first SLA is set by the application via the OS;
• determining, by the OS, that the application is authorized to create the first connection,
• wherein determining that the application is authorized to create the first connection comprises:
• retrieving an entry for the application from an application permissions table, the entry mapping an application identifier of the application to an OS task that sets the first SLA for the first connection, the entry comprising a restriction on the value for a first SLA parameter of the plurality of SLA parameters;
• comparing the value for the first SLA parameter with the restriction to determine that the application is authorized;
• setting the value for the first SLA parameter in a first SLA data structure corresponding to the first SLA based on the value satisfying the restriction:
• creating, by the OS, the first connection targeting the application in response to the determination that the application is authorized to create the first connection;
• mapping, in response to the determination that the application is authorized to create the first connection, the first connection to the first SLA in the first SLA data structure;
• receiving first incoming data targeting the first connection identifier from a network;
• processing, by a network protocol stack on the OS, the first incoming data according to the first SLA in the first SLA data structure to obtain first processed incoming data;
• and
• providing, by the OS, the first processed incoming data to the application.

A system for handling connection requests comprising:

• a computer processor;
• an operating system (OS), executing on the computer processor, configured to:
• receive a first request from an application to create a first connection,
• wherein the first request comprises a first connection identifier and a first service-level agreement (SLA) comprising a value for each of a plurality of SLA parameters, and
• wherein the first SLA is set by the application via the OS;
• determine that the application is authorized to create the first connection,
• wherein determining that the application is authorized to create the first connection comprises:
• retrieving an entry for the application from an application permissions table, the entry mapping an application identifier of the application to an OS task that sets the first SLA for the first connection, the entry comprising a restriction on the value for a first SLA parameter of the plurality of SLA parameters;
• comparing the value for the first SLA parameter with the restriction to determine that the application is authorized;
• setting the value for the first SLA parameter in a first SLA data structure corresponding to the first SLA based on the value satisfying the restriction;
• create the first connection targeting the application in response to the determination that the application is authorized to create the first connection;
• and
• map, in response to the determination that the application is authorized to create the first connection, the first connection to the first SLA in the first SLA data structure;
• and
• a network protocol stack configured to:
• receive first incoming data targeting the first connection identifier from a network;
• process the first incoming data according to the first SLA in the first SLA data structure to obtain first processed incoming data;
• and
• provide the first processed incoming data to the application.