DISTRIBUTED CONNECTIVITY POLICY ENFORCEMENT WITH ICE

摘要

Instead of utilizing a centralized server or hardware (routers/gateways) to enforce connectivity policy restrictions, the policy connectivity restrictions for media session traffic are enforced by an endpoint that is involved in the media communication. Based on the policy requirements, the client enforces the policy restrictions by restricting the candidates that may be selected for the establishment of the media path. For example, the enforcement may result in the client selecting a path from available candidates that avoids congested Wide Area Network (WAN) links, avoiding a low bandwidth link, or possibly even failing the communication completely. The clients may also provide periodic updates to the policy server to allow tracking of the utilization of managed WAN links.

主权项

1. A method for enforcing policy restrictions for a conversation established over an Internet Protocol (IP) network, comprising:
determining candidates for use in connecting a first client with a second client; wherein the first client and the second client are endpoints of the communication; determining a policy restriction that specifies a restriction on a media flow for the communication between the first client and the second client; using at least one of the endpoints for removing any candidates from the candidates that are restricted by the policy restriction; and establishing the conversation between the first client and the second client using the remaining candidates.