Method and system for communicating over a segmented virtual private network (VPN)

摘要

An approach for providing secure communication services is disclosed. A secure (e.g., a Virtual Private Network (VPN)) tunnel from a source node over an access network, such as a satellite network, to a destination node, wherein the nodes are external to the network. A connection that supports a mechanism for enhancing performance of the network is established for a portion of the secure tunnel that traverses the network.

主权项

1. A method of providing secure communication services, the method being performed by one or more processors and comprising:
supporting a secure tunnel from a source node over a network to a destination node, wherein the nodes are external to the network; and selectively establishing a connection over a segment of the secure tunnel that traverses the network, wherein the connection supports a mechanism for enhancing performance of the network, wherein the source node generates a plurality of packets according to Transmission Control Protocol/Internet Protocol (TCP/IP) for transmission over the secure tunnel, and wherein the performance enhancing mechanism in the establishing step is configured to perform the steps of,
spoofing acknowledgement messages to the source node, andmultiplexing flows of the packets from the source node for transport over the established connection.