Application aware traffic shaping service node positioned between the access and core networks

1. A method comprising:

enforcing a per subscriber, per application traffic policy on network traffic flowing through a network device between a set of one or more subscribers communicatively coupled through an access network and a set of one or more services communicatively coupled through a core network by:

classifying the network traffic at the network device located between the access network and the core network into application level subscriber flows, the classifying including identifying a particular subscriber associated with a given packet, identifying a particular application associated with the given packet, and identifying a control protocol if the given packet contains control protocol data for the particular application;

generating real-time statistics at the network device on the application level subscriber flows and overall network element congestion, wherein the real-time statistics are generated at least in part based on deep packet inspection of the network traffic;

updating, in real-time, at the network device, the per subscriber, per application traffic policy based on the real-time statistics and the classifying, wherein the updating is triggered by the real-time statistics and by identified control protocols; and

restricting bandwidth for the application level subscriber flows at the network device to enforce the updated per subscriber, per application traffic policy.

2. The method of claim 1 , wherein the classifying the network traffic comprises deep packet inspection.

3. The method of claim 1 , wherein the classifying the network traffic comprises identifying an instance of an application.

4. The method of claim 1 , wherein the classifying the network traffic comprises querying the packet to determine if the packet is associated with an application control program.

5. The method of claim 1 , wherein maintaining real-time statistics comprises gathering statistics selected from the group consisting of network statistics, long-term subscriber statistics, short-term subscriber statistics and application statistics.

6. A traffic shaping network device comprising:

a first set of interfaces to couple to an access network through which a plurality of subscribers are communicatively coupled;

a second set of interfaces to couple to a core network through which a plurality of service providers are communicatively coupled;

classifying modules distributed across at least the first and second set of interfaces to classify network traffic between the access and the core networks into application level subscriber flows;

statistics modules distributed across at least the first and second set of interfaces and coupled to receive results of the classifying modules and coupled to maintain real-time statistics on individual subscribers, individual applications, and overall network element congestion based on the results of the classifying modules, wherein the real-time statistics are generated at least in part based on deep packet inspection of the network traffic;

a policy module coupled to receive the real-time statistics and to update the per subscriber, per application traffic policies in real-time based on the real-time statistics; and

a set of traffic modules distributed across the first and second set of interfaces, the traffic modules coupled to receive the updated per subscriber, per application traffic policies in real-time and to enforce the updated per subscriber, per application traffic policy by restricting bandwidth and dropping packets on the application level subscriber flows flowing between the first and second set of interfaces.

7. The traffic shaping network device of claim 6 , wherein the classifying module further comprises deep packet inspection on the network traffic.

8. The traffic shaping network device of claim 6 , wherein the classifying module further comprises identifying an instance of an application of the network traffic.

9. The traffic shaping network device of claim 6 , wherein the classifying module further comprises querying a packet to determine if the packet is associated with an application control program.

10. The traffic shaping network device of claim 6 , wherein the statistics module further comprises gathering statistics selected from the group consisting of network statistics, long-term subscriber statistics, short-term subscriber statistics and application statistics.

11. The traffic shaping network device of claim 6 , wherein the subscriber application level traffic shaping network device is non-routing.

12. The method of claim 1 , further comprising:

if the given packet contains the control protocol data for the particular application, then temporarily increasing bandwidth limits for a data flow of the particular application.

13. The method of claim 1 , wherein generating the real-time statistics further comprises:

determine a sliding window time period;

generating short term statistics for a given subscriber during the sliding window time period; and

generating short term statistics for a given application associated with the given subscriber during the sliding window time period.

14. The method of claim 13 , wherein generating the real-time statistics further comprises generating long term statistics for the given subscriber for a duration of a session associated with the given subscriber.

15. The method of claim 14 , wherein restricting bandwidth for the application level subscriber flows further includes restricting bandwidth of the particular application for the particular subscriber based at least in part on short term statistics and long term statistics generated for the particular subscriber.

16. The traffic shaping network device of claim 6 , wherein the policy module comprises a plurality of policy modules distributed across a plurality of processor cards and wherein the first and second set of interfaces comprise a plurality of line cards each coupled to each of the processor cards.

17. The traffic shaping network device of claim 16 , wherein portions of the classify modules and statistics modules are also distributed across the plurality of processor cards.

18. The traffic shaping network device of claim 17 wherein the policy modules operating on the processor cards update traffic policies enforced by the traffic modules operating on the line cards in response to identified control protocols without introducing delay in data flows flowing between the line cards.

19. The traffic shaping network device of claim 17 , wherein a first processor card comprises a backup processor card for a second processor card by maintaining functionality and state information for the second processor card to be ready to takeover functions of the second processor card in an event of failure.