IKE daemon self-adjusting negotiation throttle

1. A method for reducing retransmission processing comprising:

receiving a request for a new negotiation to be performed by a negotiation system,

wherein the negotiation comprises a Security Association (SA) negotiation;

determining if the negotiation system is in congestion; and

if the negotiation system is determined to be in congestion:

determining if a token is available in a token bucket; and

if a token is available in the token bucket:

removing the token from the token bucket; and

performing the new negotiation.

2. The method of claim 1 , wherein the negotiation system comprises an Internet Key Exchange (IKE) daemon.

3. The method of claim 1 , further comprising:

performing the new negotiation if the negotiation system is determined not to be in congestion.

4. The method of claim 1 , further comprising:

adding the request for a new negotiation to a delay queue if a token is not available in the token bucket.

5. The method of claim 4 , further comprising:

processing a negotiation request in the delay queue if a token becomes available in the token bucket.

6. The method of claim 4 , further comprising:

dropping new negotiation requests.

7. The method of claim 1 , further comprising:

periodically adjusting a number of tokens in the token bucket.

8. The method of claim 7 , wherein periodically adjusting further comprises:

determining a maximum negotiation rate of the negotiation system; and

adjusting the number of tokens in the token bucket based on the determined maximum negotiation rate of the negotiation system.

9. A negotiation system for reducing retransmission processing, comprising:

a processing unit;

an input/output interface for receiving a request for a new negotiation to be performed by the negotiation system; and

a computer readable storage medium having stored therein instructions, the instructions, which are executable by the processing unit, comprising:

instructions for determining if the negotiation system is in congestion;

instructions for determining if a token is available in a token bucket if the negotiation system is determined to be in congestion;

instructions for removing a token, if determined to be available, from the token bucket; and

instructions for performing the new negotiation, wherein the new negotiation comprises a Security Association (SA) negotiation.

10. The system of claim 9 , wherein the instructions comprise an Internet Key Exchange (IKE) daemon.

11. The system of claim 9 , wherein the new negotiation is performed if the negotiation system is determined not to be in congestion.

12. The system of claim 9 , further comprising:

instructions for adding the request for a new negotiation to a delay queue if a token is not available in the token bucket.

13. The system of claim 12 , further comprising:

instructions for processing a negotiation request in the delay queue if a token becomes available in the token bucket.

14. The system of claim 9 , further comprising:

instructions for periodically adjusting a number of tokens in the token bucket.

15. The system of claim 14 , wherein the instructions for periodically adjusting further comprises:

instructions for determining a maximum negotiation rate of the negotiation system; and

instructions for adjusting the number of tokens in the token bucket based on the determined maximum negotiation rate of the negotiation system.

16. A program product stored on a computer readable storage medium for reducing retransmission processing, the computer readable storage medium comprising program code for performing the steps of:

receiving a request for a new negotiation to be performed by a negotiation system,

wherein the negotiation comprises a Security Association (SA) negotiation;

determining if the negotiation system is in congestion; and

if the negotiation system is determined to be in congestion:

determining if a token is available in a token bucket; and

if a token is available in the token bucket:

removing the token from the token bucket; and

performing the new negotiation.

17. The program product of claim 16 , further comprising program code for:

adding the request for a new negotiation to a delay queue if a token is not available in the token bucket.

18. The program product of claim 17 , further comprising:

program code for processing a negotiation request in the delay queue if a token becomes available in the token bucket.