Apparatus and methods are provided for multiplexing and selectively
encrypting application flows, such as VoIP services, over a pre-allocated
bandwidth reservation protocol session. According to one embodiment, a
pre-allocated reservation protocol session, such as an RSVP session, is
shared by one or more individual application sessions. The reservation
protocol session is pre-allocated over a path between a first network
device associated with a first user community and a second network device
associated with a second user community based upon an estimated usage of
the path for individual application sessions between users of the first
and second user communities. Subsequently, the one or more individual
application sessions are dynamically aggregated by multiplexing
application flows associated with the one or more individual application
sessions onto the pre-allocated reservation protocol session at the first
network device and demultiplexing at the second network device.
Additionally, various levels of security may be selectively applied to
the application sessions by performing encryption at the first network
device and decryption at the second network device.