A method is provided for performing control functions in a secure network where security prohibits the transmission of control information beyond secure networks and/or their associated systems. A method is provided for permitting proxy servers to communicate within full DBRA schemes without compromising security. According to various embodiments, methods for IPsec communication are provided that permit systems to move information across secure gateways. In one embodiment, IPsec communication and full DBRA bandwidth/QoS control is provided without compromising security. Although various aspects relate to satellite networks, it should be appreciated that aspects relate to other types of secure networks.