An Analytical Framework for SLA Admission Control in a DiffServ Domain