Providing in-line services through radio access network resources under control of a mobile packet core in a network environment
    64.
    发明授权
    Providing in-line services through radio access network resources under control of a mobile packet core in a network environment 有权
    通过在网络环境中的移动分组核心的控制下通过无线电接入网络资源提供在线服务

    公开(公告)号:US09300453B2

    公开(公告)日:2016-03-29

    申请号:US14086781

    申请日:2013-11-21

    CPC classification number: H04L5/0053 H04W8/18 H04W8/20 H04W76/11

    Abstract: A method is provided in one example embodiment and includes sending, by a first entity associated with an access network, a first request message including a session identifier associated with a user session to a second entity associated with a core network. The method further includes establishing a first control channel with the second entity in which the first control channel is associated with the session identifier. The first control channel is an in-band channel between the first entity and the second entity. The method further includes receiving policy information associated with the user session from the second entity using the first control channel. The policy information is indicative of one or more policies to be applied in the access network to user data associated with the user session.

    Abstract translation: 在一个示例实施例中提供了一种方法,并且包括由与接入网络相关联的第一实体发送包括与用户会话相关联的会话标识符的第一请求消息到与核心网络相关联的第二实体。 该方法还包括与第二实体建立第一控制信道,其中第一控制信道与会话标识符相关联。 第一控制信道是第一实体与第二实体之间的带内信道。 该方法还包括使用第一控制信道从第二实体接收与用户会话相关联的策略信息。 策略信息指示要在接入网络中应用于与用户会话相关联的用户数据的一个或多个策略。

    DISTRIBUTED NETWORK ADDRESS AND PORT TRANSLATION FOR MIGRATING FLOWS BETWEEN SERVICE CHAINS IN A NETWORK ENVIRONMENT
    65.
    发明申请
    DISTRIBUTED NETWORK ADDRESS AND PORT TRANSLATION FOR MIGRATING FLOWS BETWEEN SERVICE CHAINS IN A NETWORK ENVIRONMENT 有权
    分布式网络地址和端口翻译在网络环境中的服务链之间的移动流

    公开(公告)号:US20150365323A1

    公开(公告)日:2015-12-17

    申请号:US14301767

    申请日:2014-06-11

    CPC classification number: H04L45/745 H04L47/18 H04L47/2441

    Abstract: An example method for distributed network address and port translation (NAPT) for migrating flows between service chains in a network environment is provided and includes distributing translation state for a flow traversing the network across a plurality of NAPT service nodes in the network, with packets belonging to the flow being translated according to the translation state, associating the flow with a first service chain at a flow classifier in the network, and updating the association when the flow migrates from the first service chain to a second service chain, with packets belonging to the migrated flow also being translated according to the translation state. The method may be executed at a pool manager in the network. In specific embodiments, the pool manager may include a distributed storage located across the plurality of NAPT service nodes.

    Abstract translation: 提供了一种用于在网络环境中的服务链之间迁移流的分布式网络地址和端口转换(NAPT)的示例方法,并且包括:跨越网络中的多个NAPT服务节点的跨流过的流的分发转换状态,分组属于 根据所述翻译状态对所述流进行翻译,将所述流与所述网络中的流分类器处的第一服务链相关联,以及当所述流从所述第一服务链迁移到第二服务链时更新所述关联,其中分组属于 迁移流也根据翻译状态进行翻译。 该方法可以在网络中的池管理器处执行。 在具体实施例中,池管理器可以包括跨越多个NAPT服务节点的分布式存储器。

    PROVIDING VIRTUAL PRIVATE SERVICE CHAINS IN A NETWORK ENVIRONMENT
    66.
    发明申请
    PROVIDING VIRTUAL PRIVATE SERVICE CHAINS IN A NETWORK ENVIRONMENT 有权
    在网络环境中提供虚拟的私人服务链

    公开(公告)号:US20150365322A1

    公开(公告)日:2015-12-17

    申请号:US14304043

    申请日:2014-06-13

    Abstract: A method provided in one embodiment includes receiving a first data packet of a data flow at a first classifier in which the first data packet includes a first identifier. The method further includes determining a second classifier associated with the first identifier in which the second classifier is further associated with at least one service chain of a service chain environment. The method still further includes forwarding the first data packet to the second classifier. The second classifier is configured to receive the first data packet, determine a particular service chain of the at least one service chain to which the first data packet is to be forwarded, and forward the first data packet to the particular service chain.

    Abstract translation: 在一个实施例中提供的方法包括在第一分类器处接收数据流的第一数据分组,其中第一数据分组包括第一标识符。 该方法还包括确定与第一标识符相关联的第二分类器,其中第二分类器进一步与服务链环境的至少一个服务链相关联。 该方法还包括将第一数据分组转发到第二分类器。 第二分类器被配置为接收第一数据分组,确定要转发第一数据分组的至少一个服务链的特定服务链,并将第一数据分组转发到特定服务链。

    Systems and methods for generating contextual labels

    公开(公告)号:US12238099B2

    公开(公告)日:2025-02-25

    申请号:US18323183

    申请日:2023-05-24

    Abstract: In one embodiment, an apparatus includes one or more processors and one or more computer-readable non-transitory storage media coupled to the one or more processors. The one or more computer-readable non-transitory storage media include instructions that, when executed by the one or more processors, cause the apparatus to perform operations including receiving a user credential from a remote access client within a network and communicating the user credential to an authentication, authorization and accounting (AAA) server within the network. The operations also include receiving a user attribute from the AAA server and generating a contextual label based on the user attribute. The contextual label includes routing instructions associated with traffic behavior within the network. The operations further include advertising a control message, which includes the contextual label, to the remote access client.

Patent Agency Ranking