Abstract: A system can receive an indication associated with establishing a transmission control protocol (TCP) connection. The system can determine, based on the indication, information that identifies a user device associated with the TCP connection. The system can determine, based on the information that identifies the user device, a predicted congestion level of a base station associated with the TCP connection. The system can select, based on the predicted congestion level, a congestion control algorithm to be implemented for the TCP connection. The system can cause the TCP connection to be established and implement the congestion control algorithm for the TCP connection.

Abstract: A system can receive an indication associated with establishing a transmission control protocol (TCP) connection. The system can determine, based on the indication, information that identifies a user device associated with the TCP connection. The system can determine, based on the information that identifies the user device, a predicted congestion level of a base station associated with the TCP connection. The system can select, based on the predicted congestion level, a congestion control algorithm to be implemented for the TCP connection. The system can cause the TCP connection to be established and implement the congestion control algorithm for the TCP connection.

Abstract: A system can receive an indication associated with establishing a transmission control protocol (TCP) connection. The system can determine, based on the indication, information that identifies a user device associated with the TCP connection. The system can determine, based on the information that identifies the user device, a predicted congestion level of a base station associated with the TCP connection. The system can select, based on the predicted congestion level, a congestion control algorithm to be implemented for the TCP connection. The system can cause the TCP connection to be established and implement the congestion control algorithm for the TCP connection.

Abstract: An exemplary method includes a subsidized access management system detecting a request provided by an access device associated with a user to access network content by way of a secure connection within a network provided by a network service provider, the network content associated with a content provider and maintained by a content provider system, determining that a data usage charge for access by the user to the network content by way of the secure connection within the network is subsidized by the content provider in accordance with a subsidized access arrangement between the content provider and the network service provider, and providing the user with subsidized access to the network content by way of the secure connection within the network in accordance with a rule set associated with the subsidized access arrangement. Corresponding methods and systems are also disclosed.

Abstract: A device can receive a request to deploy, on the device, a container associated with a tenant. The request can include information identifying one or more parameters related to the container. The device can configure, for the container, an Internet protocol (IP) address that includes information identifying the tenant with which the container is associated. The IP address can permit the container to be reachable from outside of the device. The device can configure an interface for the container to isolate the container from another container deployed on the device. The other container can be associated with another tenant. The tenant and the other tenant can be different. The device can configure a set of rules related to traffic associated with the container. The device can perform an action related to the container after deploying the container with the IP address, the interface, and the set of rules.

Abstract: A system can receive an indication associated with establishing a transmission control protocol (TCP) connection. The system can determine, based on the indication, information that identifies a user device associated with the TCP connection. The system can determine, based on the information that identifies the user device, a predicted congestion level of a base station associated with the TCP connection. The system can select, based on the predicted congestion level, a congestion control algorithm to be implemented for the TCP connection. The system can cause the TCP connection to be established and implement the congestion control algorithm for the TCP connection.

Abstract: A device can receive a request to deploy, on the device, a container associated with a tenant. The request can include information identifying one or more parameters related to the container. The device can configure, for the container, an Internet protocol (IP) address that includes information identifying the tenant with which the container is associated. The IP address can permit the container to be reachable from outside of the device. The device can configure an interface for the container to isolate the container from another container deployed on the device. The other container can be associated with another tenant. The tenant and the other tenant can be different. The device can configure a set of rules related to traffic associated with the container. The device can perform an action related to the container after deploying the container with the IP address, the interface, and the set of rules.

Abstract: A method, a device, and a non-transitory storage medium to receive in a data path of user traffic, a packet associated with an end user; identify, by an operating system space, an identifier of the end user that is included in the packet; determine whether a type of traffic control service to be applied to the packet can be determined; pass, by the operating system space to an application space, the packet when the type of traffic control service cannot determined; determine, by the application space, the type of traffic of traffic control service; add, by the application space, a marker to the packet that indicates an identifier of the type of traffic control service; provide, by the operating system space the type of traffic control service that includes an in-line quota enforcement service and a charging record service.

Abstract: A method, a device, and a non-transitory storage medium to receive in a data path of user traffic, a packet associated with an end user; identify, by an operating system space, an identifier of the end user that is included in the packet; determine whether a type of traffic control service to be applied to the packet can be determined; pass, by the operating system space to an application space, the packet when the type of traffic control service cannot determined; determine, by the application space, the type of traffic of traffic control service; add, by the application space, a marker to the packet that indicates an identifier of the type of traffic control service; provide, by the operating system space the type of traffic control service that includes an in-line quota enforcement service and a charging record service.

Abstract: A method, a device, and a non-transitory storage medium to provide a user interface that allows a user to configure a traffic control service, the traffic control service including at least one of a content-based service, an application-based service, a time-based service, a location-based service, or a quality-of-service-based service; receive, via the user interface, selections of parameters that govern the traffic control service, and a unique identifier of an end user to which the traffic control service pertains; configure the traffic control service in a line card of a network device included in the data path, wherein the configuration includes the rules data and the unique identifier in the line card, and the traffic control service that includes an in-line quota enforcement service and a charging record service.

Abstract: An approach is provide for creating a secure and user-identifiable service signature. The approach involves creating a signature associated with a service, wherein the service is provided by a service provider to a user in conjunction with another party, and wherein the signature is personalized to the user. The approach also involves presenting the signature to the user via a device receiving a delivery, a link for initiating the delivery, or a combination thereof of the service to the user.

Abstract: An exemplary method includes a subsidized access management system detecting a request provided by an access device associated with a user to access network content by way of a secure connection within a network provided by a network service provider, the network content associated with a content provider and maintained by a content provider system, determining that a data usage charge for access by the user to the network content by way of the secure connection within the network is subsidized by the content provider in accordance with a subsidized access arrangement between the content provider and the network service provider, and providing the user with subsidized access to the network content by way of the secure connection within the network in accordance with a rule set associated with the subsidized access arrangement. Corresponding methods and systems are also disclosed.

Abstract: A method, a device, and a non-transitory storage medium having instructions to receive, by a network device, a request from a mobile device that includes data indicating a signal quality pertaining to a connection between the mobile device and a wireless network, data indicating a location of the mobile device, and data indicating a destination of a user of the mobile device; determine a route that yields a probability that a communication session between the mobile device and another device avoids communication dropout; and transmit a response that indicates the determined route.

Abstract: Functionality relating to control and data plane functions in a telecommunications network may be separated. In one implementation, a telecommunications network may include a radio access network to provide a radio interface to mobile devices that connect to the telecommunications network. A first set of devices may implement functionality corresponding to control plane operations by the telecommunications network, the control plane operations including operations relating to establishing communication sessions in the telecommunications network. A second set of devices may implement functionality corresponding to data plane operations by the telecommunications network, the data plane operations including operations relating to transmitting user data over the established communication sessions.

Abstract: Described are computer-based methods and apparatuses, including computer program products, for loosely-coupled encryption functionality for operating systems. A data packet is processed through one or more internet protocol stack layers to generate a processed data packet. Encryption information is determined that includes parameters for encrypting and decrypting data packets transmitted between the first computing device and the remote computer. A message comprising data indicative of the encryption information is transmitted to a second computing device, wherein an operating system being executed is unaware of a security nature of the transmission. A bypass encryption routine is executed to generate a unencrypted data packet, wherein the bypass encryption routine does not encrypt the processed data packet. The unencrypted data packet is transmitted to the second computing device.

Abstract: Described are computer-based methods and apparatuses, including computer program products, for loosely-coupled encryption functionality for operating systems. A data packet is processed through one or more internet protocol stack layers to generate a processed data packet. Modified encryption information is determined that does not comprise a desired security policy for the data packet and comprises null parameter(s) and is based on encryption information that comprises the desired security policy. A message comprising data indicative of the encryption information is transmitted. An operating system is unaware of a security nature of the transmission. A null-encryption routine is executed to generate an unencrypted data packet, wherein the null-encryption routine does not encrypt the processed data packet. The unencrypted data packet is transmitted to the second computing device.