Abstract: In an example embodiment, there is disclosed an apparatus comprising a first interface configured to receive a packet from a client, a second interface configured to transmit the packet to a server, a third interface configured to communicate with at least one processing device, redirection module in communication with the first interface, the second interface and the third interface, and flow monitoring and state information module in communication with the first interface, the second interface, the third interface and the redirection module. Responsive to receipt of the packet on the first interface, the redirection module is operable to communicate with the flow monitoring and state information module whether state information exists for the packet, the state information comprising an address for a processing device. The redirection module is operable to route the packet to the processing device responsive to determining state information exists for the packet.

Abstract: In an example embodiment, a method is provided where a characteristic of a flow of Internet Protocol (IP) packet is measured. Here, the flow is associated with an IP address prefix. Further, an attribute of a routing protocol is associated with the IP address prefix based on the characteristic. An advertisement then is transmitted by way of a routing protocol. The advertisement includes the attribute and the IP address prefix associated with the attribute. Another method is provided where the advertisement is received. Here, the IP address prefix is associated with a class of service that is associated with the attribute. An IP packet associated with the IP address prefix is received and this IP packet is classified to a class of service based on the IP address prefix. The IP packet then is marked with a value that is associated with the class of service.

Abstract: In one embodiment, a Home Agent receives a Mobile IP registration request from a group member, where the group member is a Mobile Node. The Home Agent generates a mobility binding for the group member that associates the group member with a care-of address, wherein the group member is a member of one or more groups. The Home Agent generates a Mobile IP registration reply, where the Mobile IP registration reply identifies one or more key servers. Each of the one or more key servers serves at least one of the one or more groups and is adapted for distributing group cryptography material to members of each group that is served by the corresponding key server. The Home Agent sends the Mobile IP registration reply to the group member, thereby enabling the group member to obtain cryptography material for at least one of the one or more groups from at least one of the one or more key servers to enable the group member to use the cryptography group material to securely communicate with other group members.

Abstract: In an example embodiment, a method for selecting a communication path is provided. The method may comprise receiving data encapsulated in a transport protocol. In addition, a classification type and exit path information associated with the classification type may be received. The data is associated with the classification type and then is encapsulated in Stream Control Transmission Protocol (SCTP) based on the exit path information. This exit path information is associated with the classification type that is associated with the data.