Abstract: Techniques are described for performing subscriber-aware NAT functions. In one example, routers or other NAT-enabled devices deployed within a network are configured to auto-correlate subscriber information with NAT operations performed by the devices when forwarding network traffic. As such, the techniques offload the burden of correlating subscriber login activity with NAT operations as typically performed by offline NAT log archive systems.

Abstract: In general, techniques are described for reducing impact of network attacks in access networks. A network device including an interface in a forwarding plane of the network device, and a policer configured in a packet forwarding engine of the forwarding plane may be configured to perform the techniques. The interface may receive a packet from a subscriber access device positioned at an edge of sub-network of an access network. The packet may include trusted information inserted by an intermediate network device positioned between the network device and the subscriber access device. The policer may determine, based on the trusted information, whether the packet is associated with the network attack. Based on the determination of whether the packet is associated with the network attack, the policer may forward the packet for subsequent protocol-specific processing.