Abstract: A method for monitoring information in a network environment is provided that includes receiving one or more packets from a communication flow initiated by an end user. The information associated with the communication flow is then selectively communicated to a plurality of client-aware network elements.

Abstract: An improved client network address translation (“NAT”) system is provided. Methods are provided for initializing connection control blocks with the client NAT addresses when a storage pool of connection control blocks are allocated. This avoids the costly overhead as connections are created and destroyed. Unlike the prior art solutions, once the connection control blocks of the present invention are allocated, they remain in effect until the storage subpool is deleted. Secondly, in order to provide as large a pool of client NAT addresses as possible, methods are provided for using intervals to allocate and reclaim client NAT addresses as subpools are allocated and freed.

Abstract: A method for protecting firewall load balancers from a denial of service attack is provided. Packets are received by the firewall load balancer. Each packet has a source and a destination. The firewall load balancer is equipped with a connection database that can contain entries about the packets. Upon receipt of a packet, the connection database is queried to determine whether or not there is an entry for the received packet. If an entry is found in the database, the packet is forwarded to its destination. Otherwise, if the packet was received from a firewall, then a new connection entry for the packet is built and is saved to the connection database and the packet is forwarded on to its destination. If the packet does not have an entry (match) in the connection database and the packet was not received from a firewall, then the packet is forwarded to a firewall.

Abstract: A method for loadbalancing in a network environment is provided that includes receiving a create request from an end user for a communications link provided by a network node and communicating a response to the end user in order to establish a communication session. The method further includes identifying a selected one of a plurality of network nodes to facilitate the communication session. The identification of the selected network node is achieved through binding of a session identifier associated with the end user to the selected network node.

Abstract: A method for communicating in a wireless application protocol (WAP) network environment is provided that includes receiving a request packet at a WAP gateway and positioning an identifier into the request packet. A content switch then identifies the identifier and correlates the identifier to a source that generated the request packet. An internet protocol (IP) address associated with the source is positioned in the request packet before communicating the request packet to a next destination.

Abstract: A method for monitoring information in a network environment is provided that includes receiving one or more packets from a communication flow initiated by an end user. The information associated with the communication flow is then selectively communicated to a plurality of client-aware network elements.

Abstract: An improved client network address translation (“NAT”) system is provided. A memory allocation scheme is provided for initializing connection control blocks with the client NAT addresses when a storage pool of connection control blocks are allocated. This avoids the costly overhead as connections are created and destroyed. Unlike the prior art solutions, once the connection control blocks of the present invention are allocated, they remain in effect until the storage subpool is deleted. Secondly, the allocation scheme enables a large pool of client NAT addresses and reclaim client NAT addresses as subpools are allocated and freed.

Abstract: An improved client network address translation (“NAT”) system is provided. Methods are provided for initializing connection control blocks with the client NAT addresses when a storage pool of connection control blocks are allocated. This avoids the costly overhead as connections are created and destroyed. Unlike the prior art solutions, once the connection control blocks of the present invention are allocated, they remain in effect until the storage subpool is deleted. Secondly, in order to provide as large a pool of client NAT addresses as possible, methods are provided for using intervals to allocate and reclaim client NAT addresses as subpools are allocated and freed.

Abstract: A method for loadbalancing in a network environment is provided that includes receiving a request from an end user for a communication session at a central node. The method further includes identifying a selected one of a plurality of network nodes to facilitate the communication session for the end user based on feedback information provided by the selected network node. The feedback information is communicated from the selected network node and processed before making a decision to establish the communication session between the selected network node and the end user.

Abstract: A method of providing a network service is disclosed. The method includes implementing a forwarding agent on a router. The forwarding agent is operative to receive instructions from a service manager. Packets are forwarded from the forwarding agent to the service manager, and the forwarding agent receives instructions from the service manager detailing how to handle the forwarded packets.

Abstract: A system and method are described for providing instructions for forwarding packets. The method includes broadcasting a general instruction specifying a plurality of flows to a plurality of forwarding agents and receiving at a service manager a first message responsive to the general instruction indicating that a packet for a specific flow has been received by a specific forwarding agent. A specific instruction is generated at the service manager for handling the specific flow and the specific instruction for handling the specific flow is sent to the specific forwarding agent.

Abstract: An apparatus for charging in a network environment is provided that includes an access gateway encapsulation/decapsulation element operable to establish one or more packet data protocol (PDP) links on behalf of an end user and to perform encapsulation and decapsulation operations for one or more of the links associated with the end user. The access gateway encapsulation/decapsulation element is further operable to interface with a client services packet gateway (CSPG) that is operable to provide enhanced packet processing for the end user for requested information. The apparatus also includes an access gateway policy element operable to interface with the CSPG. The access gateway encapsulation/decapsulation element and the access gateway policy element cooperate to use one or more inter-module headers in order to coordinate the enhanced packet processing for one or more communication flows associated with the end user.

Abstract: An apparatus for charging in a network environment is provided that includes an access gateway encapsulation/decapsulation element operable to establish one or more packet data protocol (PDP) links on behalf of an end user and to perform encapsulation and decapsulation operations for one or more of the links associated with the end user. The access gateway encapsulation/decapsulation element is further operable to interface with a client services packet gateway (CSPG) that is operable to provide enhanced packet processing for the end user for requested information. The apparatus also includes an access gateway policy element operable to interface with the CSPG. The access gateway encapsulation/decapsulation element and the access gateway policy element cooperate to use one or more inter-module headers in order to coordinate the enhanced packet processing for one or more communication flows associated with the end user.

Abstract: A method for loadbalancing in a network environment is provided that includes receiving a request from an end user for a communication session at a central node. The method further includes identifying a selected one of a plurality of network nodes to facilitate the communication session for the end user based on feedback information provided by the selected network node. The feedback information is communicated from the selected network node and processed before making a decision to establish the communication session between the selected network node and the end user.

Abstract: A collapsible shaft having a unitary tube having an outer portion and a depressed portion dividing the outer portion into two segments. The outer portion has an outer exterior radius (Ro). The depressed portion has a depressed exterior radius (Rd). The Ro is greater than the Rd and the difference between the Ro and Rd is a depressed depth (Dd).

Abstract: A system and method are disclosed for specifying network address translation for a set of packets. A first set of instructions is sent to a forwarding agent specifying criteria for designated packets that are designated to undergo network address translation. A matching packet is received from the forwarding agent that matches the specified criteria. A network address translation scheme is determined for the matching packet. A second set of instructions are sent specifying the network address translation scheme for packets associated with the matching packet.

Abstract: A method for loadbalancing in a network environment is provided that includes receiving a request from an end user for a communication session at a central node. The method further includes identifying a selected one of a plurality of network nodes to facilitate the communication session for the end user based on feedback information provided by the selected network node. The feedback information is communicated from the selected network node and processed before making a decision to establish the communication session between the selected network node and the end user.

Abstract: A system and method are described for selecting a server to handle a connection. The method includes receiving at a service manager a connection request intercepted by a network device having a forwarding agent that is operative to receive instructions from a service manager, the connection request having been forwarded from the forwarding agent on the network device to the service manager. A preferred server is selected at the service manager from among a group of available servers. The preferred server is the server that is to service the connection request. Instructions are sent from the service manager to the forwarding agent. The instructions include the preferred server that is to service the connection request so that the connection request may be forwarded from the network device to the preferred server.

Abstract: A system and method are described for selecting a server to handle a connection. The method includes receiving at a service manager a connection request intercepted by a network device having a forwarding agent that is operative to receive instructions from a service manager, the connection request having been forwarded from the forwarding agent on the network device to the service manager. A preferred server is selected at the service manager from among a group of available servers. The preferred server is the server that is to service the connection request. Instructions are sent from the service manager to the forwarding agent. The instructions include the preferred server that is to service the connection request so that the connection request may be forwarded from the network device to the preferred server.

Abstract: A method for communicating in a loadbalancing environment is provided that in a particular embodiment includes receiving a request packet from a network access server (NAS) to initiate a communication session. The request packet is then communicated to a tunneling protocol network server (TPNS) and a response packet is received in response to the request packet. The response packet establishes a tunnel that facilitates the communication session and that includes an identification element associated with the TPNS such that a data transfer associated with the communication session is executed between the NAS and the TPNS.