Abstract: In general, the invention is directed to techniques for offloading per-subscriber traffic management from an access gateway to one or more upstream service nodes within a service provider network. For example, as described herein, an upstream service node receives a new packet flow for a subscriber and sends packet flow information, such as a network address, to a session and resource controller (SRC). The SRC maintains a table of subscriber attachment sessions and maps the packet flow information to a subscriber attachment session in the table to obtain a subscriber identifier for a subscriber. The SRC then determines subscriber-specific services to be applied to subscriber data traffic, transforms the services to a set of one or more enforcement policies, and returns the enforcement policies to the service node. In turn, the service node applies the enforcement policies for the subscriber-specific services to the subscriber data traffic in the packet flow.

Abstract: Techniques are described for establishing network tunnels that allow communication according to one or more routing protocols. The techniques allow for the automated configuration of a selector or other filter associated with the network tunnel. A network device, for example, includes a control unit, and an interface for coupling the network device to a computer network. The control unit receives a communication to establish a network tunnel with a remote network device. The communication includes information that specifies a routing protocol supported by the remote network device. The control unit automatically configures the network tunnel to permit communication through the network tunnel in accordance with the specified routing protocol. The control unit may receive the communication in accordance with a conventional network protocol, such as the Internet Key Exchange protocol. The information may be conveyed using a data field redefined to specify the supported routing protocol.