Abstract: A system and method for modifying services provided by one or more network devices. A processor of a first network device identifies defined events in each of a plurality of applications, including a first defined event associated with a first application. The processor assigns a signal-route to each defined event. The processor then executes the first application and, when the processor detects occurrence of the first defined event during execution of the first application, the processor modifies services provided by a second network device by adding the first signal-route to or removing the first signal-route from a routing information base (RIB) on the first network device and advertising, to the second network device, the change in the RIB.

Abstract: A device may receive a control packet associated with a connection. The control packet may include a network address. The device may identify an application layer identifier that is associated with the network address. The device may identify a service rule associated with the application layer identifier. The service rule may identify a service to be applied to a data packet associated with the connection. The device may provide the control packet based on identifying the service rule. The control packet may be provided to permit the service to be applied to the data packet in accordance with the service rule.

Abstract: A first device may receive first route information, from a second device, identifying a first route to the second device for a packet to be provided toward a destination via the second device. The first device may generate second route information identifying a second route to the first device for the packet. The first device may provide the second route information to a third device. The packet is to be received by the first device. The first device may receive the packet from the third device via the second route after providing the second route information to the third device. The packet is to be provided to the second device by the first device. The first device may perform a service on the packet based on being identified by the second route information as a next hop for the packet and prior to providing the packet to the second device.

Abstract: A system and method for handling critical events in service gateways. Configuration information is received in a service gateway, the configuration information defining a redundancy set having a master redundancy state and a standby redundancy state, the configuration information including one or more redundancy policies associated with the redundancy set, a service redundancy policy defining changes to be made in a service when a transition occurs in the state of the redundancy set. The service gateway receives further configuration information defining events that cause a transition between the master and standby redundancy states in the redundancy set. In response to detecting a redundancy event in the service gateway, the service gateway transitions the redundancy set, within the service gateway, from the master redundancy state to the standby redundancy state, modifies a first signal-route state associated with the redundancy set and modifies the service based on the service redundancy policy.

Abstract: A first device may receive first route information, from a second device, identifying a first route to the second device for a packet to be provided toward a destination via the second device. The first device may generate second route information identifying a second route to the first device for the packet. The first device may provide the second route information to a third device. The packet is to be received by the first device. The first device may receive the packet from the third device via the second route after providing the second route information to the third device. The packet is to be provided to the second device by the first device. The first device may perform a service on the packet based on being identified by the second route information as a next hop for the packet and prior to providing the packet to the second device.

Abstract: In general, techniques for dynamically provisioning service chains are described. In one example a network device comprises a control unit having at least one processor coupled to a memory, wherein the control unit is configured to receive a services list comprising an ordered list of services, the ordered list of services specifying at least a first service and a second service. The network device also comprises a forwarding unit coupled to the control unit and configured to receive a packet of a packet flow from a first service node that has applied the first service to the packet, wherein the forwarding unit is configured to send, based at least on the ordered list of services, the packet to a second service node that applies the second service.

Abstract: A device may receive a control packet associated with a connection. The control packet may include a network address. The device may identify an application layer identifier that is associated with the network address. The device may identify a service rule associated with the application layer identifier. The service rule may identify a service to be applied to a data packet associated with the connection. The device may provide the control packet based on identifying the service rule. The control packet may be provided to permit the service to be applied to the data packet in accordance with the service rule.

Abstract: A device may receive a control packet associated with a connection. The control packet may include a network address. The device may identify an application layer identifier that is associated with the network address. The device may identify a service rule associated with the application layer identifier. The service rule may identify a service to be applied to a data packet associated with the connection. The device may provide the control packet based on identifying the service rule. The control packet may be provided to permit the service to be applied to the data packet in accordance with the service rule.

Abstract: A method is provided in one example and includes communicating an access request to a network element, the access request is associated with network authentication relating to a subscriber. The method also includes receiving an access response that includes a profile associated with the subscriber. The profile can include a group attribute that defines the subscriber as being part of a group of subscribers sharing a network data plan, which defines a data allotment assigned to the group over a specified time interval. In more detailed embodiments, a unique data string sent by an Authentication, Authorization, and Accounting element is received, where the unique data string identifies a full set of subscribers belonging to the group. Data underutilization of a first subscriber is offset by data overutilization of a second subscriber, where a summation of the data underutilization and the data overutilization do not exceed the data allotment assigned.

Abstract: In general, techniques are described for providing high availability as a service. The techniques may be performed by a device that includes an interface and a control unit. The interface is configured to receive network traffic originating from a subscriber device operated by a subscriber. The control unit is configured to determine whether to provide a high availability service with respect to at least a portion of the network traffic based on a subscriber profile associated with the subscriber. The control unit may further be configured to provide the high availability service for at least the portion of the network traffic based on the determination of whether to provide the high availability service. The control unit may further be configured to process at least the portion of the network traffic with the network device, and forward at least the portion of the network traffic.

Abstract: In general, techniques are described for supporting interchassis redundancy (ICR) by a plurality of network access servers (NASes) that are members of an ICR. For example, techniques may be used to associate, within a RADIUS server, multiple NAS identifiers for the NASes with a single NAS identifier alias. The RADIUS server is configured to handle RADIUS protocol messages from any member of the ICR cluster as though the RADIUS protocol messages issued from a single NAS having the NAS identifier alias.

Abstract: A method, performed by a network device, may include sending a request to a first server, detecting a first timeout without receiving a response from the first server, and sending the request to the first server and to a second server, in response to detecting the first timeout without receiving a response from the first server.

Abstract: A method is provided in one example embodiment and includes communicating an access request message associated with a mobile node, receiving an access accept message that includes domain name data associated with the mobile node, and communicating a packet data protocol (PDP) context accept message for a tracking PDP context associated with the mobile node without associating an internet protocol (IP) address to the mobile node. The tracking PDP context identifies that the mobile node is available to receive network data. In more particular embodiments, the access request message includes an International Mobile Subscriber Identity (IMSI) associated with the mobile node, and the domain name data includes a fully qualified domain name. In still other embodiments, the tracking PDP includes a protocol configuration option (PCO) indicating that an IP address is not required for the mobile node.

Abstract: In general, techniques are described for supporting interchassis redundancy (ICR) by a plurality of network access servers (NASes) that are members of an ICR. For example, techniques may be used to associate, within a RADIUS server, multiple NAS identifiers for the NASes with a single NAS identifier alias. The RADIUS server is configured to handle RADIUS protocol messages from any member of the ICR cluster as though the RADIUS protocol messages issued from a single NAS having the NAS identifier alias.

Abstract: A method is provided in one example and includes communicating an access request to a network element, the access request is associated with network authentication relating to a subscriber. The method also includes receiving an access response that includes a profile associated with the subscriber. The profile can include a group attribute that defines the subscriber as being part of a group of subscribers sharing a network data plan, which defines a data allotment assigned to the group over a specified time interval. In more detailed embodiments, a unique data string sent by an Authentication, Authorization, and Accounting element is received, where the unique data string identifies a full set of subscribers belonging to the group. Data underutilization of a first subscriber is offset by data overutilization of a second subscriber, where a summation of the data underutilization and the data overutilization do not exceed the data allotment assigned.