Abstract: There is provided allocating cloud computing resources to process a user session by a gateway in a mobile communications network, and allocating the cloud computing resources in pairs to user sessions. Rules for the pair of allocated resources are determined such that incoming control plane traffic associated with the session is forwarded to the both cloud computing resources forming the pair.

Abstract: Upon a user equipment attaching to a core network of a cellular communications network system, an IP address is allocated to the user equipment by a network device of the core network, for tunneling data relating to the user equipment between the network device and an application server. The IP address is allocated from a subnetwork, and the allocating is performed based on path monitoring information. If the path monitoring information contains an IP address of at least one subnetwork, the subnetwork is selected from the at least one subnetwork. Then it is checked if the path monitoring information contains a combination of the subnetwork's IP address and the application server's IP address. In case the combination is not contained in the path monitoring information, a path indicated by the combination of the subnetwork's IP address and the application server's IP address is added to the path monitoring information.

Abstract: Apparatuses, methods, and computer-readable media regard automatic symptom data collection in cloud deployment. The method includes detecting a failure, determining when to trigger symptom data collection for collecting information about the failure, and transmitting an indication of the triggering of the symptom data collection to a management function of the virtual network function.

Abstract: Upon a user equipment attaching to a core network of a cellular communications network system, an IP address is allocated to the user equipment by a network device of the core network, for tunneling data relating to the user equipment between the network device and an application server. The IP address is allocated from a subnetwork, and the allocating is performed based on path monitoring information. If the path monitoring information contains an IP address of at least one subnetwork, the subnetwork is selected from the at least one subnetwork. Then it is checked if the path monitoring information contains a combination of the subnetwork's IP address and the application server's IP address. In case the combination is not contained in the path monitoring information, a path indicated by the combination of the subnetwork's IP address and the application server's IP address is added to the path monitoring information.

Abstract: A method is disclosed for downscaling a deep packet inspection service in a network apparatus. The method comprises receiving data flow in a gateway virtual machine via a software defined networking switch, and keeping track of data flow and control flow and their state per subscriber. If needed, a new deep packet inspection virtual machine is selected for the data flow. The software defined networking switch is informed on the selection of the new deep packet inspection virtual machine. The new deep packet inspection virtual machine is instructed to re-create a flow identification for the data flow to ensure deep packet inspection service continuity.

Abstract: A method includes configuring an IP subnet at an operations support system in a telecommunications network, the operations support system configured for managing at least one virtual networking function; configuring the IP subnet for use by the at least one virtual networking function, the virtual networking function including at least one virtual machine; configuring the IP subnet for use by the least one virtual machine, the at least one virtual machine including a processor and a memory; sending, from the at least one virtual machine, IP subnet data to a virtual networking function manager having a processor and a memory; and sending, from the virtual networking function manager, the IP subnet data to a virtual infrastructure manager configured for managing internal and external connectivity of the IP subnet data.

Abstract: A method is disclosed for service offloading in a communications system, the method comprising determining, in a network apparatus, whether a traffic flow has been properly classified by a deep packet inspection virtual machine. If the traffic flow has been properly classified by the deep packet inspection virtual machine, the method comprises instructing a software defined networking controller to stop sending further packets of said traffic flow to the deep packet inspection virtual machine.

Abstract: Apparatuses, methods, and computer-readable media regard automatic symptom data collection in cloud deployment. The method includes detecting a failure, determining when to trigger symptom data collection for collecting information about the failure, and transmitting an indication of the triggering of the symptom data collection to a management function of the virtual network function.

Abstract: Apparatus and method for lawful interception in accordance with an example embodiment of the present invention, a method is provided for receiving from a gateway apparatus an intercept request regarding user equipment in the communication system; creating or modifying a processing rule regarding the user equipment by including interception in the rule; transmitting to a network switch processing user equipment connections a command to clone and encrypt each signalling or data packet of the user equipment connection and to transmit the encrypted signalling and data packets to a given network apparatus.

Abstract: Apparatus and method for lawful interception in accordance with an example embodiment of the present invention, a method is provided for receiving from a gateway apparatus an intercept request regarding user equipment in the communication system; creating or modifying a processing rule regarding the user equipment by including interception in the rule; transmitting to a network switch processing user equipment connections a command to clone and encrypt each signalling or data packet of the user equipment connection and to transmit the encrypted signalling and data packets to a given network apparatus.

Abstract: A mechanism for a first apparatus in a communication network is described. The communication network comprises the first apparatus, a second apparatus and a plurality of servers. The mechanism comprises sending at least a message to the second apparatus to obtain zone information of each of said plurality of servers, receiving the requested zone information from the second apparatus, and building a topology database based on the received zone information.

Abstract: The present invention addresses method, apparatus and computer program product for enabling session transfer by Tunnel Endpoint Identifier renumbering in GPRS Tunneling Protocol peer. A new Tunnel Endpoint Identifier value is allocated for the existing session, information about relocating the existing session including the new Tunnel Endpoint Identifier value for the existing session is communicated to the peer network elements of the relocated resource, tunnel endpoint change procedure towards counterpart network elements is performed, and the existing session is removed from the original resource and processing is continued in the relocated resource.

Abstract: A method is disclosed for service offloading in a communications system, the method comprising determining, in a network apparatus, whether a traffic flow has been properly classified by a deep packet inspection virtual machine. If the traffic flow has been properly classified by the deep packet inspection virtual machine, the method comprises instructing a software defined networking controller to stop sending further packets of said traffic flow to the deep packet inspection virtual machine.

Abstract: A method is disclosed for downscaling a deep packet inspection service in a network apparatus. The method comprises receiving data flow in a gateway virtual machine via a software defined networking switch, and keeping track of data flow and control flow and their state per subscriber. If needed, a new deep packet inspection virtual machine is selected for the data flow. The software defined networking switch is informed on the selection of the new deep packet inspection virtual machine. The new deep packet inspection virtual machine is instructed to re-create a flow identification for the data flow to ensure deep packet inspection service continuity.

Abstract: There is provided allocating cloud computing resources to process a user session by a gateway in a mobile communications network, and allocating the cloud computing resources in pairs to user sessions. Rules for the pair of allocated resources are determined such that incoming control plane traffic associated with the session is forwarded to the both cloud computing resources forming the pair.

Abstract: A method for subscriber tracing comprises capturing user plane packets in a network apparatus implementing a 3GPP policy and charging enforcement functionality PCEF. Packet-specific metadata is added to a captured user plane packet. The packet-specific metadata may be used for facilitating subscriber-specific troubleshooting of core network elements.

Abstract: In accordance with an example embodiment of the present invention, a method is provided for receiving (414) from a gateway apparatus an intercept request regarding user equipment in the communication system; creating or modifying a processing rule regarding the user equipment by including interception in the rule; transmitting (502) to a network switch processing user equipment connections a command to clone and encrypt each signalling or data packet of the user equipment connection and to transmit the encrypted signalling and data packets to a given network apparatus.

Abstract: A method is disclosed for subscriber tracing in a communications system. The method comprises receiving, in a gateway apparatus (GGSN, PGW) from an O&M unit, a command message for triggering a subscriber tracing functionality. The gateway apparatus (GGSN, PGW) instructs a network node to clone each packet having a certain IP address or TEID value, in order the network node to replicate each user plane packet belonging to a session to be monitored and to send the replicated packets directly to the O&M unit for further analysis. The gateway apparatus (GGSN, PGW) collects control plane data related to the session to be monitored, and transmits the collected control plane data directly to the O&M unit in order the collected control plane data to be correlated in the O&M unit to user plane data.

Abstract: A method for subscriber tracing comprises capturing user plane packets in a network apparatus implementing a 3GPP policy and charging enforcement functionality PCEF. Packet-specific metadata is added to a captured user plane packet. The packet-specific metadata may be used for facilitating subscriber-specific troubleshooting of core network elements.