Abstract: The present disclosure relates to a method of monitoring congestion for incoming data packets and a device (10) performing the method. In a first aspect, a method of a device (10) configured to monitor congestion for incoming data packets is provided. The method comprises determining (S101) whether or not a bit rate of incoming data packets indicated to be sent from a node (11) capable of scalable congestion control exceeds a predetermined bit rate threshold value being lower than a maximum allowable bit rate of outgoing data packets from the device (10); and if so selectively marking (S102) the outgoing data packets as being subjected to congestion, wherein the marking is performed by less frequently marking outgoing data packets having a bit rate closer to the predetermined bit rate threshold value and more frequently marking outgoing data packets having a bit rate closer to the maximum allowable bit rate.

Abstract: Arrangements for handling delivery of content associated with a network-delivered service to user equipments, UEs, in a wireless communication network. The method includes transmitting a connection request message to a content delivery server for establishing a secure tunnel connection between the network function and the content delivery server. The connection request message has an identifier of the network function, intended to the content delivery server. The method includes transmitting a content request message from a first UE to the content delivery server requesting content associated with the network-delivered service. The method includes receiving a delivery request from the content delivery server requesting the network function to store and deliver the content from the network function. The method further includes forwarding the content to the first UE through a secure tunnel connection between the network function and the first UE.

Abstract: Embodiments of the invention provide methods, apparatus, and media to perform selective QUIC datagram payload retransmission. In one embodiment, a method is performed by a proxy network device that is on a path between a first and a second peer network device. The method includes determining, for an end-to-end packet-based traffic flow between the first and second peer network devices, a first duration to perform traffic forwarding between the first peer network device and the proxy network device, and a second duration to perform traffic forwarding between the proxy network device and the second peer network device. The method further includes, based on the first and second durations, causing retransmission of an end-to-end packet embedded as a pay load of a QUIC datagram, where the end-to-end packet was previously transmitted between the first peer network device and the proxy network device.

Abstract: The present disclosure relates to techniques for shaping video data traffic in a packet switched communications transport network. In some embodiments, a device determines a cell load level associated with a base station node that is representative of a data traffic load of a cell of the base station node. The device sets, based at least on the determined cell load level associated with the base station, one or more burst transmission parameters for video data transmitted by a traffic shaping node to the base station node. The device transmits video data to the base station node using the set one or more burst transmission parameters, wherein transmitting video data occurs in one or more burst transmissions that each include a plurality of packets that include video data.

Abstract: A method performed by a policy node for handling policies related to a radio device in a communications network is provided. The radio device supporting proxy server functionality. During a session establishment of the radio device, the policy node determines (602) that obtained policies related to the radio device comprises one or more rules. The respective one or more rules comprises any one or more out of: An application descriptor related to the one or more rules, and a domain descriptor related to the one or more rules. The policy node determines (605), based on received capability information, that the radio device is not aware of any or more one out of an application and a domain, and that the radio device supports proxy server functionality. The policy node handles the policies related to the radio device by activating (606) a proxy server in the radio device by sending a message to the radio device.

Abstract: Method and device(s) for supporting estimation of latency over a communication path in a communication network between a data flow shaping node and a probe node. The communication path comprising a data flow target node configured to receive a data flow from a data flow source node via the communication path. The data flow shaping node being configured to provide the data flow in bursts towards the data flow target node. The device(s) initiate to identify a suitable burst interval being a burst interval for which the probe node receives no potential acknowledgement packets during a predefined quiescent period, associated with the suitable burst interval, that covers an end portion of the suitable burst interval and/or a begin portion of a subsequent burst interval.

Abstract: A technique for handling data traffic in a core network domain of a communication network is described. An apparatus comprised by the technique is configured to be located in the core network domain and to receive data traffic sent under control of a transport layer protocol that is configured to apply a congestion control algorithm, CCA. The apparatus is further configured to analyze the data traffic to obtain a data traffic analyzation result, to obtain, based on the analyzation result, CCA information about the CCA that can be or is applied by the transport layer protocol, and to perform a traffic handling action for the data traffic taking into account the obtained CCA information.

Abstract: A computer-implemented method, performed by a first core network node (111), for handling performance of an action by a device (130). The device (130) operates in the communications system (100) via a connection through a data session. The first core network node (111) sets (406), based on a determination that the device (130) is to perform an action with the communications system (100), a captivity state of the device (130) to a captive state. The captive state indicates that the device (130) has not yet performed the action. The first core network node (111) also provides (407) an indication to a second node (112). The second node (112) manages, via a first application programming interface, a third node (113). The third node (113) manages a captivity portal accessible by the device (130) to perform the action. The indication indicates the state of the device (130) has been set to captive state for the action.

Abstract: A method by a virtual network device in a virtualized network to support shared caching in the virtualized network. The method includes receiving a request message for content, determining whether the content is available in a shared virtual cache, wherein the shared virtual cache is shared by a plurality of virtual network devices in the virtualized network, obtaining the content from an upstream network device in response to a determination that the content is not available in the shared virtual cache, storing the content in the shared virtual cache to make the content available to the plurality of virtual network devices, and sending a response message containing the content towards an originator of the request message for the content.

Abstract: Methods and device(s) (110; 120; 130; 140; 141; 210; 212; 220; 230; 600) for managing Round Trip Time, RTT, associated with provision of a data flow (150; 250) from a server device (130; 230), via a multi-access communication network (100; 200), to a client device (120; 220). Said device(s) (110; 120; 130; 140; 141; 210; 212; 220; 230; 600) being communicatively connected to the multi-access communication network (100; 200) that is configured to provide the data flow (150; 250) to the client device (120; 220) using a resource of the multi-access communication network (100; 200) that is shared by multiple devices (120-121; 220-221). The device(s) (110; 120; 130; 140; 141; 210; 212; 220; 230; 600) initiates, in response to identification that the data flow (150; 250) belongs to a certain type, introduction of an artificial delay in the RTT.

Abstract: A proxy server (700) receives, from a sending device, a packet intended for a receiving device (600). The proxy sewer (700) sends, to the receiving device (600), a promise frame (300) indicating that the proxy server (700) will deliver the packet to the receiving device (600) later. The receiving device (600) receives the promise frame (300) from the proxy server (700), and sends an acknowledgement of the packet to the sending device via the proxy sewer (700). The proxy server (700) forwards the acknowledgement of the packet from the receiving device (600) to the sending device, and delivers the packet to the receiving device (600) after having forwarded the acknowledgement to the sending device. The receiving device (600) receives the packet from the proxy server (700) after having sent the acknowledgement of the packet to the sending device via the proxy server (700).

Abstract: A network node for user data traffic handling (UPF), receives (52, 112) traffic for an application, wherein the traffic is to be sent to a logical server associated with the application, wherein the logical server resides on a network server (10.4), and wherein the application has a corresponding application function (AF). On detecting (53, 113) that the received traffic includes an encrypted server name indication such that the associated logical server cannot be identified, the network node requests (55, 115) from the corresponding application function information identifying the application. In response to receiving (62, 117) information identifying said application, the network node subsequently handles the traffic (63, 118) based on the identified application.

Abstract: A method for implementing an AF multipath policy. The method may be performed by a PCF and may include a step of transmitting a request message comprising a UE ID identifying a UE. The method also includes receiving a response message transmitted as a response to the request message, the response message comprising: the AF multipath policy, an application ID (App-ID) identifying an application, and an application protocol ID (App-ID-Protocol), identifying a protocol used by the application. The method further includes generating a multipath policy using at least: i) the AF multipath policy and ii) the App-ID-Protocol. The method further includes providing the generated multipath policy to a management function (e.g., SMF).

Abstract: Methods and apparatus are provided for content delivery. In one aspect, a method in a traffic monitor in a communications network comprises responsive to a notification that content is being delivered to a device from a content delivery network according to a data transfer policy, the notification including an indication of the data transfer policy, monitoring delivery of the content from the content delivery network to the device and, responsive to a detection that the delivery of the content violates the data transfer policy, performing a notification action.

Abstract: A technique for enabling exposure of information related to encrypted communication between a User Equipment, UE, and an application server in a mobile communication system is disclosed. A method implementation of the technique is performed by the UE and comprises establishing (S302) a communication channel with a network node of the mobile communication system, the communication channel being established as part of an application layer communication channel between the UE and the application server, wherein the network node acts as application layer proxy in the communication between the UE and the application server, and sending (S304) encrypted traffic through the communication channel to the network node for further delivery to the application server, wherein the communication channel is used to exchange supplemental information related to the encrypted traffic between the UE and the network node.

Abstract: Embodiments described herein relate to methods and apparatuses for providing communication between a server and a client device via a proxy node. A method, in a proxy node, wherein the proxy node includes an intermediate node between a server and a client device includes receiving encrypted traffic transmitted between the client device and the server; receiving a key from the client device; performing a service in relation to the encrypted traffic to generate information; encrypting the information using the key to generate encrypted information; and transmitting the encrypted information to the server.

Abstract: A first network node operating in a first communications network can receive a first message from a second network node operating in a second communications network. The first network node can further, responsive to receiving the first message, determine that the second network node is associated with a network operator that has a service-level agreement, SLA, with a content operator associated with the first network node. The first network node can further transmit a second message to the second network node, the second message including information based on the second node being associated with the network operator that has the SLA with the content operator. The information being associated with whether a subsequent message from a communication device associated with the second network node is to be transmitted to an origin server with an unencrypted server name indication, SNI.

Abstract: A method for deactivating Server Name Indication, SNI, encryption in a telecommunication network, wherein said telecommunication network comprises a Domain Name System, DNS, server, said method comprising the steps of receiving, by said DNS server, from a User Equipment, UE, a DNS query comprising a Domain Name to be converted to an Internet Protocol, IP, address, determining, by said DNS server, that SNI encryption is to be deactivated for subsequent traffic associated with said Domain Name, forwarding, by said DNS server, said DNS query to an external DNS server, wherein said DNS query comprises said Domain Name and a request for deactivating SNI encryption, receiving, by said DNS server, from said external DNS server, a DNS answer, wherein said DNS answer comprises said converted IP address and wherein said DNS answer is free from encryption keys for encrypting SNI and forwarding, by said DNS server, said DNS answer comprising said converted IP address to said UE, wherein said DNS answer is free from encry

Abstract: Method and device(s) for supporting estimation of latency over a communication path in a communication network between a data flow shaping node, providing a data flow in bursts towards a data flow target node, and a probe node. The devices(s) initiate to transmit, by the data flow shaping node, a sample burst being a burst of said bursts that differs in a predefined manner from preceding and subsequent bursts so that the data flow target node in response to the sample burst transmits a certain pattern of acknowledgement packets that differs compared to patterns of acknowledgement packets transmitted by the data flow target node in response to said preceding and subsequent bursts. The device(s) initiates to identify, by the probe node, receipt of potential acknowledgement packets according to said certain pattern.

Abstract: A network assistance node (300), a wireless device (302), a network node (304), an opposite node (306) and methods therein, for handling communication of data between the wireless device and the opposite node over a radio bearer in a cell. When detecting (3:2) that a potential data class is requested which tolerates a certain delay for delivering the data, the network assistance node obtains (3:5) from the network node availability of a potential data bearer dedicated for the potential data class, which availability is dependent on whether a cost related parameter associated with the wireless device fulfils a threshold condition. The network assistance node then reports (3.6) availability of the potential data class to the wireless device and the opposite node, indicating that the potential data bearer is available for data of the potential data class.