Abstract: A technique for dynamically classifying and re-classifying a data packet flow on a user plane of a core network domain is described. According to an apparatus aspect, a device is provided for dynamically classifying and re-classifying a data packet flow, wherein the device is configured to classify and re-classify the data packet flow using packet detection rules (PDRs) and wherein each PDR is associated with at least one action to be applied to data packets matching the PDR. The device is configured to receive one or more first data packets of a data packet flow, to determine that the received one or more first data packets match a first PDR to classify the data packet flow according to the first PDR, and to trigger application of at least one first action associated with the first PDR to the one or more first packets.

Abstract: A method performed by a network data analytics entity in a communications network comprising receiving from a use plane entity traffic classification information relative to the classification of traffic into an application, the traffic classification information including at least one of an application identifier and a Packet Flow Descriptor (PFD): determining, based on the received traffic classification information, a traffic classification cost indicative of the cost of the classification of traffic into the application in terms of user plane resources usage and/or signaling load; and storing the traffic classification cost along with the application identifier or PFD. The traffic classification information may be indicative of at least one of CPU resources usage, memory resources usage, traffic classification technology, number of flows, number of packets, packet size, traffic volume, flow volume and flow duration.

Abstract: A computer-implemented method, performed by a first node (111), for verifying a second node (112) as a server for an application. The first node (111) obtains (301), from a third node (113), a first request to verify a first Internet Protocol (IP) address for a first domain for the application. The first request indicates the first domain and the first IP address. The first node (111) sends (304) a first connection request to the second node (112) using the first IP address. The first connection request comprises the first domain indicated in the first request. The first node (111) receives (305), in response to the sent first connection request, an indication from the second node (112). The indication comprises a certificate of the second node (112). The first node (111) also sends (307) a message to the third node (113) based on a result of the validation and authentication.

Abstract: A technique for dynamically classifying and re-classifying a data packet flow on a user plane of a core network domain is described. According to an apparatus aspect, a device is provided for dynamically classifying and re-classifying a data packet flow, wherein the device is configured to classify and re-classify the data packet flow using packet detection rules (PDRs) and wherein each PDR is associated with at least one action to be applied to data packets matching the PDR. The device is configured to receive one or more first data packets of a data packet flow, to determine that the received one or more first data packets match a first PDR to classify the data packet flow according to the first PDR, and to trigger application of at least one first action associated with the first PDR to the one or more first packets.