Abstract: There is provided allocating cloud computing resources to process a user session by a gateway in a mobile communications network, and allocating the cloud computing resources in pairs to user sessions. Rules for the pair of allocated resources are determined such that incoming control plane traffic associated with the session is forwarded to the both cloud computing resources forming the pair.

Abstract: A method is disclosed for downscaling a deep packet inspection service in a network apparatus. The method comprises receiving data flow in a gateway virtual machine via a software defined networking switch, and keeping track of data flow and control flow and their state per subscriber. If needed, a new deep packet inspection virtual machine is selected for the data flow. The software defined networking switch is informed on the selection of the new deep packet inspection virtual machine. The new deep packet inspection virtual machine is instructed to re-create a flow identification for the data flow to ensure deep packet inspection service continuity.

Abstract: A method includes configuring an IP subnet at an operations support system in a telecommunications network, the operations support system configured for managing at least one virtual networking function; configuring the IP subnet for use by the at least one virtual networking function, the virtual networking function including at least one virtual machine; configuring the IP subnet for use by the least one virtual machine, the at least one virtual machine including a processor and a memory; sending, from the at least one virtual machine, IP subnet data to a virtual networking function manager having a processor and a memory; and sending, from the virtual networking function manager, the IP subnet data to a virtual infrastructure manager configured for managing internal and external connectivity of the IP subnet data.

Abstract: A method is disclosed for service offloading in a communications system, the method comprising determining, in a network apparatus, whether a traffic flow has been properly classified by a deep packet inspection virtual machine. If the traffic flow has been properly classified by the deep packet inspection virtual machine, the method comprises instructing a software defined networking controller to stop sending further packets of said traffic flow to the deep packet inspection virtual machine.

Abstract: Apparatus and method for lawful interception in accordance with an example embodiment of the present invention, a method is provided for receiving from a gateway apparatus an intercept request regarding user equipment in the communication system; creating or modifying a processing rule regarding the user equipment by including interception in the rule; transmitting to a network switch processing user equipment connections a command to clone and encrypt each signalling or data packet of the user equipment connection and to transmit the encrypted signalling and data packets to a given network apparatus.

Abstract: Apparatus and method for lawful interception in accordance with an example embodiment of the present invention, a method is provided for receiving from a gateway apparatus an intercept request regarding user equipment in the communication system; creating or modifying a processing rule regarding the user equipment by including interception in the rule; transmitting to a network switch processing user equipment connections a command to clone and encrypt each signalling or data packet of the user equipment connection and to transmit the encrypted signalling and data packets to a given network apparatus.

Abstract: In examples, a mobile network apparatus, a computer program and a method is discussed, including at least one processor, and at least one memory storing program instructions that, when executed by the at least one processor, cause to: Receive a create request for requesting data connectivity. Based on the create request, perform a static load balancing. Based on the static load balancing, perform a caching relating to a dynamic load balancing and perform the dynamic load balancing. A load balancing method may be scalable with a grace period.

Abstract: The present invention addresses method, apparatus and computer program product for enabling session transfer by Tunnel Endpoint Identifier renumbering in GPRS Tunneling Protocol peer. A new Tunnel Endpoint Identifier value is allocated for the existing session, information about relocating the existing session including the new Tunnel Endpoint Identifier value for the existing session is communicated to the peer network elements of the relocated resource, tunnel endpoint change procedure towards counterpart network elements is performed, and the existing session is removed from the original resource and processing is continued in the relocated resource.

Abstract: A method is disclosed for downscaling a deep packet inspection service in a network apparatus. The method comprises receiving data flow in a gateway virtual machine via a software defined networking switch, and keeping track of data flow and control flow and their state per subscriber. If needed, a new deep packet inspection virtual machine is selected for the data flow. The software defined networking switch is informed on the selection of the new deep packet inspection virtual machine. The new deep packet inspection virtual machine is instructed to re-create a flow identification for the data flow to ensure deep packet inspection service continuity.

Abstract: A method is disclosed for service offloading in a communications system, the method comprising determining, in a network apparatus, whether a traffic flow has been properly classified by a deep packet inspection virtual machine. If the traffic flow has been properly classified by the deep packet inspection virtual machine, the method comprises instructing a software defined networking controller to stop sending further packets of said traffic flow to the deep packet inspection virtual machine.

Abstract: There is provided allocating cloud computing resources to process a user session by a gateway in a mobile communications network, and allocating the cloud computing resources in pairs to user sessions. Rules for the pair of allocated resources are determined such that incoming control plane traffic associated with the session is forwarded to the both cloud computing resources forming the pair.

Abstract: A method for subscriber tracing comprises capturing user plane packets in a network apparatus implementing a 3GPP policy and charging enforcement functionality PCEF. Packet-specific metadata is added to a captured user plane packet. The packet-specific metadata may be used for facilitating subscriber-specific troubleshooting of core network elements.

Abstract: In accordance with an example embodiment of the present invention, a method is provided for receiving (414) from a gateway apparatus an intercept request regarding user equipment in the communication system; creating or modifying a processing rule regarding the user equipment by including interception in the rule; transmitting (502) to a network switch processing user equipment connections a command to clone and encrypt each signalling or data packet of the user equipment connection and to transmit the encrypted signalling and data packets to a given network apparatus.

Abstract: A method is disclosed for subscriber tracing in a communications system. The method comprises receiving, in a gateway apparatus (GGSN, PGW) from an O&M unit, a command message for triggering a subscriber tracing functionality. The gateway apparatus (GGSN, PGW) instructs a network node to clone each packet having a certain IP address or TEID value, in order the network node to replicate each user plane packet belonging to a session to be monitored and to send the replicated packets directly to the O&M unit for further analysis. The gateway apparatus (GGSN, PGW) collects control plane data related to the session to be monitored, and transmits the collected control plane data directly to the O&M unit in order the collected control plane data to be correlated in the O&M unit to user plane data.

Abstract: A method for subscriber tracing comprises capturing user plane packets in a network apparatus implementing a 3GPP policy and charging enforcement functionality PCEF. Packet-specific metadata is added to a captured user plane packet. The packet-specific metadata may be used for facilitating subscriber-specific troubleshooting of core network elements.