Abstract: In one embodiment, a method includes receiving one or more packets of a communication session from one or more interfaces, such that the interface is a subscriber interface or a network interface. The method further includes associating the communication session to an end user with a source Internet Protocol (IP) address of the packet if the packet is received from the subscriber interface or to an end user with a destination IP address of the packet if the packet is received from the network interface.

Abstract: A method is provided in one example embodiment and may include receiving a first Internet protocol (IP) flow for an IP session for a subscriber; selecting a first service function group from a plurality of service function groups to perform one or more services for the IP session for the subscriber, wherein each of the plurality of service function groups comprises a plurality of service function chain types and wherein each service function chain type comprises an ordered combination of one or more service functions; assigning the IP session for the subscriber to the first service function group; and forwarding the first IP flow for the IP session of the subscriber across a first service function chain type for the first service function group based, at least in part, on a service policy for the subscriber.

Abstract: A method is provided in one example embodiment and may include receiving a first Internet protocol (IP) flow for an IP session for a subscriber; selecting a first service function group from a plurality of service function groups to perform one or more services for the IP session for the subscriber, wherein each of the plurality of service function groups comprises a plurality of service function chain types and wherein each service function chain type comprises an ordered combination of one or more service functions; assigning the IP session for the subscriber to the first service function group; and forwarding the first IP flow for the IP session of the subscriber across a first service function chain type for the first service function group based, at least in part, on a service policy for the subscriber.

Abstract: A method is provided in one example embodiment and may include receiving a first Internet protocol (IP) flow for an IP session for a subscriber; selecting a first service function group from a plurality of service function groups to perform one or more services for the IP session for the subscriber, wherein each of the plurality of service function groups comprises a plurality of service function chain types and wherein each service function chain type comprises an ordered combination of one or more service functions; assigning the IP session for the subscriber to the first service function group; and forwarding the first IP flow for the IP session of the subscriber across a first service function chain type for the first service function group based, at least in part, on a service policy for the subscriber.

Abstract: A method is provided in one example embodiment and may include receiving a first Internet protocol (IP) flow for an IP session for a subscriber; selecting a first service function group from a plurality of service function groups to perform one or more services for the IP session for the subscriber, wherein each of the plurality of service function groups comprises a plurality of service function chain types and wherein each service function chain type comprises an ordered combination of one or more service functions; assigning the IP session for the subscriber to the first service function group; and forwarding the first IP flow for the IP session of the subscriber across a first service function chain type for the first service function group based, at least in part, on a service policy for the subscriber.

Abstract: An example method includes reporting location changes for one or more users from a first network element to a second network element based on transitions for each of the one or more users in relation to a policy location area, wherein the policy location area is defined by one or more first user location information (ULI) information elements (IEs); communicating a per-peer Rx authorization and accounting request (Rx AAR) message to initiate a policy change, wherein the per-peer Rx AAR message comprises the one or more first ULI IEs; communicating a per-Diameter-peer Gx reauthorization request (Gx RAR) message including the one or more first ULI IEs; identifying one or more users for the policy change based, at least in part, on a corresponding ULI IE for each user and the one or more first ULI IEs; and applying the policy change to each of the identified one or more users.

Abstract: In one embodiment, a method includes receiving a selected communication session of a transaction associated with a prepaid end user, such that the transaction comprises a plurality of communication sessions. The method includes associating the selected communication session with the transaction and extracting data from the selected communication session associated with the transaction. The method includes generating a single advice of charge request for the transaction before the selected communication session is completed, the single advice of charge request comprising the extracted data from the selected communication session associated with the transaction.

Abstract: In one embodiment, a method includes receiving one or more packets of a communication session from one or more interfaces, such that the interface is a subscriber interface or a network interface. The method further includes associating the communication session to an end user with a source Internet Protocol (IP) address of the packet if the packet is received from the subscriber interface or to an end user with a destination IP address of the packet if the packet is received from the network interface.

Abstract: In one embodiment, a method includes receiving one or more packets of a communication session from one or more interfaces, such that the interface is a subscriber interface or a network interface. The method further includes associating the communication session to an end user with a source Internet Protocol (IP) address of the packet if the packet is received from the subscriber interface or to an end user with a destination IP address of the packet if the packet is received from the network interface.

Abstract: An example method includes reporting location changes for one or more users from a first network element to a second network element based on transitions for each of the one or more users in relation to a policy location area, wherein the policy location area is defined by one or more first user location information (ULI) information elements (IEs); communicating a per-peer Rx authorization and accounting request (Rx AAR) message to initiate a policy change, wherein the per-peer Rx AAR message comprises the one or more first ULI IEs; communicating a per-Diameter-peer Gx reauthorization request (Gx RAR) message including the one or more first ULI IEs; identifying one or more users for the policy change based, at least in part, on a corresponding ULI IE for each user and the one or more first ULI IEs; and applying the policy change to each of the identified one or more users.

Abstract: A method for communicating in a loadbalancing environment is provided that in a particular embodiment includes receiving a request packet from a network access server (NAS) to initiate a communication session. The request packet is then communicated to a tunneling protocol network server (TPNS) and a response packet is received in response to the request packet. The response packet establishes a tunnel that facilitates the communication session and that includes an identification element associated with the TPNS such that a data transfer associated with the communication session is executed between the NAS and the TPNS.

Abstract: An apparatus for managing information in a network environment is provided that includes a content service gateway operable to communicate with an end user in order to facilitate a communication session. The communication session relates to a request by the end user for content or for a service. A quota server coupled to the content service gateway is operable to receive a service authorization request from the content service gateway relating to the communication session. The service authorization request operates to authorize access to the service or to the content for the end user.

Abstract: A method for managing network access is provided that includes receiving a signal indicating a change in a network parameter, the change reflecting that an end user associated with a communication session has changed from using a first network node to a second network node. Each of the network nodes is operable to facilitate the communication session associated with the end user. The method also includes communicating with a billing system element to notify the billing system element of the change in the network parameter and receiving quota information for the end user associated with the second network node. The billing information associated with the second network node may be applied to the communication session, the billing information being based on the quota information.

Abstract: A method for billing end users in a peer-to-peer transaction in a network environment is provided that includes a client services packet gateway operable to communicate with a first end user and a second end user in order to facilitate the peer-to-peer transaction and a flow manager element operable to receive one or more packets of the peer-to-peer transaction from one or more interfaces, such that the interface is a subscriber interface or a network interface. The flow manager is further operable to associate a first session object with the first user and associate a second session object with the second user.

Abstract: Maintaining a content category cache includes storing the content category cache at a gateway. The content category cache includes content category mappings, where a content category mapping associates content with one or more categories describing the content. A request requesting content for a user is received. One or more categories associated with the requested content are determined from a content category mapping of the content category cache. The requested content is filtered in accordance with the categories.

Abstract: A method for communicating in a wireless application protocol (WAP) network environment is provided that includes receiving a request packet at a WAP gateway and positioning an identifier into the request packet. A content switch then identifies the identifier and correlates the identifier to a source that generated the request packet. An internet protocol (IP) address associated with the source is positioned in the request packet before communicating the request packet to a next destination.

Abstract: A method for protecting firewall load balancers from a denial of service attack is provided. Packets are received by the firewall load balancer. Each packet has a source and a destination. The firewall load balancer is equipped with a connection database that can contain entries about the packets. Upon receipt of a packet, the connection database is queried to determine whether or not there is an entry for the received packet. If an entry is found in the database, the packet is forwarded to its destination. Otherwise, if the packet was received from a firewall, then a new connection entry for the packet is built and is saved to the connection database and the packet is forwarded on to its destination. If the packet does not have an entry (match) in the connection database and the packet was not received from a firewall, then the packet is forwarded to a firewall.

Abstract: An improved client network address translation (“NAT”) system is provided. Methods are provided for initializing connection control blocks with the client NAT addresses when a storage pool of connection control blocks are allocated. This avoids the costly overhead as connections are created and destroyed. Unlike the prior art solutions, once the connection control blocks of the present invention are allocated, they remain in effect until the storage subpool is deleted. Secondly, in order to provide as large a pool of client NAT addresses as possible, methods are provided for using intervals to allocate and reclaim client NAT addresses as subpools are allocated and freed.

Abstract: A method for tracking information in a network environment is provided that includes receiving a packet included within a request that is associated with an end user and communicating the packet to a selected one of a plurality of gateways. An object may be built that correlates an internet protocol (IP) address associated with the end user to the selected gateway such that the object may be used to direct subsequently received packets associated with the end user to the selected gateway. Subsequently received packets may be directed based on end-user IP address information included in the subsequently received packets.

Abstract: In one embodiment, a method includes receiving one or more billing instructions, the billing instructions being operable to initiate one or more billing actions associated with one or more token combinations. The billing actions are performed when the one or more token combinations match a portion of a received protocol. The matched portion of the protocol is associated with a new, unknown, or emerging protocol or protocol extension.