Abstract: Various embodiments relate to a method and apparatus for tapping into a virtual network by leveraging a packet broker to deliver a plurality of network packets to an appliance to be analyzed, including receiving, by the packet broker, the plurality of network packets from virtual network interfaces, replicating, by the packet broker, the plurality of network packets, transmitting, by the packet broker, the plurality of network packets to a packet tunnel and transmitting, by the packet tunnel, the plurality of network packets from the packet tunnel to the appliance for processing.

Abstract: Various embodiments relate to a method and apparatus for tapping into a virtual network by leveraging a packet broker to deliver a plurality of network packets to an appliance to be analyzed, including receiving, by the packet broker, the plurality of network packets from virtual network interfaces, replicating, by the packet broker, the plurality of network packets, transmitting, by the packet broker, the plurality of network packets to a packet tunnel and transmitting, by the packet tunnel, the plurality of network packets from the packet tunnel to the appliance for processing.

Abstract: An exemplary method of providing network address translation (NAT) for GPRS tunneling protocol user plane (or GTP-U) traffic on a data center server supporting multiple radio bearers in a mobile network is disclosed. The method includes: receiving packets from a source node via a GTP-U tunnel; filtering ingress GTP-U packets from other types of packets; forwarding a respective ingress GTP-U packet with a public destination IP address to a first queue if a destination IP address matches a defined GTP-U public IP address for the destination node; extracting one or more ingress GTP-U packets and forwarding the packets to a user-land operating system process for inspection; performing NAT of the destination IP address; placing ingress GTP-U packets that have an internal IP address that identifies with a particular radio bearer into a second queue; and forwarding the ingress GTP-U packets via a radio bearer within a network for processing.

Abstract: An exemplary method of providing network address translation (NAT) for GPRS tunneling protocol user plane (or GTP-U) traffic on a data center server supporting multiple radio bearers in a mobile network is disclosed. The method includes: receiving packets from a source node via a GTP-U tunnel; filtering ingress GTP-U packets from other types of packets; forwarding a respective ingress GTP-U packet with a public destination IP address to a first queue if a destination IP address matches a defined GTP-U public IP address for the destination node; extracting one or more ingress GTP-U packets and forwarding the packets to a user-land operating system process for inspection; performing NAT of the destination IP address; placing ingress GTP-U packets that have an internal IP address that identifies with a particular radio bearer into a second queue; and forwarding the ingress GTP-U packets via a radio bearer within a network for processing.