Abstract: There is presented a method and apparatus for controlling secure communications in a communications network. An intermediate network element (INE) receives a request from a client to establish a secure connection between the client and a first server. The received request is analysed to determine a client identifier. The INE determines, based on the client identifier whether to attempt to establish a secure connection between the client and the INE. Responsive to a determination not to attempt to establish a connection, the received request is forwarded on to a second server. Responsive to a determination to attempt to establish a connection, a message comprising information for the client to use in establishing a secure connection with the INE is sent to the client.

Abstract: There is described a method for controlling bandwidth between a client and a content server in a data network. The method is implemented by an intermediate network entity that is between the client and the content server in the data network. A dataflow between the content server and the client is monitored and based on the monitoring, the dataflow is categorized as being an Adaptive Bit Rate (ABR) streaming dataflow that comprises segments of media data of a particular quality variant of a plurality of quality variants potentially available at the content server. A different quality variant of the plurality of quality variants is selected as a target quality variant and a bandwidth value is determined to apply to the dataflow to try to cause the client to request segments of media data of the target quality variant for the dataflow. The determined bandwidth value is applied to the dataflow.

Abstract: A method for categorizing a downloading of a resource to a user device from a resource server in a data network is provided. Data of one or more Layer 7 protocol requests from the client device is received at an intermediate server in the data network. The intermediate server forwards the data of each of the one or more Layer 7 protocol requests to the resource server and receives data of one or more Layer 7 protocol responses from the resource server, each Layer 7 protocol response corresponding to a respective one of the Layer 7 protocol requests. The intermediate server categorizes the downloading of the resource to the client device as being one of one or more pre-defined download categories, based on a count of the one or more Layer 7 protocol responses and the determined sizes or estimated sizes of the one or more Layer 7 protocol responses.

Abstract: There is described a method for controlling bandwidth between a client and a content server in a data network. The method is implemented by an intermediate network entity that is between the client and the content server in the data network. A dataflow between the content server and the client is monitored and based on the monitoring, the dataflow is categorized as being an Adaptive Bit Rate (ABR) streaming dataflow that comprises segments of media data of a particular quality variant of a plurality of quality variants potentially available at the content server. A different quality variant of the plurality of quality variants is selected as a target quality variant and a bandwidth value is determined to apply to the dataflow to try to cause the client to request segments of media data of the target quality variant for the dataflow. The determined bandwidth value is applied to the dataflow.

Abstract: A method for categorizing a downloading of a resource to a user device from a resource server in a data network is provided. Data of one or more Layer 7 protocol requests from the client device is received at an intermediate server in the data network. The intermediate server forwards the data of each of the one or more Layer 7 protocol requests to the resource server and receives data of one or more Layer 7 protocol responses from the resource server, each Layer 7 protocol response corresponding to a respective one of the Layer 7 protocol requests. The intermediate server categorizes the downloading of the resource to the client device as being one of one or more pre-defined download categories, based on a count of the one or more Layer 7 protocol responses and the determined sizes or estimated sizes of the one or more Layer 7 protocol responses.

Abstract: There is presented a method and apparatus for controlling secure communications in a communications network. An intermediate network element (INE) receives a request from a client to establish a secure connection between the client and a first server. The received request is analysed to determine a client identifier. The INE determines, based on the client identifier whether to attempt to establish a secure connection between the client and the INE. Responsive to a determination not to attempt to establish a connection, the received request is forwarded on to a second server. Responsive to a determination to attempt to establish a connection, a message comprising information for the client to use in establishing a secure connection with the INE is sent to the client.

Abstract: Embodiments of a method and system for enforcing a traffic policy at a Policy Enforcement Point (PEP) that controls the flow of traffic in a wireless communications network are described. In one embodiment, a method involves learning the topology of the wireless communications network, defining a virtual PEP (VPEP) within the topology of the wireless communications network, the VPEP comprising a location component that is remote from the PEP, associating a traffic policy with the VPEP, associating a traffic flow with the VPEP if the traffic flow has a characteristic that corresponds to the location component of the VPEP, and enforcing, at the PEP, the traffic policy that is associated with the VPEP against the traffic flow.

Abstract: A method and system for dynamic traffic steering is described. In one embodiment, a method for dynamic traffic steering involves receiving a request for content at a steering component, comparing information in the request with steering criteria in the steering component, steering the request based on the comparing, and continuously updating the steering criteria based on requests that are subsequently received at the steering component. Other embodiments are also described.

Abstract: Embodiments of a method and system for enforcing a traffic policy at a Policy Enforcement Point (PEP) that controls the flow of traffic in a wireless communications network are described. In one embodiment, a method involves learning the topology of the wireless communications network, defining a virtual PEP (VPEP) within the topology of the wireless communications network, the VPEP comprising a location component that is remote from the PEP, associating a traffic policy with the VPEP, associating a traffic flow with the VPEP if the traffic flow has a characteristic that corresponds to the location component of the VPEP, and enforcing, at the PEP, the traffic policy that is associated with the VPEP against the traffic flow.

Abstract: A method and apparatus for domain name validation are described. Data structure is maintained in a network node, the data structure includes a set of domain names and at least one alternative domain name corresponding to each domain name from the set of domain names, the network node is coupled to a wireless network to and a wired network. The data structure is used to validate a domain name associated with an attempted access to a network site on the wired network by a mobile device on the wireless network.