Abstract: A network function optimization method, system, and computer program product include optimizing network function chain components of a software by modifying a structure of the network function chain components by removing a function of the network function chain components.

Abstract: A network function optimization method, system, and computer program product include optimizing network function chain components of a software by modifying a structure of the network function chain components by removing a function of the network function chain components.

Abstract: A network function optimization method, system, and computer program product, include optimizing network function chain components by modifying a structure of the network function chain components by removing one of the functions of the network function chain components in response to a constraint according to a policy requirement.

Abstract: A network function optimization method, system, and computer program product, include optimizing network function chain components by modifying a structure of the network function chain components by removing one of the functions of the network function chain components in response to a constraint according to a policy requirement.

Abstract: Middleboxes include a processor configured to determine a degree of mismatch between a sequence number in a first connection between the middlebox and a client device and a sequence number in a second connection between the middlebox and a server device. A network control module is configured to delay acknowledgment signals from the middlebox on a connection to decrease the degree of mismatch between sequence numbers and to establish a direct connection between the client device and the server device without mediation by the middlebox upon a determination that the degree of mismatch between sequence numbers is zero.

Abstract: A network function modification method, system, and computer program product, include terminating the connection-oriented session between a client and a server via at least two proxies, running a multipath connection-oriented session between the at least two proxies, if an insertion request is received, establishing a first multipath subflow with the new multipath subflow traversing the network function of the insertion request, and if a removal request is received, establishing a second multipath subflow with the new multipath subflow not traversing the network function of the removal request.

Abstract: A network function optimization method, system, and computer program product, include optimizing network function chain components by modifying a structure of the network function chain components by removing one of the functions of the network function chain components in response to a constraint according to a policy requirement.

Abstract: A network function optimization method, system, and computer program product, include annotating network functions by providing constraints on a placement of different virtual network function chain components and optimizing the network function chain by modifying a structure of the network function chain based on the constraints in the annotating.

Abstract: Middleboxes include a processor configured to determine a degree of mismatch between a sequence number in a first connection between the middlebox and a client device and a sequence number in a second connection between the middlebox and a server device. A network control module is configured to delay acknowledgment signals from the middlebox on a connection to decrease the degree of mismatch between sequence numbers and to establish a direct connection between the client device and the server device without mediation by the middlebox upon a determination that the degree of mismatch between sequence numbers is zero.

Abstract: A network function modification method, system, and computer program product, include terminating the connection-oriented session between a client and a server via at least two proxies, running a multipath connection-oriented session between the at least two proxies, if an insertion request is received, establishing a first multipath subflow with the new multipath subflow traversing the network function of the insertion request, and if a removal request is received, establishing a second multipath subflow with the new multipath subflow not traversing the network function of the removal request.

Abstract: Middleboxes include a processor configured to determine that a network connection between a client device and a server device is idle. A connection table is configured to create a first connection entry at the middlebox for the client device and a second connection entry at the middlebox for the server device. The first and second connection entries are initialized after determining that the network connection between the client device and the server device is idle. A network control module is configured to activate redirection of the network connection between the client device and the server device to the middlebox after determining that the network connection between the client device and the server device is idle.

Abstract: A network function modification method, system, and computer program product, include terminating the connection-oriented session between a client and a server via at least two proxies, running a multipath connection-oriented session between the at least two proxies, if an insertion request is received, establishing a first multipath subflow with the new multipath subflow traversing the network function of the insertion request, and if a removal request is received, establishing a second multipath subflow with the new multipath subflow not traversing the network function of the removal request.

Abstract: Methods for removing a middlebox from a network connection include determining a degree of mismatch between a sequence number in a first connection between the middlebox and a client and a sequence number in a second connection between the middlebox and a server, delaying acknowledgment signals from the middlebox on a connection to decrease the degree of mismatch, and establishing a direct connection between the client and the server without mediation by the middlebox when the degree of mismatch is zero.

Abstract: A network function modification method, system, and computer program product, include terminating the connection-oriented session between a client and a server via at least two proxies, running a multipath connection-oriented session between the at least two proxies, if an insertion request is received, establishing a first multipath subflow with the new multipath subflow traversing the network function of the insertion request, and if a removal request is received, establishing a second multipath subflow with the new multipath subflow not traversing the network function of the removal request.

Abstract: A network function optimization method, system, and computer program product, include annotating network functions by providing constraints on a placement of different virtual network function chain components and optimizing the network function chain by modifying a structure of the network function chain based on the constraints in the annotating.

Abstract: Traffic engineering of cloud services include receiving, by an enterprise network agent of an enterprise network, a policy from an operator of the enterprise network and transmitting, by a processor, the policy to a cloud service provider. Aspects also include monitoring an incoming traffic to the enterprise network from the cloud service provider and collecting data regarding the incoming traffic and transmitting collected data regarding the incoming traffic to the cloud service provider.

Abstract: Methods for removing a middlebox from a network connection include determining a degree of mismatch between a sequence number in a first connection between the middlebox and a client and a sequence number in a second connection between the middlebox and a server, delaying acknowledgment signals from the middlebox on a connection to decrease the degree of mismatch, and establishing a direct connection between the client and the server without mediation by the middlebox when the degree of mismatch is zero.

Abstract: Methods for inserting a middlebox into a network connection include monitoring network state information in a connection between a client and a server. When the connection is idle, a connection entry is created for each device and is initialized using state information gathered by monitoring the network connection. Redirection of the network connection is activated between the client and the server such that the middlebox mediates the connection. Methods for removing a middlebox from a network connection include determining a degree of mismatch between a sequence number in a first connection between the middlebox and a client and a sequence number in a second connection between the middlebox and a server, delaying acknowledgment signals from the middlebox on a connection to decrease the degree of mismatch, and establishing a direct connection between the client and the server without mediation by the middlebox when the degree of mismatch is zero.

Abstract: Middleboxes include a processor configured to determine that a network connection between a client device and a server device is idle. A connection table is configured to create a first connection entry at the middlebox for the client device and a second connection entry at the middlebox for the server device. The first and second connection entries are initialized after determining that the network connection between the client device and the server device is idle. A network control module is configured to activate redirection of the network connection between the client device and the server device to the middlebox after determining that the network connection between the client device and the server device is idle.

Abstract: Traffic engineering of cloud services include receiving, by an enterprise network agent of an enterprise network, a policy from an operator of the enterprise network and transmitting, by a processor, the policy to a cloud service provider. Aspects also include monitoring an incoming traffic to the enterprise network from the cloud service provider and collecting data regarding the incoming traffic and transmitting collected data regarding the incoming traffic to the cloud service provider.