Abstract: A software defined network controller receives from a radio access network access point an attach request generated by a user equipment that includes a user equipment identification and an IP address for the radio access network access point. The controller assigns a temporary identification to the user equipment and sends a modified attach request including the temporary identification, and application server identification and an application server IP address to the radio access network access point. The controller configures a forwarding table associated with the radio access network access point so that the access point forwarding table matches the user equipment identification, the application server identification and the application server IP address. The controller configures a service edge creation environment function forwarding table so that the forwarding table matches the user equipment identification mapped to the radio access network access point IP address.

Abstract: A system for providing secure browsing via a transparent network proxy is disclosed. The system may receive, from a client, a request to access a resource. The request may include an identifier that may be utilized to locate the resource. Once the request is received, the system may determine if the resource is not trusted, such as if the identifier is determined to be unknown or suspicious. If the resource is determined to not be trusted by the system, the system may forward the request to a virtual machine manager that may select a browser virtual machine from a pool of browser virtual machines. After the browser virtual machine is selected, the browser virtual machine may stream a rendering of the resource to the client based on the request. The rendering of the resource may be provided in lieu of the actual resource.

Abstract: A system for providing secure browsing via a transparent network proxy is disclosed. The system may receive, from a client, a request to access a resource. The request may include an identifier that may be utilized to locate the resource. Once the request is received, the system may determine if the resource is not trusted, such as if the identifier is determined to be unknown or suspicious. If the resource is determined to not be trusted by the system, the system may forward the request to a virtual machine manager that may select a browser virtual machine from a pool of browser virtual machines. After the browser virtual machine is selected, the browser virtual machine may stream a rendering of the resource to the client based on the request. The rendering of the resource may be provided in lieu of the actual resource.

Abstract: A software defined network controller receives from a radio access network access point an attach request generated by a user equipment that includes a user equipment identification and an IP address for the radio access network access point. The controller assigns a temporary identification to the user equipment and sends a modified attach request including the temporary identification, and application server identification and an application server IP address to the radio access network access point. The controller configures a forwarding table associated with the radio access network access point so that the access point forwarding table matches the user equipment identification, the application server identification and the application server IP address.

Abstract: Concepts and technologies disclosed herein are directed to application-based multiple radio access technologies (“RAT”) and platform control using software-defined networking (“SDN”). According to one aspect of the concepts and technologies disclosed herein, an SDN controller can configure a radio access network (“RAN”) for connectionless services and for connection-oriented services. The RAN can support multiple RATs each capable of providing radio access to a device, such as a UE or an IoT device. The SDN controller can determine a user plane path configuration for an application flow through at least part of the RAN. The SDN controller can provide the user plane configuration to an SDN agent that is stored on and is executable by the device.

Abstract: A software defined network controller receives from a radio access network access point an attach request generated by a user equipment that includes a user equipment identification and an IP address for the radio access network access point. The controller assigns a temporary identification to the user equipment and sends a modified attach request including the temporary identification, and application server identification and an application server IP address to the radio access network access point. The controller configures a forwarding table associated with the radio access network access point so that the access point forwarding table matches the user equipment identification, the application server identification and the application server IP address.

Abstract: A system for providing differentiated services to traffic flows of a content distribution network is disclosed. In particular, the system may include determining if a first portion of an internet protocol address associated with a traffic flow includes an identifier for a node in the content distribution network by comparing the identifier to a set of prefixes for the content distribution network. Additionally, the system may include determining if a second portion of the internet protocol address matches a unique host address specified by the content distribution network for a customer of the content distribution network. If a rule for providing a differentiated service exists for the customer, the first portion is in the set of prefixes, and the second portion matches the unique host address specified for the customer, the system may provide the differentiated service for the traffic flow.

Abstract: Methods and apparatus to provide a consumer services cloud in a communications network are disclosed. An example apparatus includes a processor and a computer readable storage medium including computer readable instructions that cause the processor to analyze authentication information in a request for access to a communications network to identify which of multiple possible users associated with a communications network customer is a current user of a client device, analyze second network communications based on a security rule to identify a security risk of the second network communications, access a first profile corresponding to the identified current user to determine a rule to be used to handle network communications transferred within the communications network from the client device of the communications network customer that are diverted via a software-defined network (SDN) switch, and configure a forwarding table of the SDN switch to comply with information obtained from the client device.

Abstract: Concepts and technologies disclosed herein are directed to application-based multiple radio access technologies (“RAT”) and platform control using software-defined networking (“SDN”). According to one aspect of the concepts and technologies disclosed herein, an SDN controller can configure a radio access network (“RAN”) for connectionless services and for connection-oriented services. The RAN can support multiple RATs each capable of providing radio access to a device, such as a UE or an IoT device. The SDN controller can determine a user plane path configuration for an application flow through at least part of the RAN. The SDN controller can provide the user plane configuration to an SDN agent that is stored on and is executable by the device.

Abstract: A system for providing secure browsing via a transparent network proxy is disclosed. The system may receive, from a client, a request to access a resource. The request may include an identifier that may be utilized to locate the resource. Once the request is received, the system may determine if the resource is not trusted, such as if the identifier is determined to be unknown or suspicious. If the resource is determined to not be trusted by the system, the system may forward the request to a virtual machine manager that may select a browser virtual machine from a pool of browser virtual machines. After the browser virtual machine is selected, the browser virtual machine may stream a rendering of the resource to the client based on the request. The rendering of the resource may be provided in lieu of the actual resource.

Abstract: A system for providing secure browsing via a transparent network proxy is disclosed. The system may receive, from a client, a request to access a resource. The request may include an identifier that may be utilized to locate the resource. Once the request is received, the system may determine if the resource is not trusted, such as if the identifier is determined to be unknown or suspicious. If the resource is determined to not be trusted by the system, the system may forward the request to a virtual machine manager that may select a browser virtual machine from a pool of browser virtual machines. After the browser virtual machine is selected, the browser virtual machine may stream a rendering of the resource to the client based on the request. The rendering of the resource may be provided in lieu of the actual resource.

Abstract: A wireless network for mobile communications has a connectionless framework using native internet protocol (IP). In this connectionless framework, packet routing may be based on user endpoint (UE) physical IP address, which is associated with the prefix of an associated access node (e.g. eNB). In addition to using the connectionless-IP framework for the traffic flow carried by one access point (e.g. eNB) at a time, advanced mobile call processing features, such as carrier aggregation and dual connectivity, are enhanced to leverage the packet-oriented connectionless radio access network and wireless core network architecture by using the SDN architecture and a wireless network specific software-defined network controller.

Abstract: A software defined network controller receives from a radio access network access point an attach request generated by a user equipment that includes a user equipment identification and an IP address for the radio access network access point. The controller assigns a temporary identification to the user equipment and sends a modified attach request including the temporary identification, and application server identification and an application server IP address to the radio access network access point. The controller configures a forwarding table associated with the radio access network access point so that the access point forwarding table matches the user equipment identification, the application server identification and the application server IP address.

Abstract: A system for providing differentiated services to traffic flows of a content distribution network is disclosed. In particular, the system may include determining if a first portion of an internet protocol address associated with a traffic flow includes an identifier for a node in the content distribution network by comparing the identifier to a set of prefixes for the content distribution network. Additionally, the system may include determining if a second portion of the internet protocol address matches a unique host address specified by the content distribution network for a customer of the content distribution network. If a rule for providing a differentiated service exists for the customer, the first portion is in the set of prefixes, and the second portion matches the unique host address specified for the customer, the system may provide the differentiated service for the traffic flow.

Abstract: A software defined network controller receives from a radio access network access point an attach request generated by a user equipment that includes a user equipment identification and an IP address for the radio access network access point. The controller assigns a temporary identification to the user equipment and sends a modified attach request including the temporary identification, and application server identification and an application server IP address to the radio access network access point. The controller configures a forwarding table associated with the radio access network access point so that the access point forwarding table matches the user equipment identification, the application server identification and the application server IP address.

Abstract: A system for providing differentiated services to traffic flows of a content distribution network is disclosed. In particular, the system may include determining if a first portion of an internet protocol address associated with a traffic flow includes an identifier for a node in the content distribution network by comparing the identifier to a set of prefixes for the content distribution network. Additionally, the system may include determining if a second portion of the internet protocol address matches a unique host address specified by the content distribution network for a customer of the content distribution network. If a rule for providing a differentiated service exists for the customer, the first portion is in the set of prefixes, and the second portion matches the unique host address specified for the customer, the system may provide the differentiated service for the traffic flow.

Abstract: Methods and apparatus to provide a consumer services cloud in a communications network are disclosed. An example apparatus includes a processor and a computer readable storage medium including computer readable instructions that cause the processor to analyze authentication information in a request for access to a communications network to identify which of multiple possible users associated with a communications network customer is a current user of a client device, analyze second network communications based on a security rule to identify a security risk of the second network communications, access a first profile corresponding to the identified current user to determine a rule to be used to handle network communications transferred within the communications network from the client device of the communications network customer that are diverted via a software-defined network (SDN) switch, and configure a forwarding table of the SDN switch to comply with information obtained from the client device.

Abstract: Configurable probe blocks for system monitoring are disclosed. Example apparatus disclosed herein include a processor to perform operations including enabling, based on a value of a control word, a first probe input of a probe block, the first probe input mapped to a source of monitored network traffic in a software defined network. Disclosed example apparatus also include configuring, based on the value of the control word, a first trigger condition of the probe block to evaluate the monitored network traffic to determine whether the monitored network traffic has a first characteristic. Disclosed example apparatus further include configuring, based on the value of the control word, a first probe output of the probe block to output a result of the monitored network traffic being evaluated according to the first trigger condition, the first probe output to output the result to a network application of the software defined network.

Abstract: A software defined network controller receives from a radio access network access point an attach request generated by a user equipment that includes a user equipment identification and an IP address for the radio access network access point. The controller assigns a temporary identification to the user equipment and sends a modified attach request including the temporary identification, and application server identification and an application server IP address to the radio access network access point. The controller configures a forwarding table associated with the radio access network access point so that the access point forwarding table matches the user equipment identification, the application server identification and the application server IP address.

Abstract: A method includes transmitting a first stream of packets from a first network endpoint to a second network endpoint. The first stream of packets includes a quality of service indicator having a value that indicates a packet loss rate tolerance. The method also includes receiving a retransmission request at the first network endpoint from the second network endpoint for retransmission of at least a portion of the first stream of packets.