Abstract: In one example, an intermediate network device sends packets that advertise a transmission control protocol (TCP) window size of zero bytes to a client device and a server device. The device, after sending the packets, receives a first zero-window probe packet from the client device including data representing a first current sequence number for a client-to-server packet flow of an established network session, and a second zero-window probe packet from the server device including data representing a second current sequence number for a server-to-client packet flow of the network session. The device also initializes a TCP state based on the first and second current sequence numbers, and acts as a TCP proxy for packets following the first zero-window probe packet of the client-to-server packet flow based on the TCP state and packets following the second zero-window probe packet of the server-to-client packet flow based on the TCP state.

Abstract: In one example, an intermediate network device sends packets that advertise a transmission control protocol (TCP) window size of zero bytes to a client device and a server device. The device, after sending the packets, receives a first zero-window probe packet from the client device including data representing a first current sequence number for a client-to-server packet flow of an established network session, and a second zero-window probe packet from the server device including data representing a second current sequence number for a server-to-client packet flow of the network session. The device also initializes a TCP state based on the first and second current sequence numbers, and acts as a TCP proxy for packets following the first zero-window probe packet of the client-to-server packet flow based on the TCP state and packets following the second zero-window probe packet of the server-to-client packet flow based on the TCP state.

Abstract: A system is configured to: receive a message from a gateway device; identify one or more sessions corresponding to an identifier included in the message; and clear the one or more corresponding sessions. The identifier may correspond to a part of the gateway device where a session is stored or maintained for a mobile device to connect to a server device.

Abstract: Wireless devices that are attempting to connect to a packet data network may be blocked from issuing connection requests to the network during periods in which, due to the failure of other network devices, the connections requests will fail. A device may particularly determine when a connection request to access a network, from a machine to machine (M2M) device, will fail or has failed. The device may create, in response to the connection request, a response to the connection request, the response including an indication that the M2M device is to be blocked, by other network devices, from accessing the network. The device may transmit the response to the connection request to the other network devices, the response to the other network devices including one or more parameters that identify a duration for which the M2M device is to be blocked and an identification of the M2M device.

Abstract: Malfunctioning machine to machine (M2M) devices in a wireless network can be detected and blocked from the network. In one implementation, a device may monitor uplink traffic from a M2M device and determine, based on the monitoring, whether the M2M device is malfunctioning with respect to an uplink data rate of the M2M device. The device may transmit, in response to the determination that the M2M device is malfunctioning, one or more messages instructing network devices to delete communication sessions corresponding to the M2M device, where at least one of the one or more messages is associated with a time period value indicating a time period in which the deletion of the communication session is to be enforced.

Abstract: In general, techniques are described for identifying a collection of wireless devices to a mobile network using a single group identity. For example, as described herein, an operator assigns a group identity to a plurality of wireless devices that attach to a mobile network. The mobile network establishes, for the plurality of wireless devices, a single service bearer over the mobile network and associates the single service bearer with the group identity and with a single PDP address for the plurality of wireless devices. The mobile network associates the single service bearer with multiple sub-bearers on a particular interface to replicate service data traffic, destined to the PDP address, to each of the plurality of wireless devices and/or aggregate service data traffic, sourced by the PDP address and issued by any of the plurality of wireless devices, for transport to the packet data network.

Abstract: A system is configured to: receive a message from a gateway device; identify one or more sessions corresponding to an identifier included in the message; and clear the one or more corresponding sessions. The identifier may correspond to a part of the gateway device where a session is stored or maintained for a mobile device to connect to a server device.