Abstract: In general, techniques are provided for receiving a first control plane message that indicates the reachability of the second PE network device as a designated forwarder in an Ethernet segment. The techniques include receiving a second control plane message comprising information that indicates, in the event of a network failure at the second PE router, that the third PE network device of the plurality of PE network devices is the designated forwarder in the layer two segment. The techniques also include forwarding layer two frames to the second PE network device identified as the designated forwarder in the layer two segment; and responsive to determining a network failure at the second PE network device, configuring, based at least in part on the second control plane message, a forwarding plane of the first PE network device to forward layer two frames to the third PE network device as the designated forwarder.

Abstract: In one embodiment, a method comprises selecting, by an ingress provider edge router, one of first or second provider edge routers as a primary router for reaching a destination via a core network, and selecting the other of the first or second provider edge routers as a backup router for reaching the destination via the core network; and inserting, into an IPv6 data packet destined for the destination, a primary label assigned by the primary router and a repair label assigned by backup router, and an IPv6 extension header specifying first and second segment identifiers associated with the respective first and second provider edge routers and a protected flag that enables fast rerouting of the IPv6 data packet to the backup router if the primary router is unavailable.

Abstract: A network architecture includes one or more feature servers and control servers in a control plane that is logically separate from a data plane that includes forwarding elements. Feature servers facilitate adding network-based functionality in a centralized way that is has better scalability than the traditional router architecture. Some examples of network-based functionality are voice over IP, enhancing QoS support, scaling BGP route reflectors, network-based VPN support, scaling mobile IP support, introducing IPv6 into existing and future networks, and enhancing end-to-end network security. Feature servers remove complexity from routers, allow functions to be implemented on a standard-off-the-shelf server platform, facilitate easy introduction of value-added functions, and scale well.

Abstract: A gateway routing bridge of a data center, obtains nicknames of designated routers (DR) of a multicast group in each virtual local area network (VLAN); calculates distribution trees rooted at each DR; receiving a multicast data packet from a multicast source of the multicast group which inside the data center; and sends the multicast data packet on the distribution tree rooted at the DR which corresponds to a multicast address and a VLAN identifier (VLAN ID) of the multicast data packet.

Abstract: IP addresses are efficiently assigned and advertised across the boundary of two network domains. The two network domains include an access network that implements MPLS-TP and a core network that implements IP, MPLS, or a combination of both. A primary BN at the domain boundary receives an assignment of an IP prefix for a VPN that connects a set of CEs to one or more SNs. The IP prefix represents a pool of IP addresses. The primary BN assigns only one IP address to both itself and a standby BN for the VPN to minimize the use of assigned IP addresses. The primary BN assigns the other IP addresses to the CEs in the VPN. The primary BN then advertises the IP prefix into the core network to enable routing of network data traffic across the network domain boundary.

Abstract: In one embodiment, a network device may participate in an election process to elect one of two or more Provider Edge devices of a Redundancy Group to be a Designated Forwarder for the Redundancy Group, where the Redundancy Group is in a Service Provider network, and where the Redundancy Group serves a Customer Edge device of a customer network. The network device may forward multi-destination traffic to the Customer Edge device according to whether the network device is elected to be the Designated Forwarder for the Redundancy Group. Multi-destination traffic may include multicast traffic, broadcast traffic, or destination unknown unicast traffic.

Abstract: One or more techniques and/or systems are provided for connecting a virtual switch to multiple routers (e.g., multiple IP subnets, multiple networks, multiple leaf routers, etc.), for implementing a virtual router for IP address routing, and/or for MAC address overwrite. In an example, a virtual switch is configured to connect a server to multiple routers, such as leaf routers of a Layer 3 network. The virtual switch may route communication packets amongst the multiple routers based upon fail-over and/or load balancing routing criteria. In another example, a virtual router is implemented within the server for IP address routing. In another example, destination MAC address overwriting is performed to direct communication packets to a selected router (e.g., a destination MAC address is overwritten with a MAC address of the selected router). In this way, load balancing and/or fail-over may be implemented within a Layer 3 network.

Abstract: In a wireless communication device, in a correction value calculating mode, a control unit flips switches to the “a” sides, a modulation processing unit generates a CW signal as an I channel signal, a DAC converts the digital CW signal into an analog CW signal, an LPF eliminates the high-frequency component from the CW signal, a mixer functions as an up-converter for up-converting the CW signal, a PA amplifies the RF power of the CW signal, a mixer functions as a down-converter for down-converting the CW signal, an ADC converts the analog CW signal into a digital CW signal, a level detecting unit detects the voltage level of the CW signal, a correction value calculating unit calculates a correction value based on the detected voltage level, and a correction value storing unit stores the calculated correction value.

Abstract: In one aspect, the disclosure includes an apparatus comprising a processor configured to function as a merge point (MP) in a point to multi-point (P2MP) backup label switching path (LSP) for a primary LSP, receive P2MP backup LSP information originating from a protected node, wherein the P2MP backup LSP information comprises the identity of a point of local repair (PLR), determine a backup label switching router (LSR), and send a message with the identity of the backup LSR to an upstream node.

Abstract: A method for configuring a router is disclosed. The method comprises providing router configuration information. The router configuration information is sent to the router over a cellular data network.

Abstract: In some embodiments, an apparatus includes a first controller configured to be operatively coupled within a network having a set of network nodes, a forwarding gateway and a configuration entity. The first controller is configured to manage session state and node state associated with the set of network nodes independent of the forwarding gateway. The first controller is configured to fail over to a second controller when the first controller fails, without the forwarding gateway failing over and without the configuration entity failing over.

Abstract: A network element is configured to reduce the synchronization costs for implementing Open Shortest Path First (OSPF) Nonstop routing (NSR). The reduced synchronization costs are achieved by reducing the number of acknowledgement messages that are needed to be sent though reliable inter-process communication (IPC) between the active OSPF instance and the standby OSPF instance. The number of acknowledgement messages is reduced by tracking the link state advertisements (LSAs) that have been sent by the active OSPF instance to the standby OSPF instance and by the standby OSPF replying with an acknowledgement of only the last LSA in a group of LSAs received from the active OSPF instance, where the group can have a variety of boundaries such as a group of LSAs in an IPC message. This avoids having a significant number of acknowledgement messages sent through the IPC.

Abstract: A wireless communication device includes more than one radio. A lossless switching module allows for selectively using one of the radios in a standby mode. The switching module allows for switching in the standby radio in the event that another radio fails without introducing any loss. In disclosed examples, switching module inputs coupled with inactive or failed radio output ports are coupled to an impedance corresponding to the associated radio. Disclosed examples are also useful for combining the outputs of more than one radio under selected circumstances.

Abstract: Control traffic in a virtual LAN (VLAN) may be reduced. In one implementation, a network device may implement one of a plurality of redundant gateway devices in a virtual router that includes one or more other network devices, where the network device and the one or more other network devices are associated with a first address that corresponds to the virtual router. The network device may filter egress traffic to drop egress traffic that includes a particular destination address and that is at an interface of the device that is not needed to deliver control traffic.

Abstract: Techniques are provided for designating, in an overlay transport virtualization (OTV) network connected to a data center, an edge device to act as a backup authoritative edge device (BAED) for an authoritative edge device (AED) for multicast packet encapsulation and forwarding. Data traffic associated with a given virtual local area network (VLAN) may be detected from a multicast source in the data center addressed to recipients in a site group. A mapping may be generated between the site group and a core data group in the OTV network for traffic from the multicast source. Advertisements may be sent of the mapping to edge devices in another data center across the OTV network. A similar configuration is presented for a BAED for inbound multicast traffic to a data center.

Abstract: In a system that uses a switched network and virtual links (for example, an AFDX, TT-ETHERNET, or TT-Gigabit ETHERNET switched ETHERNET network), the system is configured so that, for at least one virtual link, the end system that sources frames for that virtual link can change (for example, when an end system that was previously sourcing frames for that virtual link fails). The switches used in such a system are configured to be able to accept frames if there is such a change.

Abstract: Techniques are described for separating control plane functions in a network device using virtual machines. The techniques include initializing multiple virtual machine instances in a control unit of a standalone router, and running different control processes for the router in each of the virtual machines. For example, in a root system domain (RSD)-protected system domain (PSD) system, a control unit of the standalone router may support a RSD virtual machine (VM) and one or more PSD VMs configured to form logical devices and execute logically separate control processes without requiring physically separate, hardware-independent routing engines to form the PSDs. Each of the RSD VM and PSD VMs includes a separate kernel, an operating system, and control processes for the logical device. When a software failure occurs in the PSD VM, the PSD VM may perform a software failover without affecting the operation of the RSD VM.

Abstract: A device includes a first processing unit and a second processing unit. The first processing unit is configured to execute a performance test on the device. The second processing unit is in communication with the first processing unit, and is configured to migrate an application from the second processing unit to the first processing unit. The second processing unit is further configured to detect a failure of the first processing unit, to migrate the application to a third processing unit in response to the failure of the first processing unit, and to assign a first plurality of ports to the third processing unit in response to the failure of the first processing unit.

Abstract: Systems and methods for hierarchical link aggregation are disclosed. A system for hierarchical link aggregation may include a network interface having a plurality of physical ports. A first plurality of the physical ports may be configured as member ports of a first link aggregation group (LAG). A second plurality of the physical ports may be configured as member ports of a second LAG. The first LAG and second LAG may be configured as member logical ports of a third LAG.

Abstract: According to one embodiment, there is provided a method of changing a terminal accommodation destination, which is used in a server apparatus including a plurality of resources and connected to a plurality of exchanges via a communication network, the plurality of exchanges performing an exchange service associated with a call connection among a plurality of communication terminals. In the method, a failure of at least one of the plurality of exchanges is detected and, when a failed exchange is detected, an accommodation destination of a communication terminal accommodated in the failed exchange is changed to the server apparatus in accordance with a usage state of the plurality of resources.

Abstract: A switch unit, which is connected to one or more computers and one or more storage systems, comprises an update function for updating transfer management information (a routing table, for example). The storage system has a function for adding a virtual port to a physical port. The storage system migrates the virtual port addition destination from a first physical port to a second physical port and transmits a request of a predetermined type which includes identification information on the virtual port of the migration target to the switch unit. The transfer management information is updated by the update function of the switch unit so that the transfer destination which corresponds with the migration target virtual port is the switch port connected to the second physical port.

Abstract: A communication routing arrangement includes two or more wireless routers coupled to a communication network, and a user device adapted to couple with the communication network through a communication path including at least one of the two or more wireless routers. The communication path between the user device and the communication network is selected based on available resources of the two or more wireless routers.

Abstract: A communication routing arrangement includes two or more wireless routers coupled to a communication network, and a user device adapted to couple with the communication network through a communication path including at least one of the two or more wireless routers. The communication path between the user device and the communication network is selected based on available resources of the two or more wireless routers.

Abstract: In one embodiment, a method comprises detecting, by a provider edge router configured for providing reachability for core network traffic to a prescribed destination address prefix, a backup provider edge router relative to the prescribed destination address prefix; allocating, by the provider edge router, a distinct protected next-hop address for reachability to at least the destination address prefix via the provider edge router; and sending via a core network, by the provider edge router, repair information for the prescribed destination address prefix to ingress provider edge routers and a BGP-free core network router in the core network, the repair information enabling the ingress provider edge routers to insert primary and backup switching labels into each data packet of the core network traffic enabling the BGP-free core network router to reroute the received packet to the backup provider edge router if the provider edge router is unavailable.

Abstract: A network control system that achieves high availability for forwarding state computation within a controller cluster by replicating different levels of table state between controllers of the controller cluster. To build a highly available controller cluster, the tables for storing the forwarding state are replicated across the controllers. In order to reduce network traffic between the controllers, fewer tables are replicated to slave controllers, which then recompute the forwarding state of the master controller in order to have a replicate copy of the master controller's forwarding state for possible failover. In other embodiments, more tables are replicated to minimize the recomputations and processor load on the slave controller. The network control system of some embodiments performs continuous snapshotting to minimize downtime associated with reaching a fixed point and replicating the state.

Abstract: When stored identifying information of a transmission target frame and identifying information of a received frame are equal, a node apparatus updates transmission feasibility information stored in association with the final destination of the received frame. The transmission feasibility information indicates feasibility of transmission to each of a plurality of adjacent node apparatuses being a transmission destination, and is updated so that feasibility of transmission to the transmission destination associated with the identifying information of the received frame indicates that “the transmission is infeasible”. The node apparatus transmits the received frame, when there is no adjacent apparatus to which transmission is feasible, and when the stored identifying information of the transmission target frame is equal to the identifying information of the received frame, to the adjacent node apparatus recognized as the origin in association with the identifying information of the received frame.

Abstract: A method, system, and computer program product for performing failover in a redundancy group, where the redundancy group comprises a plurality of routers including an active router and a standby router, the failover being characterized by zero black hole or significantly reduced black hole conditions versus a conventional failover system. The method comprises the steps of: receiving an incoming message at a switch; sending a request of identification to the plurality of routers to identify a current active router, where the current active router represents a virtual router of the redundancy group; and in response to receiving a reply containing an identification from the current active router within a predetermined time, forwarding the incoming message to the current active router.

Abstract: OSPF NSR with link derivation synchronization is described. When a network element having an active OSPF instance and a standby OSPF instance attempts to create a FULL adjacency with a neighbor network element using a neighbor data structure of the active OSPF instance, and if and when a switch causes the second OSPF instance to act as the active OSPF instance, neighbor information is retrieved from the LSAs of the standby OSPF instance and a link is derived between the network element and the neighbor network element based on the retrieved neighbor information. In one embodiment, the standby OSPF instance retrieves virtual neighbor information from its LSAs and derives a virtual link between the network element and the neighbor network element based on the retrieved virtual neighbor information without having to synchronize the neighbor information between the active and standby OSPF instance.

Abstract: A network device which communicates with peers using Border Gateway Protocol (BGP) advertises to one or more peers a first Multi-Exit Discriminator (MED) when all sessions are in ‘established’ state, and a second MED when one or more sessions are in a non-‘established’ state. The second MED is higher than the first MED and higher than the MED advertised by the backup network device, causing peers to prefer the backup device. If the device is also configured for Virtual Router Redundancy Protocol (VRRP), when the device advertises the first MED, virtual routers are transitioned to ‘master’ state, and when the device advertises the second MED, virtual routers are transitioned to ‘backup’ state.

Abstract: A method of allocating resources in a wireless communication system is provided. A wireless device which makes a transition between Low Power Consumption (LPC) mode and active mode receives, from a base station, an allocation message for allocating persistent scheduling resources used in persistent scheduling. The wireless device communicates with the base station using the persistent scheduling resources, for active duration in which the wireless device operates in the active mode. The wireless device deallocates the persistent scheduling resources automatically when the active duration is finished.

Abstract: A method, apparatus and computer program product for providing a best route selection rule is presented. A determination is made at a first edge router, whether a second edge router in a network advertises a first BMAC address and at least one other BMAC address When the second edge router advertises only a first BMAC address, then the first BMAC address is used in a routing table for a Layer 3 (L3) next hop for a route. When the second edge router advertises more than one BMAC address, at least one other BMAC address is used in the routing table for said L3 next hop for the route.

Abstract: A VRRP router group can operate in either a standard VRRP mode or a distributed gateway mode in which all VRRP routers generate VRRP control packets but transmit those packets only to local access network-side hosts. The rate of VRRP control packet generation may be decreased in the distributed gateway mode relative to the standard mode. Moreover, VRRP router CPUs may cease processing of VRRP control packets in the distributed gateway mode.

Abstract: A network system according to the present invention includes a backbone network that is constituted by combining a plurality of switch devices, and a subnetwork that is constituted by a plurality of switch devices connected linearly, where the switch devices positioned at both ends of the linear connection are connected to the backbone network, wherein among physical ports included in the switch devices that constitute the backbone network, a first physical port that is one of two physical ports to which the subnetwork is connected blocks a packet with a specific logical port number having arrived from a specific direction, and passes other packets, and a second physical port that is the other of the two physical ports passes a packet with the specific logical port number having arrived from the specific direction, and blocks other packets.

Abstract: A network system comprising memory configured to store a service offer set identifying one or more service plans available to an end-user device, the one or more service plans enabling the end-user device to communicate over a wireless access network; and one or more network elements configured to obtain the service offer set from memory, send information associated with the service offer set to the end-user device over the wireless access network, the information enabling the end-user device to present, through a user interface, one or more service plan selection options associated with the one or more service plans available to the end-user device, receive an offer set user selection from the end-user device, the offer set user selection indicating a user selection of at least one of the one or more service plan selection options, and provision one or more functions based on the offer set user selection.

Abstract: A method for application broadcast forwarding for routers running redundancy protocols in a network is provided. The network includes a first router running at least one program instance of a redundancy protocol at one interface, and a second router running at least one program instance of the redundancy protocol at one interface. A relay agent is enabled on both the first and second routers. The method includes, for each router, determining at least one preference ID for the router, determining a broadcast ID of each incoming broadcast packet, matching the broadcast ID of the incoming broadcast packet with the at least one preference ID of the router, and relaying the incoming broadcast packet from a first network domain to a second network domain if the broadcast ID of the incoming broadcast packet matches one preference ID of the router.

Abstract: Disclosed is an apparatus that includes a path computation element (PCE) configured to communicate with a path computation client (PCC) and compute a backup ingress node for a Point-to-Multipoint (P2MP) Label Switched Path (LSP) in a network associated with the PCC. The backup ingress node is coupled to an ingress node of the P2MP LSP and to a plurality of next-hop nodes of the ingress node of the P2MP LSP via a backup tree.

Abstract: A method, in a first network element of an inter-chassis redundancy (ICR) system, of cooperating with a second network element of the ICR system to provide ICR. The network elements are coupled by a synchronization channel. IP addresses are announced with a favorable traffic direction attribute. It is determined that the second network element either has announced the IP addresses with an unfavorable traffic direction attribute less favorable than the favorable direction attribute, or has not announced the IP addresses. Sessions that are connected through the IP addresses are handled. Session state synchronization messages that include session state for the handled sessions are transmitted over the synchronization channel to the second network element. It is determined, after an occurrence of a failure event that inhibits the first element from handling the sessions, that the IP addresses have been announced by the second network element with a favorable traffic direction attribute.

Abstract: A method and apparatus that promote expedited fast link failover decisions by and end station with redundant multilayer switching paths to a network are disclosed. In response to detecting a change in connectivity with an upstream link to a network, an upstream switch may send a notification to an intermediate switch with a downstream link to the end station. In response to the notification, the intermediate switch may disable (“bring down”) the downstream link to the end station. Bringing the downstream link down in this manner may cause the end station to switch (“failover”) to a different downstream link, for example, allowing the end station to establish connectivity to the network via a redundant path.

Abstract: A method performed by a slave network edge node (e.g., a Broadband Network Gateway BNG2) for enhancing a Long Term Evolution (LTE) backup channel in the event of a failure of a master network edge node (e.g., BNG1) in a wireline network. When BNG2 detects the failure of BNG1, BNG2 sends a failure update message to a Packet Data Network Gateway (PDN GW) of an LTE network. The PDN GW provides a backup channel for the CPE to reach the wide area network over a mobile tunnel. Before the failure the mobile tunnel has an end point at BNG1, and the failure update message notifies the PDN GW that the end point of the mobile tunnel has changed from BNG1 to BNG2. After BNG2 receives a failure acknowledgement message from the PDN GW, BNG2 routes the traffic from the PDN GW over the mobile tunnel to the wide area network.

Abstract: When stored identifying information of a transmission target frame and identifying information of a received frame are equal, a node apparatus updates transmission feasibility information stored in association with the final destination of the received frame. The transmission feasibility information indicates feasibility of transmission to each of a plurality of adjacent node apparatuses being a transmission destination, and is updated so that feasibility of transmission to the transmission destination associated with the identifying information of the received frame indicates that “the transmission is infeasible”. The node apparatus transmits the received frame, when there is no adjacent apparatus to which transmission is feasible, and when the stored identifying information of the transmission target frame is equal to the identifying information of the received frame, to the adjacent node apparatus recognized as the origin in association with the identifying information of the received frame.

Abstract: Some embodiments provide a hosting system for provisioning and managing servers (e.g., virtual servers, dedicated servers). In some embodiments, the hosting system receives a configuration for one or more servers for a particular entity (e.g., customer, user). The hosting system then identifies a grid identity and a set of virtual local area network (VLAN) identities for the particular entity. The hosting system then deploys the set of servers on one or more of the hardware nodes using the grid identity and the set of VLAN identities. In some embodiments, the set of VLAN identities includes a first VLAN identity for a private network and a second VLAN identity for a public network.

Abstract: A network configuration having multiple network elements and routers using point-to-point network redundancy to improve network reliability and performance is disclosed. A process using point-to-point network redundancy is able to detect a first checking message (“CM”) formatted in a connectivity verification protocol (“CVP”) such as IEEE 802.1ag indicating a primary link failure. The primary link is a connection between a first network element (“NE”) situated in a first network such as Ethernet based LAN network and a second NE situated in a second network such as an IP based MPLS network. Upon sending a second CM indicating the primary link failure to the second NE, a coordinated failover from the primary link to the backup link at both first and second NEs is performed.

Abstract: A method is implemented by a network device for a fast traffic recovery process for the virtual redundant router protocol (VRRP), where improved speed in a switchover from a master VRRP router to a backup VRRP router is obtained by synchronizing an address resolution protocol (ARP) cache between the master VRRP router and the backup VRRP router such that after the switchover the backup VRRP router functions as a new master VRRP router and does not need to relearn media access control (MAC) address to Internet Protocol (IP) mappings of hosts using the new master VRRP as a gateway. The process involves receiving an ARP entry on an interface of the network device and checking whether the network device is configured as the master VRRP router. The process then sends a gratuitous ARP message to the backup VRRP router in response to the network device being the master VRRP router.

Abstract: A method and an apparatus for rapidly resuming, at times of failures, network traffic in a connection-oriented network by using an alternative route pre-computed and stored locally in nodes along an initial route without requiring signaling of upstream nodes or a master server.

Abstract: A method for implementing a control plane of an evolved packet core (EPC) of a third generation partnership project (3GPP) long term evolution (LTE) network in a cloud computing system, including initializing the plurality of control plane modules of the EPC within the controller, each control plane module in the plurality of control plane modules initialized as a separate virtual machine by the cloud manager; monitoring resource utilization of each control plane module and the control plane traffic handled by each control plane module; detecting a threshold level of resource utilization or traffic load for one of the plurality of control plane modules of the EPC; and initializing a new control plane module as a separate virtual machine by the cloud manager in response to detecting the threshold level, the new control plane module to share the load of the one of the plurality of control plane modules.

Abstract: Gateway devices can use dual cellular interfaces to provide reliable communications for client machines. A gateway device can use one of the dual cellular interfaces as a primary interface and the other as a hot backup interface. The backup interface remains connected to a cellular network while communications are routed on the primary interface. Accordingly, the gateway device can rapidly switch communications between from the primary interface to the backup interface. Applications, for example, for ATM payment processing, vending machine telemetry, point of sale payment processing, kiosk internet connectivity, remote monitoring and control, mobile or electronic health, and remote information displays, may run on the gateway devices, on servers, on user devices, or a combination of these devices.

Abstract: Methods of telecommunicating and systems configured to perform the methods are disclosed. In some embodiments, the methods include establishing a primary communications link, determining that a backup communications link is to be established, and determining a plurality of candidate network nodes. The method also includes selecting one of the candidate network nodes with which to establish the backup communications link, where the selected candidate network node is selected based at least in part on the selected candidate network node being in a foreign network, establishing the backup communications link with a selected candidate network node, and communicating using the backup communications link.

Abstract: According to one embodiment, a method for allocating Internet Protocol (IP) addresses includes receiving, while serving as an active inter-chassis redundancy (ICR) device, a plurality of IP address requests from the third network device for the plurality of client devices. The method further includes responsive to determining a second network device is also serving as the active ICR device, allocating to a client device an IP address selected from a first portion of the commonly shared plurality of IP addresses and not a second portion, wherein the first portion is allocatable only by the first network device while the first network device and the second network device are both serving as active ICR network devices in the ICR system, and wherein the second portion is allocatable only by the second network device while the first and second network devices are both serving as active ICR devices.

Abstract: A method for determining a restoration path for a new service in a mesh network involves selecting between candidate restoration paths corresponding to a primary path for the new service based on the shared-risk link groups (SRLGs) associated with links in the primary path. The method includes, for each of a plurality of candidate restoration paths associated with the primary path, (1) determining whether the primary path requires any additional restoration bandwidth to be reserved on any link of the restoration path based on whether, for each link of the restoration path, the primary path is SRLG-disjoint from each other primary path that is protected by that link, (2) generating a path cost for the restoration path, where the path cost is a function of whether any additional restoration bandwidth is required; and (3) selecting the restoration path for the new service based on the path cost.

Abstract: A method implements a control plane of an evolved packet core (EPC) of a long term evolution (LTE) network in a cloud computing system. A cloud manager monitors resource utilization of each control plane module and the control plane traffic handled by each control plane module. The cloud manager detects a threshold level of resource utilization or traffic load for one of the plurality of control plane modules of the EPC. A new control plane module is initialized as a separate virtual machine by the cloud manager in response to detecting the threshold level. The new control plane module signals the plurality of network elements in the data plane to establish flow rules and actions to establish differential routing of flows in the data plane using the control protocol, wherein flow matches are encoded using an extensible match structure in which the flow match is encoded as a type-length-value (TLV).