A network relay device of a gateway redundancy system is provided with: a storage unit which stores, as an internal status, a redundancy status indicating, for each subscriber terminal or for each subscriber terminal group, whether a subject device is operating as an active system or a backup system, and a subscriber status indicating a list of usage address information for each subscriber terminal; and a management unit which monitors communications between a set of subscriber terminals and another network relay device in which a redundant configuration is adopted, records in the storage unit, as a part of the subscriber status, the usage address information provided to the subscriber terminal by the other network relay device, and, with a prescribed timing, successively notifies/advertises the successively recorded internal status to a notification destination.

A communication control apparatus connected to two terminals and to a relay apparatus that relays P2P communication performed between the two terminals, including: storage means configured to store authority information including a communication method of the P2P communication permitted for each of the two terminals; reception means configured to receive a signaling signal mutually transmitted between the two terminals; and control means configured to control the communication method of the P2P communication based on the authority information when receiving the signaling signal.

A communication control apparatus connected to two terminals and to a relay apparatus that relays P2P communication performed between the two terminals, including: storage means configured to store authority information including a communication method of the P2P communication permitted for each of the two terminals; reception means configured to receive a signaling signal mutually transmitted between the two terminals; and control means configured to control the communication method of the P2P communication based on the authority information when receiving the signaling signal.

In general, in an aspect, a method for providing an outbound gateway protection includes provisioning one or more worker gateways located in a first gateway virtual private cloud, the one or more worker gateways sharing configuration data with the controller gateway, provisioning one or more load balancer gateways in one or more client virtual clouds, the one or more client virtual clouds each comprising one or more clients, the one or more load balancer gateways distributing client requests among the worker gateways, assigning groups of the one or more clients to one of the one or more load balancer gateways based on requests from a majority of the worker gateways, and communicating outbound network traffic from the clients via the assigned load balancer gateways.

In general, in an aspect, a method for providing an outbound gateway protection includes provisioning one or more worker gateways located in a first gateway virtual private cloud, the one or more worker gateways sharing configuration data with the controller gateway, provisioning one or more load balancer gateways in one or more client virtual clouds, the one or more client virtual clouds each comprising one or more clients, the one or more load balancer gateways distributing client requests among the worker gateways, assigning groups of the one or more clients to one of the one or more load balancer gateways based on requests from a majority of the worker gateways, and communicating outbound network traffic from the clients via the assigned load balancer gateways.

A network device is configured to provide, via an Ethernet segment with a customer network, active-active multi-homing L2 virtual bridge connectivity to the customer network using an EVPN instance (EVI) and L3 routing using an IRB interface that is a L3 routing interface assigned to the EVI; to receive, from a peer PE device of the EVPN instance, an EVPN route comprising an L2-L3 binding for a customer device of the customer network and associating the L2-L3 binding with the Ethernet segment, the L2-L3 binding comprising an L2 and an L3 address assigned to the customer device, wherein the peer PE device provides, with the network device and via the Ethernet segment, active-active multi-homing L2 virtual bridge connectivity to the customer network; and to forward, via the Ethernet segment and based at least on the L2-L3 binding received from the peer PE device, an L3 packet to the customer device.

Techniques are described for automatic discovery of two or more virtual service instances configured to apply a given service to a packet in a software-defined networking (SDN)/network functions virtualization (NFV) environment. Virtual service instances may be deployed as virtual entities hosted on one or more physical devices to offer individual services or chains of services from a service provider. The use of virtual service instances enables automatic scaling of the services on-demand. The techniques of this disclosure enable automatic discovery by a gateway network device of virtual service instances for a given service as load balancing entities. According to the techniques, the gateway network device automatically updates a load balancing group for the given service to include the discovered virtual service instances on which to load balance traffic for the service. In this way, the disclosed techniques provide auto-scaling and auto-discovery of services in an SDN/NFV environment.

Techniques are described for automatic discovery of two or more virtual service instances configured to apply a given service to a packet in a software-defined networking (SDN)/network functions virtualization (NFV) environment. Virtual service instances may be deployed as virtual entities hosted on one or more physical devices to offer individual services or chains of services from a service provider. The use of virtual service instances enables automatic scaling of the services on-demand. The techniques of this disclosure enable automatic discovery by a gateway network device of virtual service instances for a given service as load balancing entities. According to the techniques, the gateway network device automatically updates a load balancing group for the given service to include the discovered virtual service instances on which to load balance traffic for the service. In this way, the disclosed techniques provide auto-scaling and auto-discovery of services in an SDN/NFV environment.

Integration of a land mobile radio (LMR) communications system and other wireless IP based systems such as LTE by way of a virtual router and virtual base stations. The LMR system may be either trunked or conventional. The virtual router maintains LMR IDs and also IP addresses for both physical and virtual base stations, multi bearer terminals and other components of the integrated system. Physical LMR base stations form a physical network. Virtual LMR base stations form a virtual network. These physical and virtual LMR networks communicate using ISSI, AIS or DFSI for example.

Integration of a land mobile radio (LMR) communications system and other wireless IP based systems such as LTE by way of a virtual router and virtual base stations. The LMR system may be either trunked or conventional. The virtual router maintains LMR IDs and also IP addresses for both physical and virtual base stations, multi bearer terminals and other components of the integrated system. Physical LMR base stations form a physical network. Virtual LMR base stations form a virtual network. These physical and virtual LMR networks communicate using ISSI, AIS or DFSI for example.