The present disclosure relates to a communication method and system for converging a 5th-Generation (5G) communication system for supporting higher data rates beyond a 4th-Generation (4G) system with a technology for Internet of Things (IoT). The present disclosure may be applied to intelligent services based on the 5G communication technology and the IoT-related technology, such as smart home, smart building, smart city, smart car, connected car, health care, digital education, smart retail, security and safety services.

Systems, devices, and methods are discussed for receiving a first packet type and outputting a second packet type based upon knowledge of a source device and a recipient device.

A data retention probe for a packet-switched, mobile telecommunications network employs interfaces to connect to interfaces carrying traffic on a mobile network side of a gateway node and on a global internet side of the gateway node. A FPGA creates for each packet at least one fingerprint of one or more fields that are unchanged as part of the address translation performed by the gateway node and to create informative metadata for those packets. A processing unit: (1) receives from the FPGA the fingerprints and metadata and maintains flow records for each flow of packets seen on each side of the gateway node; and (2) compares the fingerprints and, where a match is found, determines those packets to be part of the same communication session and creates a record correlating internal IP address or a subscriber identifier to external IP address and port number.

To mitigate attacks utilizing compromised DNS caches, a server gateway provides clients with unique IP addresses to contact the server. Packets sent to a server IP address from a particular client which are not linked to that particular with the server gateway are dropped. Thus, even if a client is compromised, the IP address for the server in the client's DNS cache cannot be used by other machines or virtual machines. With a one to one client to server IP address relationship, malicious actors cannot use numerous machines or virtual machines to overload the server with requests.

Systems, methods, and devices for performing targeted filtering of network traffic generated by user equipment (UE) devices connected to a customer premise equipment (CPE) device in a communication system that includes a distributed residential gateway. A network server may determine that the communication system includes a UE device that is compromised, misconfigured, or operating outside normal communication parameters, identify the UE device, determine an Internet protocol (IP) address or a media access control (MAC) address of the identified UE device, generate a quarantine request message that includes the IP address or the MAC address of the identified UE device in response to determining that the preconfigured virtual local area network access control list (VACL) on the CPE lists source IP addresses from which the CPE will filter outbound traffic, and send the generated quarantine request message to a bridged residential gateway (BRG) associated with the CPE device.

Embodiments of the present disclosure provide methods and apparatus for providing edge service. A method performed at a first network function comprises: receiving, a request for querying information associated to a location of a terminal device; wherein the request includes an internet protocol, IP, address of the terminal device; obtaining, from a second network function, a global identifier of the terminal device, based on the IP address of the terminal device; obtaining a location of the terminal device, based on the global identifier or the IP address of the terminal device; and transmitting, information associated to the location of the terminal device.

A receiver node receives, over a communication fabric, a transaction packet that includes an identifier of a sender node and an identifier of a process at the sender node, the transaction packet sent by the process for a transaction. The receiver node performs authentication for the transaction based on the identifier of the process and the identifier of the sender node.

Apparatus and methods for delivery of content in a packetized network. In one embodiment, content and/or services can be associated with an IP address. The IP address may be assigned to multiple server devices disposed at geographically diverse locations. Delivery caches may advertise, via a routing protocol, one or more addresses to clients of the network. Route selection may be configured based on one or more rules such as geographical proximity, available bandwidth, server availability, server load, delivery cost, client subscription level, licensing rules, and/or other metric. Delivery caches may be configured to control their availability and/or load through IP address withdrawals and announcements. When the “closest” delivery cache may become unavailable (e.g., it is not announcing the IP address for the content the client is trying to obtain, a route to the next “closest” available delivery cache may be utilized.

Described herein are systems, methods, and software to enhance connectivity between cloud computing service endpoints and virtual machines. In one implementation, a method of managing data packet addressing in a first namespace includes receiving a data packet at a first interface for the first namespace, wherein the first interface is paired with a second interface of a second namespace. The method also includes identifying if the packet is destined for a service node in an underlay network outside of an overlay network for the second namespace, and if destined for a service node outside of an overlay network for the second namespace, modifying addressing in the data packet to support the underlay network and transferring the data packet over a virtual network interface for the virtual machine.

Disclosed is a value transfer system based on the Domain Name System (DNS) including: a fund management server, leveraging network protocols to transfer value that includes, but not limited to, digital currency and electronic currency; a DNS server, configured with a resource record that has a mapping relationship to the IP address of a fund management server, wherein when a client queries the resource record through the DNS server, the DNS server resolves the resource record to obtain the IP address of the fund management server and feeds the IP address back to the client so that the client interacts with the fund management server according to the IP address to perform the corresponding value transfer. A user can perform cross-platform remittance directly via a wallet address or an e-mail address related to a domain name, thereby greatly improving the reliability and efficiency of remittances/receipts. Since each of the domain names has WHOIS records containing real information and data of the domain name owners, registrars, and the relevant personnel, real-name authentication can be achieved through remittances by wallet or email addresses bound to the domain names, thereby obtain necessary legal support and supervision.