Network devices and a terminal device are provided in implementations of the disclosure. The network device includes a transceiver, a processor, and a memory configured to storing a computer program, where the computer program is executable by the processor to cause the network device to receive, from a second network function (NF) element, a packet filter and a quality of service (QoS) flow identifier (QFI) of at least one packet, where the packet filter comprises information related to at least one QoS type of the at least one packet; and distinguish different types of packets according to the packet filter, and transmit the different types of packets through corresponding QoS flows to a second network device.

Network devices and a terminal device are provided in implementations of the disclosure. The network device includes a transceiver, a processor, and a memory configured to storing a computer program, where the computer program is executable by the processor to cause the network device to receive, from a second network function (NF) element, a packet filter and a quality of service (QoS) flow identifier (QFI) of at least one packet, where the packet filter comprises information related to at least one QoS type of the at least one packet; and distinguish different types of packets according to the packet filter, and transmit the different types of packets through corresponding QoS flows to a second network device.

A system and method for dynamically shaping an inter-datacenter traffic. The method encompasses receiving, one or more inter-datacenter data packets of the inter-datacenter traffic, wherein each inter-datacenter data packet is associated with a corresponding application and/or application interaction. The method thereafter encompasses identifying, one or more target application flow policies for said each inter-datacenter data packet from one or more application flow policies pre-stored in one or more eBPF maps. The method thereafter leads to dynamically marking, a priority for said each inter-datacenter data packet using an eBPF XDP techstack, based at least on the identified one or more target application flow policies. Further the method encompasses transmitting to an edge router, said each inter-datacenter data packet with the corresponding marked priority. The method further comprises dynamically shaping via the edge router, the inter-datacenter traffic based on said each inter-datacenter data packet and said corresponding marked priority.

A system and method for dynamically shaping an inter-datacenter traffic. The method encompasses receiving, one or more inter-datacenter data packets of the inter-datacenter traffic, wherein each inter-datacenter data packet is associated with a corresponding application and/or application interaction. The method thereafter encompasses identifying, one or more target application flow policies for said each inter-datacenter data packet from one or more application flow policies pre-stored in one or more eBPF maps. The method thereafter leads to dynamically marking, a priority for said each inter-datacenter data packet using an eBPF XDP techstack, based at least on the identified one or more target application flow policies. Further the method encompasses transmitting to an edge router, said each inter-datacenter data packet with the corresponding marked priority. The method further comprises dynamically shaping via the edge router, the inter-datacenter traffic based on said each inter-datacenter data packet and said corresponding marked priority.

A MAP-T system that shares an IPv4 address with one or more other MAP-T systems identifies low latency (LL) traffic for an upstream and a downstream perspective by enhancing NAT of ports using MAP-T rules. The MAP-T rules provide a range of transport ports with a transport slice providing for a subdivision of the transports into a subnet range so as to isolate certain ports for mapping LL traffic. An access point device and a cable modem of the MAP-T system are configured so as to appropriately transform any received traffic so as to properly direct the traffic.

A quality of service management system includes a rules engine that receives information associated with a communication path having an assigned quality of service (QoS) to be provided for a customer communication device, and identifies one or more network elements assigned to provide the communication path. Each network element having a plurality of queues configured to provide varying QoS levels relative to one another. For each of the network elements, the rules engine determines at least one queue that is configured to provide the communication path at the assigned quality of service, and transmits queue information associated with the determined queue to its respective network element, the network element conveying the communication path through the determined queue.

A quality of service management system includes a rules engine that receives information associated with a communication path having an assigned quality of service (QoS) to be provided for a customer communication device, and identifies one or more network elements assigned to provide the communication path. Each network element having a plurality of queues configured to provide varying QoS levels relative to one another. For each of the network elements, the rules engine determines at least one queue that is configured to provide the communication path at the assigned quality of service, and transmits queue information associated with the determined queue to its respective network element, the network element conveying the communication path through the determined queue.

Technologies for filtering network traffic on ingress include a network interface controller (NIC) configured to parse a header of a network packet received by the NIC to extract data from a plurality of header fields of the header. The NIC is additionally configured to determine an input set based on the field vector, retrieve a matching list from a plurality of matching lists, and compare the input set to each of the plurality of rules to identify a matching rule of the plurality of rules that matches a corresponding portion of the input set. The NIC is further configured to perform an action on the network packet based on an actionable instruction associated with the one of the plurality of rules that matches the corresponding portion of the input set. Other embodiments are described herein.

Technologies for filtering network traffic on ingress include a network interface controller (NIC) configured to parse a header of a network packet received by the NIC to extract data from a plurality of header fields of the header. The NIC is additionally configured to determine an input set based on the field vector, retrieve a matching list from a plurality of matching lists, and compare the input set to each of the plurality of rules to identify a matching rule of the plurality of rules that matches a corresponding portion of the input set. The NIC is further configured to perform an action on the network packet based on an actionable instruction associated with the one of the plurality of rules that matches the corresponding portion of the input set. Other embodiments are described herein.

Systems, methods, and computer-readable media for offloading session management processing into a forwarding plane. In some examples, a subscriber is coupled to a network endpoint through a session manager during a network session of the subscriber in a network environment. A session manager offloading system of the session manager can be maintained in a vector packet processing system in a forwarding plane of the network environment. The session manager offloading system can be configured to offload processing from the session manager into the forwarding plane. Further, at least a portion of subscriber traffic in a stream between the subscriber and the network endpoint through the session manager can be intercepted. Subsequently, the at least the portion of the subscribed traffic that is intercepted can be processed at the session manager offloading system as part of offloading the processing from the session manager into the forwarding plane.