Achieving symmetric data path steering across a service device

A subscriber gateway of a local network, the subscriber gateway comprising:

• a memory;
• and
• one or more processors to:
• identify, based on a virtual private network identifier that identifies a local network in which a subscriber device is included, a set of network services that are to be applied to traffic associated with a session of the subscriber device;
• perform dynamic load balancing to identify one or more service devices, of a group of service devices, that is to apply the set of network services;
• provide outgoing traffic, associated with the session, to the one or more service devices based on identifying the one or more service devices,
• the outgoing traffic being provided to cause the one or more service devices to apply the set of network services to the outgoing traffic, and
• the outgoing traffic flowing from the subscriber gateway via the one or more service devices to a network gateway that is positioned between the one or more service devices and a different network;
• and
• provide, to the network gateway, particular information that identifies that the one or more service devices are to apply the set of network services to traffic associated with the session of the subscriber device,
• the particular information being provided in a remote authentication dial-in user service (RADIUS) message, and
• the particular information being provided to cause the network gateway to provide incoming traffic, associated with the session, to the one or more service devices to apply the set of network services to the incoming traffic.

A system, comprising:

• a subscriber gateway to:
• identify, based on a virtual private network identifier that identifies a local network in which a subscriber device is included, a network service that is to be applied to traffic associated with a session of the subscriber device;
• perform dynamic load balancing to identify a service device, of multiple service devices, that is to apply the network service;
• provide outgoing traffic, associated with the session, to the service device based on identifying the service device,
• the outgoing traffic being provided to cause the service device to apply the network service to the outgoing traffic, and
• the outgoing traffic flowing from the subscriber gateway via the service device to a network gateway that is positioned between the multiple service devices and a different network;
• and
• provide, to the network gateway and in a remote authentication dial-in user service (RADIUS) message, particular information that identifies that the service device is to apply the network service to traffic associated with the session of the subscriber device to permit the network gateway to:
• store information that identifies the service device,
• receive incoming traffic associated with the session, and
• provide, based on the particular information that identifies the service device, incoming traffic, associated with the session, to the service device for application of the network service to the incoming traffic,
• the incoming traffic and the outgoing traffic being provided to the service device.