Apparatuses and methods related to connecting tunnels through a virtual switch

A method performed by a device having one or more processors, the method comprising:

• establishing
• a first tunnel between the device and a node of a mobile network to receive a data flow from a user terminal via the first tunnel, and
• a second tunnel between the device and another network device of the mobile network to forward the data flow via the second tunnel,
• the first tunnel and the second tunnel operating according to Internet protocols;
• connecting the first tunnel to the second tunnel using a virtual switch running on the device;
• connecting a virtual machine running on the device to the virtual switch, the virtual machine being configured to provide a service by processing data in the data flow to support functionality of an application running in the virtual machine;
• and
• configuring the virtual switch to forward the data flow from the first tunnel to the second tunnel, according to one or more predetermined traffic management rules.

A computing unit, comprising:

• at least one physical interface configured to communicate with a node of a mobile network and another network device of the mobile network;
• and
• a data processing unit including one or more processors and configured
• to establish a first tunnel between the computing unit and the node of the mobile network to enable a data flow from a user terminal via the first tunnel, and a second tunnel between the computing unit and the other network device to forward the data flow, the first tunnel and the second tunnel operating according to Internet protocols,
• to run executable codes corresponding to a virtual switch connecting the first tunnel to the second tunnel, and
• to run executable codes corresponding to a virtual machine connected to the virtual switch, the virtual machine being configured to provide a service to the user terminal by processing data in the data flow to support functionality of an application running in the virtual machine,
• wherein the data processing unit is further configured to run the executable codes corresponding to the virtual switch such that to forward the data flow from the first tunnel to the second tunnel, according to one or more predetermined traffic management rules.

A non-transitory computer readable medium storing executable codes which, when executed on a computer having a mobile network interface and one or more processors, make the computer perform a method comprising:

• establishing
• a first tunnel between the device and a node of a mobile network to receive a data flow from a user terminal via the first tunnel, and
• a second tunnel between the device and another network device of the mobile network to forward the data flow,
• the first tunnel and the second tunnel operating according to Internet protocols;
• connecting the first tunnel to the second tunnel using a virtual switch running on the device;
• and
• connecting a virtual machine running on the device to the virtual switch, the virtual machine being configured to provide a service by processing data in the data flow to support functionality of an application running in the virtual machine;
• wherein the virtual switch operates to forward the data flow from the first tunnel to the second tunnel, according to one or more predetermined traffic management rules.

A device in a mobile network, the device comprising:

• a mobile network interface configured to enable the device to communicate to a computing unit;
• a data processing unit configured
• to provide information to a switch controller for configuring a virtual switch running on the computing unit to operate as a General Packet Radio Service (GPRS) Tunneling Protocol (GTP) tunnel end point, and
• to redirect a network node and another network device that have initially been connected via a GTP tunnel, to connect via a first GTP tunnel and a second GTP tunnel to the computing unit, respectively,
• wherein the computing unit receives a data flow from a user terminal via the first GTP tunnel, forwards the data flow via the second GTP tunnel, the first GTP tunnel being connected to the second GTP tunnel by the virtual switch, and connects a virtual machine running on the computing unit to the virtual switch, the virtual machine being configured to provide a service by processing data in the data flow to support functionality of an application running in the virtual machine,
• wherein the virtual switch operates to forward the data flow from the first GTP tunnel to the second GTP tunnel, according to one or more predetermined traffic management rules.