초록 ▼

A method for dynamic ingress to egress tunnel mapping from a first communication network to a second communication network includes receiving a tunneled communication from a subscriber using the first communication network, determining egress tunnel selection criteria for the tunneled communication,

A method for dynamic ingress to egress tunnel mapping from a first communication network to a second communication network includes receiving a tunneled communication from a subscriber using the first communication network, determining egress tunnel selection criteria for the tunneled communication, selecting one of at least one egress tunnel based on the egress tunnel selection criteria and forwarding the tunneled communication on the selected egress tunnel. The egress tunnel selection criteria indicate the basis for selecting one of the egress tunnels. An apparatus for dynamic ingress to egress tunnel mapping from a first communication network to a second communication network includes a receiving interface to receive a tunneled communication from a subscriber using the first communication network, an egress tunnel selection criteria determiner to determine egress tunnel selection criteria for the tunneled communication, an egress tunnel selector to select one of at least one egress tunnel based on the egress tunnel selection criteria and a session forwarder to forward the tunneled communication on the selected egress tunnel. In one aspect of the invention, tunnel mapping is performed between Layer 2 Tunneling Protocol (L2TP) ingress and egress tunnels.

대표청구항 ▼

What is claimed is: 1. A method for dynamic ingress to egress tunnel mapping on a communication network, the method comprising: receiving a tunneled communication from a subscriber using a first communication network, said first communication network connected to at least one communication network

What is claimed is: 1. A method for dynamic ingress to egress tunnel mapping on a communication network, the method comprising: receiving a tunneled communication from a subscriber using a first communication network, said first communication network connected to at least one communication network by at least one egress tunnel communicatively coupled to a remote domain; determining egress tunnel selection criteria for said tunneled communication, said egress tunnel selection criteria indicating a basis for selecting one of said at least one egress tunnel, said determining based at least in part on a tunnel database comprising selection criteria for at least one egress tunnel connecting said first communication network to said at least one communication network; selecting one of said at least one egress tunnel based on said egress tunnel selection criteria; and forwarding said tunneled communication on the selected egress tunnel. 2. The method of claim 1, further comprising initializing a tunnel database that includes tunnel selection criteria for at least one egress tunnel connecting said first communication network to said at least one communication network. 3. The method of claim 1 wherein said tunneled communication comprises a Point-to-Point Protocol (PPP) session. 4. The method of claim 3 wherein said tunnels comprise L2TP tunnels. 5. The method of claim 4 wherein said selecting further comprises: determining an ingress tunnel ID for said tunneled session, said ingress tunnel ID uniquely identifying an ingress tunnel including said PPP session; and selecting one of said one or more available egress tunnels based on said ingress tunnel ID. 6. The method of claim 4 wherein said selecting further comprises: determining a subscriber domain for said tunneled session; and selecting one of said one or more available egress tunnels based on said subscriber domain. 7. The method of claim 4 wherein said selecting further comprises: examining Type of Service (ToS) bits associated with said PPP session; and selecting one of said one or more available egress tunnel based on said ToS bits. 8. The method of claim 4 wherein said selecting further comprises: examining a Virtual Path Identifier (VPI)/Virtual Channel Identifier (VCI) pair associated with said PPP session; and selecting one of said one or more available egress tunnel based on said VPI/VCI pair. 9. The method of claim 4 wherein said selecting further comprises randomly selecting one of said one or more available egress tunnel connected to said remote domain. 10. The method of claim 4 wherein said selecting further comprises: determining available bandwidth for at least one egress tunnel to said remote domain; and selecting one of said one or more available egress tunnel to said remote domain having the most available bandwidth. 11. The method of claim 4 wherein said selecting further comprises: determining a time at which said PPP session is received; and selecting one of said one or more available egress tunnel based on said time. 12. The method of claim 4 wherein said selecting further comprises: determining a time at which said PPP session is received; determining available bandwidth for at least one egress tunnel to said remote domain; and selecting one of said one or more available egress tunnel having the most available bandwidth at said time. 13. The method of claim 4 wherein said selecting further comprises: examining Type of Service (ToS) bits associated with said PPP session; determining available bandwidth for at least one egress tunnel to said remote domain; and selecting one of said one or more available egress tunnel based on said ToS bits and said available bandwidth. 14. The method of claim 4 wherein said selecting further comprises: examining a Virtual Path Identifier (VPI)/Virtual Channel Identifier (VCI) pair associated with said PPP session; determining a class of service based on said VPI/VCI pair; determining available bandwidth for at least one egress tunnel to said remote domain; and selecting one of said one or more available egress tunnel based on said class of service and said available bandwidth. 15. The method of claim 4 wherein said selecting further comprises selecting one of said one or more available egress tunnel to said remote domain having the smallest number of tunneled sessions such that tunneled sessions are distributed evenly among egress tunnels to said remote domain. 16. A program storage device readable by a machine, embodying a program of instructions executable by the machine to perform a method to dynamically map ingress to egress tunnels on a communication network, the method comprising: receiving a tunneled communication from a subscriber using a first communication network, said first communication network connected to at least one communication network by at least one egress tunnel communicatively coupled to a remote domain; determining egress tunnel selection criteria for said tunneled communication, said egress tunnel selection criteria indicating a basis for selecting one of said at least one egress tunnel, said determining based at least in part on a tunnel database comprising selection criteria for at least one egress tunnel connecting said first communication network to said at least one communication network; selecting one of said at least one egress tunnel based on said egress tunnel selection criteria; and forwarding said tunneled communication on the selected egress tunnel. 17. The program storage device of claim 16 wherein said method further comprises initializing a tunnel database that includes tunnel selection criteria for at least one egress tunnel connecting said first communication network to said at least one communication network. 18. The program storage device of claim 16 wherein said tunneled communication comprises a Point-to-Point Protocol (PPP) session. 19. The program storage device of claim 18 wherein said tunnels comprise L2TP tunnels. 20. The program storage device of claim 19 wherein said selecting further comprises: determining an ingress tunnel ID for said tunneled session, said ingress tunnel ID uniquely identifying an ingress tunnel including said PPP session; and selecting one of said one or more available egress tunnels based on said ingress tunnel ID. 21. The program storage device of claim 19 wherein said selecting further comprises: determining a subscriber domain for said tunneled session; and selecting one of said one or more available egress tunnels based on said subscriber domain. 22. The program storage device of claim 19 wherein said selecting further comprises: examining Type of Service (ToS) bits associated with said PPP session; and selecting one of said one or more available egress tunnel based on said ToS bits. 23. The program storage device of claim 19 wherein said selecting further comprises: examining a Virtual Path Identifier (VPI)/Virtual Channel Identifier (VCI) pair associated with said PPP session; and selecting one of said one or more available egress tunnel based on said VPI/VCI pair. 24. The program storage device of claim 19 wherein said selecting further comprises randomly selecting one of said one or more available egress tunnel connected to said remote domain. 25. The program storage device of claim 19 wherein said selecting further comprises: determining available bandwidth for at least one egress tunnel to said remote domain; and selecting one of said one or more available egress tunnel to said remote domain having the most available bandwidth. 26. The program storage device of claim 19 wherein said selecting further comprises: determining a time at which said PPP session is received; and selecting one of said one or more available egress tunnel based on said time. 27. The program storage device of claim 19 wherein said selecting further comprises: determining a time at which said PPP session is received; determining available bandwidth for at least one egress tunnel to said remote domain; and selecting one of said one or more available egress tunnel having the most available bandwidth at said time. 28. The program storage device of claim 19 wherein said selecting further comprises: examining Type of Service (ToS) bits associated with said PPP session; determining available bandwidth for at least one egress tunnel to said remote domain; and selecting one of said one or more available egress tunnel based on said ToS bits and said available bandwidth. 29. The program storage device of claim 19 wherein said selecting further comprises: examining a Virtual Path Identifier (VPI)/Virtual Channel Identifier (VCI) pair associated with said PPP session; determining a class of service based on said VPI/VCI pair; determining available bandwidth for at least one egress tunnel to said remote domain; and selecting one of said one or more available egress tunnel based on said class of service and said available bandwidth. 30. The program storage device of claim 19 wherein said selecting further comprises selecting one of said one or more available egress tunnel to said remote domain having the smallest number of tunneled sessions such that tunneled sessions are distributed evenly among egress tunnels to said remote domain. 31. An apparatus for dynamic ingress to egress tunnel mapping on a communication network, the apparatus comprising: means for receiving a tunneled communication from a subscriber using a first communication network, said first communication network connected to at least one communication network by at least one egress tunnel communicatively coupled to a remote domain; means for determining egress tunnel selection criteria for said tunneled communication, said egress tunnel selection criteria indicating a basis for selecting one of said at least one egress tunnel, said means for determining based at least in part on a tunnel database comprising selection criteria for at least one egress tunnel connecting said first communication network to said at least one communication network; means for selecting one of said at least one egress tunnel based on said egress tunnel selection criteria; and means for forwarding said tunneled communication on the selected egress tunnel. 32. The apparatus of claim 31, further comprising means for initializing a tunnel database that includes tunnel selection criteria for at least one egress tunnel connecting said first communication network to said at least one communication network. 33. The apparatus of claim 31 wherein said tunneled communication comprises a Point-to-Point Protocol (PPP) session. 34. The apparatus of claim 33 wherein said tunnels comprise L2TP tunnels. 35. The apparatus of claim 34 wherein said means for selecting further comprises: means for determining an ingress tunnel ID for said tunneled session, said ingress tunnel ID uniquely identifying an ingress tunnel including said PPP session; and means for selecting one of said one or more available egress tunnels based on said ingress tunnel ID. 36. The apparatus of claim 34 wherein said means for selecting further comprises: means for determining a subscriber domain for said tunneled session; and means for selecting one of said one or more available egress tunnels based on said subscriber domain. 37. The apparatus of claim 34 wherein said means for selecting further comprises: means for examining Type of Service (ToS) bits associated with said PPP session; and means for selecting one of said one or more available egress tunnel based on said ToS bits. 38. The apparatus of claim 34 wherein said means for selecting further comprises: means for examining a Virtual Path Identifier (VPI)/Virtual Channel Identifier (VCI) pair associated with said PPP session; and means for selecting one of said one or more available egress tunnel based on said VPI/VCI pair. 39. The apparatus of claim 34 wherein said means for selecting further comprises means for randomly selecting one of said one or more available egress tunnel connected to said remote domain. 40. The apparatus of claim 34 wherein said means for selecting further comprises: means for determining available bandwidth for at least one egress tunnel to said remote domain; and means for selecting one of said one or more available egress tunnel to said remote domain having the most available bandwidth. 41. The apparatus of claim 34 wherein said means for selecting further comprises: means for determining a time at which said PPP session is received; and means for selecting one of said one or more available egress tunnel based on said time. 42. The apparatus of claim 34 wherein said means for selecting further comprises: means for determining a time at which said PPP session is received; means for determining available bandwidth for at least one egress tunnel to said remote domain; and means for selecting one of said one or more available egress tunnel having the most available bandwidth at said time. 43. The apparatus of claim 34 wherein said means for selecting further comprises: means for examining Type of Service (ToS) bits associated with said PPP session; means for determining available bandwidth for at least one egress tunnel to said remote domain; and means for selecting one of said one or more available egress tunnel based on said ToS bits and said available bandwidth. 44. The apparatus of claim 34 wherein said means for selecting further comprises: means for examining a Virtual Path Identifier (VPI)/Virtual Channel Identifier (VCI) pair associated with said PPP session; means for determining a class of service based on said VPI/VCI pair; means for determining available bandwidth for at least one egress tunnel to said remote domain; and means for selecting one of said one or more available egress tunnel based on said class of service and said available bandwidth. 45. The apparatus of claim 34 wherein said means for selecting further comprises means for selecting one of said one or more available egress tunnel to said remote domain having the smallest number of tunneled sessions such that tunneled sessions are distributed evenly among egress tunnels to said remote domain. 46. An apparatus for dynamic ingress to egress tunnel mapping on a communication network, the apparatus comprising: a receiving interface to receive a tunneled communication from a subscriber using a first communication network, said first communication network connected to at least one communication network by at least one egress tunnel communicatively coupled to a remote domain; an egress tunnel selection criteria determiner to determine egress tunnel selection criteria for said tunneled communication, said egress tunnel selection criteria indicating a basis for selecting one of said at least one egress tunnel, said egress tunnel selection criteria determiner adapted to determine said egress tunnel selection criteria based at least in part on a tunnel database comprising selection criteria for at least one egress tunnel connecting said first communication network to said at least one communication network; an egress tunnel selector to select one of said at least one egress tunnel based on said egress tunnel selection criteria; and a session forwarder to forward said tunneled communication on the selected egress tunnel. 47. The apparatus of claim 46, further comprising a tunnel database initializer to initialize a tunnel database that includes tunnel selection criteria for said at least one egress tunnel connecting said first communication network to said at least one communication network. 48. The apparatus of claim 46 wherein said tunneled communication comprises a Point-to-Point Protocol (PPP) session. 49. The apparatus of claim 48 wherein said tunnels comprise L2TP tunnels. 50. The apparatus of claim 49 wherein said egress tunnel selector is further configured to select one of said one or more available egress tunnels based on an ingress tunnel ID. 51. The apparatus of claim 49 wherein said egress tunnel selector is further configured to select one of said one or more available egress tunnels based on a subscriber domain for said tunneled session. 52. The apparatus of claim 49 wherein said egress tunnel selector is further configured to select one of said one or more available egress tunnel based on ToS bits associated with said PPP session. 53. The apparatus of claim 49 wherein said egress tunnel selector is further configured to select one of said one or more available egress tunnel based on a Virtual Path Identifier (VPI)/Virtual Channel Identifier (VCI) pair associated with said PPP session. 54. The apparatus of claim 49 wherein said egress tunnel selector is further configured to randomly select one of said one or more available egress tunnel connected to said remote domain. 55. The apparatus of claim 49 wherein said egress tunnel selector is further configured to select one of said one or more available egress tunnel to said remote domain having the most available bandwidth. 56. The apparatus of claim 49 wherein said egress tunnel selector is further configured to select one of said one or more available egress tunnel based on a time at which said PPP session is received. 57. The apparatus of claim 49 wherein said egress tunnel selector is further configured to select one of said one or more available egress tunnel having the most available bandwidth at a time at which said PPP session is received. 58. The apparatus of claim 49 wherein said egress tunnel selector is further configured to select one of said one or more available egress tunnel based upon ToS bits associated with said PPP session and upon available bandwidth for at least one egress tunnel to said remote domain. 59. The apparatus of claim 49 wherein said egress tunnel selector is further configured to select one of said one or more available egress tunnel based on a Virtual Path Identifier (VPI)/Virtual Channel Identifier (VCI) pair and upon available bandwidth for at least one egress tunnel to said remote domain. 60. The apparatus of claim 49 wherein said egress tunnel selector is further configured to select one of said one or more available egress tunnel to said remote domain having the smallest number of tunneled sessions such that tunneled sessions are distributed evenly among egress tunnels to said remote domain. 61. The apparatus of claim 49, further comprising: a monitor to periodically assess the loading of said apparatus; and a notifier to indicate that ingress tunnels should be directed to a different apparatus when said loading exceeds a predetermined threshold. 62. A method for dynamic ingress to egress tunnel mapping on a communication network, the method comprising: receiving a tunneled communication comprising a Point-to-Point Protocol (PPP) session from a subscriber using a first communication network, said first communication network connected to at least one communication network by at least one L2TP egress tunnel communicatively coupled to a remote domain; determining egress tunnel selection criteria for said tunneled communication, said egress tunnel selection criteria indicating a basis for selecting one of said at least one L2TP egress tunnel; selecting one of said at least one L2TP egress tunnel based on said egress tunnel selection criteria, said selecting further comprising: examining Type of Service (ToS) bits associated with said PPP session; determining available bandwidth for at least one L2TP egress tunnel to said remote domain; and selecting one of said one or more available L2TP egress tunnel based on said ToS bits and said available bandwidth; and forwarding said tunneled communication on the selected L2TP egress tunnel. 63. A method for dynamic ingress to egress tunnel mapping on a communication network, the method comprising: receiving a tunneled communication comprising a Point-to-Point Protocol (PPP) session from a subscriber using a first communication network, said first communication network connected to at least one communication network by at least one L2TP egress tunnel communicatively coupled to a remote domain; determining egress tunnel selection criteria for said tunneled communication, said egress tunnel selection criteria indicating a basis for selecting one of said at least one L2TP egress tunnel; selecting one of said at least one L2TP egress tunnel based on said egress tunnel selection criteria, said selecting further comprising: examining a Virtual Path Identifier (VPI)/Virtual Channel Identifier (VCI) pair associated with said PPP session; determining a class of service based on said VPI/VCI pair; determining available bandwidth for at least one egress tunnel to said remote domain; and selecting one of said one or more available egress tunnel based on said class of service and said available bandwidth; and forwarding said tunneled communication on the selected L2TP egress tunnel. 64. A method for dynamic ingress to egress tunnel mapping on a communication network, the method comprising: receiving a tunneled communication comprising a Point-to-Point Protocol (PPP) session from a subscriber using a first communication network, said first communication network connected to at least one communication network by at least one L2TP egress tunnel communicatively coupled to a remote domain; determining egress tunnel selection criteria for said tunneled communication, said egress tunnel selection criteria indicating a basis for selecting one of said at least one L2TP egress tunnel; selecting one of said at least one L2TP egress tunnel based on said egress tunnel selection criteria, said selecting further comprising selecting one of said one or more available L2TP egress tunnel to said remote domain having the smallest number of tunneled sessions such that tunneled sessions are distributed evenly among egress tunnels to said remote domain; and forwarding said tunneled communication on the selected L2TP egress tunnel. 65. A program storage device readable by a machine, embodying a program of instructions executable by the machine to perform a method to dynamically map ingress to egress tunnels on a communication network, the method comprising: receiving a tunneled communication comprising a Point-to-Point Protocol (PPP) session from a subscriber using a first communication network, said first communication network connected to at least one communication network by at least one L2TP egress tunnel communicatively coupled to a remote domain; determining egress tunnel selection criteria for said tunneled communication, said egress tunnel selection criteria indicating a basis for selecting one of said at least one L2TP egress tunnel; selecting one of said at least one L2TP egress tunnel based on said egress tunnel selection criteria, said selecting further comprising: examining Type of Service (ToS) bits associated with said PPP session; determining available bandwidth for at least one L2TP egress tunnel to said remote domain; and selecting one of said one or more available L2TP egress tunnel based on said ToS bits and said available bandwidth; and forwarding said tunneled communication on the selected L2TP egress tunnel. 66. A program storage device readable by a machine, embodying a program of instructions executable by the machine to perform a method to dynamically map ingress to egress tunnels on a communication network, the method comprising: receiving a tunneled communication comprising a Point-to-Point Protocol (PPP) session from a subscriber using a first communication network, said first communication network connected to at least one communication network by at least one L2TP egress tunnel communicatively coupled to a remote domain; determining egress tunnel selection criteria for said tunneled communication, said egress tunnel selection criteria indicating a basis for selecting one of said at least one L2TP egress tunnel; selecting one of said at least one L2TP egress tunnel based on said egress tunnel selection criteria, said selecting further comprising: examining a Virtual Path Identifier (VPI)/Virtual Channel Identifier (VCI) pair associated with said PPP session; determining a class of service based on said VPI/VCI pair; determining available bandwidth for at least one egress tunnel to said remote domain; and selecting one of said one or more available egress tunnel based on said class of service and said available bandwidth; and forwarding said tunneled communication on the selected L2TP egress tunnel. 67. A program storage device readable by a machine, embodying a program of instructions executable by the machine to perform a method to dynamically map ingress to egress tunnels on a communication network, the method comprising: receiving a tunneled communication comprising a Point-to-Point Protocol (PPP) session from a subscriber using a first communication network, said first communication network connected to at least one communication network by at least one L2TP egress tunnel communicatively coupled to a remote domain; determining egress tunnel selection criteria for said tunneled communication, said egress tunnel selection criteria indicating a basis for selecting one of said at least one L2TP egress tunnel; selecting one of said at least one L2TP egress tunnel based on said egress tunnel selection criteria, said selecting further comprising selecting one of said one or more available L2TP egress tunnel to said remote domain having the smallest number of tunneled sessions such that tunneled sessions are distributed evenly among egress tunnels to said remote domain; and forwarding said tunneled communication on the selected L2TP egress tunnel. 68. An apparatus for dynamic ingress to egress tunnel mapping on a communication network, the apparatus comprising: means for receiving a tunneled communication comprising a Point-to-Point Protocol (PPP) session from a subscriber using a first communication network, said first communication network connected to at least one communication network by at least one L2TP egress tunnel communicatively coupled to a remote domain; means for determining egress tunnel selection criteria for said tunneled communication, said egress tunnel selection criteria indicating a basis for selecting one of said at least one L2TP egress tunnel; means for selecting one of said at least one L2TP egress tunnel based on said egress tunnel selection criteria, said means for selecting further comprising: means for examining Type of Service (ToS) bits associated with said PPP session; means for determining available bandwidth for at least one L2TP egress tunnel to said remote domain; and means for selecting one of said one or more available L2TP egress tunnel based on said ToS bits and said available bandwidth; and means for forwarding said tunneled communication on the selected L2TP egress tunnel. 69. An apparatus for dynamic ingress to egress tunnel mapping on a communication network, the apparatus comprising: means for receiving a tunneled communication comprising a Point-to-Point Protocol (PPP) session from a subscriber using a first communication network, said first communication network connected to at least one communication network by at least one L2TP egress tunnel communicatively coupled to a remote domain; means for determining egress tunnel selection criteria for said tunneled communication, said egress tunnel selection criteria indicating a basis for selecting one of said at least one L2TP egress tunnel; means for selecting one of said at least one L2TP egress tunnel based on said egress tunnel selection criteria, said means for selecting further comprising: means for examining a Virtual Path Identifier (VPI)/Virtual Channel Identifier (VCI) pair associated with said PPP session; means for determining a class of service based on said VPI/VCI pair; means for determining available bandwidth for at least one egress tunnel to said remote domain; and means for selecting one of said one or more available egress tunnel based on said class of service and said available bandwidth; and means for forwarding said tunneled communication on the selected L2TP egress tunnel. 70. An apparatus for dynamic ingress to egress tunnel mapping on a communication network, the apparatus comprising: means for receiving a tunneled communication comprising a Point-to-Point Protocol (PPP) session from a subscriber using a first communication network, said first communication network connected to at least one communication network by at least one L2TP egress tunnel communicatively coupled to a remote domain; means for determining egress tunnel selection criteria for said tunneled communication, said egress tunnel selection criteria indicating a basis for selecting one of said at least one L2TP egress tunnel; means for selecting one of said at least one L2TP egress tunnel based on said egress tunnel selection criteria, said selecting further comprising selecting one of said one or more available L2TP egress tunnel to said remote domain having the smallest number of tunneled sessions such that tunneled sessions are distributed evenly among egress tunnels to said remote domain; and means for forwarding said tunneled communication on the selected L2TP egress tunnel. 71. An apparatus for dynamic ingress to egress tunnel mapping on a communication network, the apparatus comprising: a receiving interface to receive a tunneled communication comprising a Point-to-Point Protocol (PPP) session from a subscriber using a first communication network, said first communication network connected to at least one communication network by at least one L2TP egress tunnel communicatively coupled to a remote domain; an egress tunnel selection criteria determiner to determine egress tunnel selection criteria for said tunneled communication, said egress tunnel selection criteria indicating a basis for selecting one of said at least one L2TP egress tunnel; an egress tunnel selector to select one of said at least one L2TP egress tunnel based on said egress tunnel selection criteria, said egress tunnel selector further configured to select one of said one or more available L2TP egress tunnel based upon ToS bits associated with said PPP session and upon available bandwidth for at least one L2TP egress tunnel to said remote domain; and a session forwarder to forward said tunneled communication on the selected L2TP egress tunnel. 72. An apparatus for dynamic ingress to egress tunnel mapping on a communication network, the apparatus comprising: a receiving interface to receive a tunneled communication comprising a Point-to-Point Protocol (PPP) session from a subscriber using a first communication network, said first communication network connected to at least one communication network by at least one L2TP egress tunnel communicatively coupled to a remote domain; an egress tunnel selection criteria determiner to determine egress tunnel selection criteria for said tunneled communication, said egress tunnel selection criteria indicating a basis for selecting one of said at least one L2TP egress tunnel; an egress tunnel selector to select one of said at least one L2TP egress tunnel based on said egress tunnel selection criteria, said egress tunnel selector further configured to select one of said one or more available L2TP egress tunnel based on a Virtual Path Identifier (VPI) /Virtual Channel Identifier (VCI) pair and upon the available bandwidth for at least one L2TP egress tunnel to said remote domain; and a session forwarder to forward said tunneled communication on the selected L2TP egress tunnel. 73. An apparatus for dynamic ingress to egress tunnel mapping on a communication network, the apparatus comprising: a receiving interface to receive a tunneled communication comprising a Point-to-Point Protocol (PPP) session from a subscriber using a first communication network, said first communication network connected to at least one communication network by at least one L2TP egress tunnel communicatively coupled to a remote domain; an egress tunnel selection criteria determiner to determine egress tunnel selection criteria for said tunneled communication, said egress tunnel selection criteria indicating a basis for selecting one of said at least one L2TP egress tunnel; an egress tunnel selector to select one of said at least one L2TP egress tunnel based on said egress tunnel selection criteria, said egress tunnel selector further configured to select one of said one or more available L2TP egress tunnel to said remote domain having the smallest number of tunneled sessions such that tunneled sessions are distributed evenly among L2TP egress tunnels to said remote domain; and a session forwarder to forward said tunneled communication on the selected L2TP egress tunnel.