Traffic shaping and end-to-end prioritization

1. A method, comprising:

receiving a first and a second Internet Protocol (IP) packet at a network node;

tagging the first and the second IP packet at the network node based on a type of traffic by adding an IP options header to each of the first and the second IP packet;

encrypting a payload of the first and the second IP packet at the network node;

forwarding the first and the second IP packet toward a gateway node;

filtering the first and the second IP packet at the gateway node based on the added IP options header by assigning each of the first and the second IP packet to one of a plurality of message queues, each of the plurality of message queues having a limited forwarding throughput; and

forwarding the first and the second IP packet from the gateway node toward a mobile operator core network to be subsequently decrypted,

thereby providing packet flow filtering based on IP header and traffic type, and using the added IP options header to provide traffic shaping independent from a priority assigned by a source node where the packet originated and independent of the encryption status of the packet.

2. The method of claim 1 , further comprising receiving a third IP packet from a second network node; and filtering the third IP packet at the gateway node.

3. The method of claim 1 , further comprising receiving the first IP packet from a cellular access network and the second IP packet from a wireless local area network access network.

4. The method of claim 1 , further comprising receiving the first and the second IP packet from a plurality of user devices on at least two of a Long Term Evolution (LTE) eNodeB, a Universal Mobile Telecommunications System (UMTS) nodeB, a non-UMTS 3G base station, a Wi-Fi access point, or an IP-based telephony device.

5. The method of claim 1 , further comprising subsequently removing the IP options header at the gateway node.

6. The method of claim 1 , further comprising tagging based on the type of traffic for each of the first and the second IP packets and also based on at least one of, for each of the first and the second IP packets, a differentiated services code point (DSCP) value, an IP type of service (ToS) value, or a quality of service class identifier (QCI).

7. The method of claim 1 , further comprising evaluating a differentiated services code point (DSCP) value or IP type of service (ToS) value of each of the first and the second IP packets; evaluating the type of traffic for each of the first and second IP packets; and ignoring the DSCP value or IP ToS value for purposes of tagging.

8. The method of claim 1 , further comprising receiving the first and the second IP packets at a second network node and forwarding the first and the second IP packets toward the gateway node without removing the added IP options headers.

9. The method of claim 1 , wherein the IP options header is an IPv4 option or an IPv6 extension header.

10. The method of claim 1 , wherein the plurality of message queues are each logical queues within an IP processing layer at the gateway node, and wherein messages in the message queues are output onto a network link based on a desired traffic shaping policy.

11. A gateway node, comprising:

an inbound interface for receiving data from a network node, the network node configured as a base station for providing wireless access to mobile devices;

an outbound interface for sending data toward a mobile operator core network; and

a processor configured to:

receive a first and a second Internet Protocol (IP) packet at a network node;

tag the first and the second IP packet at the network node based on a type of traffic by adding an IP options header to each of the first and the second IP packet;

encrypt a payload of the first and the second IP packet at the network node;

forward the first and the second IP packet toward a gateway node;

filter the first and the second IP packet at the gateway node based on the added IP options header by assigning each of the first and the second IP packet to one of a plurality of message queues, each of the plurality of message queues have a limited forwarding throughput; and

forward the first and the second IP packet from the gateway node toward a mobile operator core network, and using the added IP options header to provide traffic shaping independent from a priority assigned by a source node where the packet originated.

12. A non-transitory computer-readable medium comprising instructions which, when executed by a processor in a gateway node, cause the gateway node to perform steps comprising:

receiving a first and a second Internet Protocol (IP) packet from a network node, the first and the second IP packet previously tagged at the network node based on a type of traffic by adding an IP options header to each of the first and the second IP packet;

encrypting a payload of the first and the second IP packet at the network node;

filtering the first and the second IP packet at the gateway node based on the added IP options header by assigning each of the first and the second IP packet to one of a plurality of message queues, each of the plurality of message queues have a limited forwarding throughput; and

forwarding the first and the second IP packet from the gateway node toward a mobile operator core network, and using the added IP options header to provide traffic shaping independent from a priority assigned by a source node where the packet originated.

13. A non-transitory computer-readable medium comprising instructions which, when executed by a processor in a network node, cause the network node to perform steps comprising:

receiving a first and a second Internet Protocol (IP) packet at the network node;

tagging the first and the second IP packet at the network node based on a type of traffic by adding an IP options header to each of the first and the second IP packet;

encrypt a payload of the first and the second IP packet at the network node; and

forwarding the first and the second IP packet toward a gateway node for further filtering based on the added IP options header by assigning each of the first and the second IP packet to one of a plurality of message queues, each of the plurality of message queues have a limited forwarding throughput, and for forwarding toward a mobile operator core network, and using the added IP options header to provide traffic shaping independent from a priority assigned by a source node where the packet originated.