A method of processing network traffic sent on a General Packet Radio Service Tunnelling Protocol, GTP, tunnel or a Proxy Mobile Internet Protocol, PMIP, tunnel between a first tunnel node and a second tunnel node in a communication network, the communication network comprising a Traffic Offload Function, TOF, including a redirector component and an enhanced Network Address Translation, eNAT, component (10, 10') being in communication with each other, the method comprising the steps carried out by the redirector component of - obtaining an uplink data packet from an uplink tunnel from the first tunnel node to the second tunnel node, the uplink data packet comprising a first network address associated with the first tunnel node, a second network address associated with the second tunnel node, a first identifier associated with the uplink tunnel, an internal network address, and an internal port number; - obtaining a second identifier associated with a downlink tunnel from the second tunnel node to the first tunnel node, wherein the downlink tunnel is related to the uplink tunnel; - selecting the eNAT (10, 10') component from a plurality of eNAT components; - consulting a database about decision criteria whether the data packet is to be offloaded from the tunnel; - if the data packet is to be offloaded from the tunnel, sending the data packet to the eNAT (10, 10') component; and - if the data packet is not to be offloaded from the tunnel, forwarding the unmodified data packet towards its IP destination, which is external with regard to the eNAT component (10, 10'), the method comprising the steps carried out by the eNAT component (10, 10') of - obtaining the uplink data packet from the redirector component; - obtaining the second identifier from the redirector component; - checking (66, 68) based on the second network address and the first identifier whether a database entry comprising the second network address and the first identifier exists in a database; - updating the database in case the checked database entry does not exist in the database, wherein the updating comprises one of sending a database entry to the database and updating a database entry in the database, the database entry comprising an association between a first data field and a second data field, the first data field comprising the second network address and the first identifier, and the second data field comprising the first network address and the second identifier; and - manipulating (76, 78, 80) the uplink data packet, wherein the manipulating comprises replacing the internal network address with an external network address and replacing the internal port number with an external port number, wherein the internal and external network addresses and port numbers are network addresses and port numbers that are internal and external with regard to the eNAT component (10, 10'), respectively. - obtaining an uplink data packet from an uplink tunnel from the first tunnel node to the second tunnel node, the uplink data packet comprising a first network address associated with the first tunnel node, a second network address associated with the second tunnel node, a first identifier associated with the uplink tunnel, an internal network address, and an internal port number; - obtaining a second identifier associated with a downlink tunnel from the second tunnel node to the first tunnel node, wherein the downlink tunnel is related to the uplink tunnel; - selecting the eNAT (10, 10') component from a plurality of eNAT components; - consulting a database about decision criteria whether the data packet is to be offloaded from the tunnel; - if the data packet is to be offloaded from the tunnel, sending the data packet to the eNAT (10, 10') component; and - if the data packet is not to be offloaded from the tunnel, forwarding the unmodified data packet towards its IP destination, which is external with regard to the eNAT component (10, 10'), - obtaining the uplink data packet from the redirector component; - obtaining the second identifier from the redirector component; - checking (66, 68) based on the second network address and the first identifier whether a database entry comprising the second network address and the first identifier exists in a database; - updating the database in case the checked database entry does not exist in the database, wherein the updating comprises one of sending a database entry to the database and updating a database entry in the database, the database entry comprising an association between a first data field and a second data field, the first data field comprising the second network address and the first identifier, and the second data field comprising the first network address and the second identifier; and - manipulating (76, 78, 80) the uplink data packet, wherein the manipulating comprises replacing the internal network address with an external network address and replacing the internal port number with an external port number, wherein the internal and external network addresses and port numbers are network addresses and port numbers that are internal and external with regard to the eNAT component (10, 10'), respectively.