Virtual network function enabled secure communication systems and methods

1. A method for enabling secure communication comprising:

providing a first virtual network function (“VNF”) on a first edge cloud at a first network location;

providing a second VNF on a second edge cloud at a second network location;

constructing a first Layer 3 virtual private network (“L3 VPN”) tunnel by the first VNF and the second VNF between the first network location and the second network location;

connecting a first local area network (“LAN”) at the first network location and a second LAN at the second network location by the first L3 VPN tunnel;

transmitting via the first L3 VPN tunnel via Multi-Protocol Label Switching (“MPLS”) a first plurality of Layer 2 (“L2”) packets encapsulated by first outer headers and first provider labels;

providing a third VNF on a third edge cloud at a third network location;

constructing a second L3 VPN tunnel by the first VNF and the third VNF between the first network location and the third network location;

transmitting via the second L3 VPN tunnel via MPLS a second plurality of L2 packets encapsulated by second outer headers and second provider labels;

constructing a third L3 VPN tunnel by the second VNF and the third VNF between the second network location and the third network location; and

transmitting via the third L3 VPN tunnel via MPLS a third plurality of L2 packets encapsulated by third outer headers and third provider labels.

2. The method of claim 1 , further comprising:

receiving first data from a first user at the first network location;

transmitting the first data to the second network location via the first L3 VPN tunnel;

constructing a fourth L3 VPN tunnel by the first VNF and the second VNF between the first network location and the second network location;

receiving second data from a second user at the first network location; and

transmitting the second data to the second network location via the fourth L3 VPN tunnel.

3. The method of claim 1 , further comprising:

detecting by the first VNF an attack on the first LAN; and

blocking by the first VNF the attack on the first LAN.

4. The method of claim 1 , further comprising:

monitoring by the first VNF network traffic that terminates on the first edge cloud; and

enabling by the first VNF a security measure against the network traffic based on the monitoring.

5. The method of claim 1 , further comprising:

monitoring by the first VNF network traffic that terminates on the first LAN; and

enabling by the first VNF a security measure against the network traffic based on the monitoring.

6. The method of claim 1 , further comprising implementing the first edge cloud on a universal customer premises equipment (“uCPE”).

7. The method of claim 1 , further comprising implementing the first edge cloud on a virtual customer premises equipment (“vCPE”).

8. The method of claim 1 , further comprising encrypting by the first VNF a communication via the first L3 VPN tunnel.

9. The method of claim 1 , further comprising:

receiving by the first VNF network traffic from the first LAN; and

masquerading the network traffic by the first VNF via the first L3 VPN tunnel.

10. The method of claim 1 , further comprising:

dynamically configuring the first VNF at the first network location at a first physical location; and

dynamically configuring the second VNF at the second network location at a second physical location.

11. The method of claim 1 , further comprising:

enabling a user interface;

receiving an instruction from a user to enable the first VNF at the first network location via the user interface, and providing the first VNF on the first edge cloud at the first network location responsive to receiving the instruction from the user to enable the first VNF at the first network location;

receiving an instruction from the user to disable the first VNF at the first network location via the user interface; and

disabling the first VNF at the first network location via the user interface responsive to the instruction from the user to disable the first VNF at the first network location.

12. The method of claim 1 , further comprising:

enabling a user interface;

receiving an instruction from a user to enable the first VNF at the first network location via the user interface, and providing the first VNF on the first edge cloud at the first network location responsive to receiving the instruction from the user to enable the first VNF at the first network location; and

receiving an instruction from the user to enable the second VNF at the second network location via the user interface, and providing the second VNF on the second edge cloud at the second network location responsive to receiving the instruction from the user to enable the second VNF at the second network location.

13. The method of claim 1 , further comprising:

enabling a user interface;

receiving an instruction from a user to enable the second VNF at the second network location via the user interface, and providing the second VNF on the second edge cloud at the second network location responsive to receiving the instruction from the user to enable the second VNF at the second network location;

receiving an instruction from the user to disable the second VNF at the second network location via the user interface; and

disabling the second VNF at the second network location via the user interface responsive to the instruction from the user to disable the second VNF at the second network location.

14. The method of claim 13 , the instruction from the user to enable the second VNF at the second network location comprising a one-click instruction from the user via the user interface.

15. The method of claim 13 , the instruction from the user to disable the second VNF at the second network location comprising a one-click instruction from the user via the user interface.

16. The method of claim 1 , further comprising transmitting the first plurality of L2 packets from the first network location to the second network location via the first L3 VPN tunnel.

17. The method of claim 16 , further comprising encapsulating the first plurality of L2 packets by the first outer headers and the first provider labels.

18. The method of claim 1 , further comprising:

instantiating a first network service to initiate the first VNF on the first edge cloud at the first network location;

establishing Layer 3 virtual private network (“L3 VPN”) routes by the first VNF between the first VNF and a first provider edge device for distribution by a provider via a border gateway protocol (“BGP”); and

establishing the first L3 VPN tunnel by the first VNF between the first VNF and a first routing device at the first network location.

19. The method of claim 18 , wherein establishing the first L3 VPN tunnel comprises updating a plurality of internet protocol (“IP”) addresses, the method further comprising updating a routing table of the first routing device to reflect the updated plurality of IP addresses.

20. The method of claim 19 , the plurality of IP addresses comprising a series of IP address families comprising at least one of IPv4, IPv6, IP multicast, or VPNv4.