Abstract: Concepts and technologies disclosed herein are directed to zero trust network access (“ZTNA”) and virtual private network (“VPN”) client offloading. According to one aspect, a user device can establish a private network session to access a private network resource in a private network. The user device can receive a request to offload the private network session from the user device to a secure router. In response to the request, the user device can offload the private network session to the secure router.

Abstract: Aspects of the subject disclosure may include, for example, determining a first physical location serviceable by a private access network and an indication of physical location of a user. The first physical location can be compared to the second physical location to obtain a first comparison result. Activation of the wireless access network can be controlled according to the comparison result between an active state in which the wireless access network is available for network service at the first physical location and an inactive state in which the wireless access network is unavailable for service at the first physical location. Other embodiments are disclosed.

Abstract: Concepts and technologies disclosed herein are directed to zero trust network access (“ZTNA”) and virtual private network (“VPN”) client offloading. According to one aspect, a user device can establish a private network session to access a private network resource in a private network. The user device can receive a request to offload the private network session from the user device to a secure router. In response to the request, the user device can offload the private network session to the secure router.

Abstract: Aspects of the subject disclosure may include, for example, obtaining first, second, and third characterizing information that is indicative of respective first, second, and third characteristics of first, second, and third end-users; obtaining first and second expectation information, the first expectation information being indicative of first network node endpoints that are expected to be reachable by first end-user equipment associated with the first end-user, and the second expectation information being indicative of second network node endpoints that are expected to be reachable by second end-user equipment associated with the second end-user; automatically determining, based upon the characterizing information, with which of the first characteristic or the second characteristic the third characteristic more closely matches; in a first case that the first characteristic more closely matches the third characteristic, automatically assigning the first network node endpoints as expected to be reachable by t

Abstract: Aspects of the subject disclosure may include, for example, obtaining first, second, and third characterizing information that is indicative of respective first, second, and third characteristics of first, second, and third end-users; obtaining first and second expectation information, the first expectation information being indicative of first network node endpoints that are expected to be reachable by first end-user equipment associated with the first end-user, and the second expectation information being indicative of second network node endpoints that are expected to be reachable by second end-user equipment associated with the second end-user; automatically determining, based upon the characterizing information, with which of the first characteristic or the second characteristic the third characteristic more closely matches; in a first case that the first characteristic more closely matches the third characteristic, automatically assigning the first network node endpoints as expected to be reachable by t

Abstract: Architectures and techniques are presented that provide an improved mechanism for a subscriber entity to report to a network provider a network issue that affects the performance of an application that uses a service provided by the network provider. The improved mechanism can enable fine granularity with respect to the network issue by identifying the issue on a per-session basis. In response to feedback data that is reported by the subscriber entity, the network provider can perform self-healing or other upgrade techniques to rapidly remedy the network issue.

Abstract: Architectures and techniques are presented that provide an improved mechanism for a subscriber entity to report to a network provider a network issue that affects the performance of an application that uses a service provided by the network provider. The improved mechanism can enable fine granularity with respect to the network issue by identifying the issue on a per-session basis. In response to feedback data that is reported by the subscriber entity, the network provider can perform self-healing or other upgrade techniques to rapidly remedy the network issue.

Abstract: Concepts and technologies disclosed herein are directed to zero trust network access (“ZTNA”) and virtual private network (“VPN”) client offloading. According to one aspect, a user device can establish a private network session to access a private network resource in a private network. The user device can receive a request to offload the private network session from the user device to a secure router. In response to the request, the user device can offload the private network session to the secure router.

Abstract: Architectures and techniques are presented that provide an improved mechanism for a subscriber entity to report to a network provider a network issue that affects the performance of an application that uses a service provided by the network provider. The improved mechanism can enable fine granularity with respect to the network issue by identifying the issue on a per-session basis. In response to feedback data that is reported by the subscriber entity, the network provider can perform self-healing or other upgrade techniques to rapidly remedy the network issue.

Abstract: Architectures and techniques are presented that provide an improved mechanism for a subscriber entity to report to a network provider a network issue that affects the performance of an application that uses a service provided by the network provider. The improved mechanism can enable fine granularity with respect to the network issue by identifying the issue on a per-session basis. In response to feedback data that is reported by the subscriber entity, the network provider can perform self-healing or other upgrade techniques to rapidly remedy the network issue.

Abstract: Architectures and techniques are presented that record bi-directional traffic flows of a network such as a software defined network, that result from execution of a specified application. This recorded traffic data can be generated prior to a network change and can be anonymized in various ways to maintain security and privacy. After applying the network change, the traffic data can be replayed to test performance of the specified application in a manner that realistically represents actual use of the specified application.

Abstract: Devices, computer-readable media, and methods for routing traffic of a network service via a virtual private network that is configured in accordance with a virtual private network configuration preference of an identified user are described. A method may determine a network service that an endpoint device is attempting to access and may detect an identity of a user of the endpoint device. The processing system may obtain a plurality of virtual private network configuration preferences of the user, each of the plurality of virtual private network configuration preferences matching a virtual private network configuration preference with one or more of a plurality of network services, and route traffic of the endpoint device for the network service via a virtual private network that is configured in accordance with a virtual private network configuration preference of the plurality of virtual private network configuration preferences.

Abstract: Devices, computer-readable media, and methods for routing traffic of a network service via a virtual private network that is configured in accordance with a virtual private network configuration preference of an identified user are described. A method may determine a network service that an endpoint device is attempting to access and may detect an identity of a user of the endpoint device. The processing system may obtain a plurality of virtual private network configuration preferences of the user, each of the plurality of virtual private network configuration preferences matching a virtual private network configuration preference with one or more of a plurality of network services, and route traffic of the endpoint device for the network service via a virtual private network that is configured in accordance with a virtual private network configuration preference of the plurality of virtual private network configuration preferences.

Abstract: Devices, computer-readable media, and methods for routing traffic of a network service via a virtual private network that is configured in accordance with a virtual private network configuration preference of an identified user are described. A method may determine a network service that an endpoint device is attempting to access and may detect an identity of a user of the endpoint device. The processing system may obtain a plurality of virtual private network configuration preferences of the user, each of the plurality of virtual private network configuration preferences matching a virtual private network configuration preference with one or more of a plurality of network services, and route traffic of the endpoint device for the network service via a virtual private network that is configured in accordance with a virtual private network configuration preference of the plurality of virtual private network configuration preferences.

Abstract: Devices, computer-readable media, and methods for routing traffic of a network service via a virtual private network that is configured in accordance with a virtual private network configuration preference of an identified user are described. A method may determine a network service that an endpoint device is attempting to access and may detect an identity of a user of the endpoint device. The processing system may obtain a plurality of virtual private network configuration preferences of the user, each of the plurality of virtual private network configuration preferences matching a virtual private network configuration preference with one or more of a plurality of network services, and route traffic of the endpoint device for the network service via a virtual private network that is configured in accordance with a virtual private network configuration preference of the plurality of virtual private network configuration preferences.

Abstract: Network function may be dissected and the common functions abstracted into inspection network function as the first hop, for example, of a service function chain. The inspection network function then inserts a value into the network service header (NSH) which may be used for the rest of the network functions of the service function chain.

Abstract: Concepts and technologies disclosed herein are directed to virtual private network (“VPN”) resiliency over multiple transports. According to one aspect, a customer premises equipment can select, from a transport preference database, a transport from a plurality of transports available to support a VPN tunnel. The transport selected is associated with a highest priority value of the plurality of transports in the transport preference database. The customer premises equipment can initiate setup of the VPN tunnel through the transport and can determine whether setup of the VPN tunnel was successful. If setup was not successful, the customer premises equipment can select a further transport from the plurality of transports available to support the VPN tunnel. Additional details are disclosed herein.

Abstract: Concepts and technologies disclosed herein are directed to virtual private network (“VPN”) resiliency over multiple transports. According to one aspect, a customer premises equipment can select, from a transport preference database, a transport from a plurality of transports available to support a VPN tunnel. The transport selected is associated with a highest priority value of the plurality of transports in the transport preference database. The customer premises equipment can initiate setup of the VPN tunnel through the transport and can determine whether setup of the VPN tunnel was successful. If setup was not successful, the customer premises equipment can select a further transport from the plurality of transports available to support the VPN tunnel. Additional details are disclosed herein.

Abstract: Methods and apparatus to dynamically control connectivity within VPNs are disclosed. A disclosed example method includes a route server for storing an indication in an entry for a first pair of provider edge routers in a virtual private network (intra-VPN) connectivity database, the intra-VPN connectivity database including entries for a plurality of pairs of provider edge routers. The indication to define an additional connectivity for the first pair of provider edge routers beyond connectivity defined in a virtual private network routing and forwarding table associated with a first provider edge router of the first pair of provider edge routers. The first pair of provider edge routers including a second provider edge router to which the first provider edge router is to be communicatively coupled.

Abstract: Methods and apparatus to dynamically control connectivity within VPNs are disclosed. A disclosed example method includes a route server for storing an indication in an entry for a first pair of provider edge routers in a virtual private network (intra-VPN) connectivity database, the intra-VPN connectivity database including entries for a plurality of pairs of provider edge routers. The indication to define an additional connectivity for the first pair of provider edge routers beyond connectivity defined in a virtual private network routing and forwarding table associated with a first provider edge router of the first pair of provider edge routers. The first pair of provider edge routers including a second provider edge router to which the first provider edge router is to be communicatively coupled.