Dynamic functional partitioning for security pass-through virtual network function (vnf)

Abstract

A network device or system can operate to enable a security pass-through with a user equipment (UE) and further define various virtual functions between a physical access point (pAP) and a virtual AP (vAP) based on one or more communication link parameters (e.g., latency). The security pass-through can be an interface connection that passes through a computer premise equipment (CPE) or wireless residential gateway (GW) without the CPE or GW modifying or affecting the data traffic such as by authentication or security protocol. The SP network device can receive traffic data from a UE through or via the security pass-through from a UE of a community Wi-Fi network at a home, residence, or entity network.

1 . An apparatus, comprising:
 one or more processors, coupled to a memory that includes instructions to execute operations of the one or more processors, configured to:
 instantiate a virtual access point (vAP) of a network associated with a physical access point (pAP) of a customer premise equipment (CPE) based on a community wireless network to enable a security pass-through; 
 determine a configuration of a set of virtual network functions (VNFs) at the vAP from the pAP based on a communication parameter of a communication link to the CPE; and 
 provide the security pass-through transparently through the pAP from the vAP based on the configuration; and 
   a communication interface, coupled to the one or more processors, configured to receive or transmit communication transmissions.