ility services to customers. By deploying a UDR, many network functions separate state into a select set of virtual functions, thereby allowing other network functions to reduce state-based processing. This enables these functions to scale independently, which improves efficiency, speed of recovery, and scalability. 14.4.2.2.6 HTTP-Proxy VNF Components The HTTP-proxy provides the following features: HTTP inline optimization for transparent traffic Addressable traffic (MMS) Subscriber-based opt-in/out in HTTP-proxy Information forwarding/header enrichment TCP proxy traffic (TCP tunnel) for transparent traffic HTTP tunnel for transparent traffic Simple and secure client-based service entitlement Security enhancement with HTTP-proxy trusted and nontrusted IP addresses Building the Network of the Future IPv4 and IPv6 user plane support Centralized Multi Service Administrator (MSA) management Sponsored data The HTTP-proxy consists of management nodes, administrative and monitoring nodes, traffic servers, distribution servers, data cache servers, and access servers. The design allows for a small number of management nodes to handle multiple groups of traffic, distribution, access, data cache, administrative, and monitoring servers. All these HTTP-proxy components scale independently to achieve optimal use of cloud resources. 14.4.2.3 Network Design Cloud infrastructures use an OpenStack Neutron plugin to enable L3 overlay networks via a distrib- uted virtual router deployed in the hypervisor OS. A corresponding local SDN controller is used to create network service instances and implement service chaining features to support scaling (scale- out and scale-in) of network functions such as virtual firewalls, load balancers, DNS, IPs, etc. This is discussed in Chapter 4. 14.4.2.3.1 Overlay Network Design Virtual networks are logical constructs implemented on top of the physical networks. Virtual networks replace VLAN (virtual local area network)-based isolation and provide multitenancy. Each tenant or an application can ha