er versions of their prod- ucts. This allows them to provide the capability to gather and export, a deeper level of information as traffic traverses the equipment. However, in understanding the problem of better traffic visibility, the real value of DPI can only be realized with a complete solution whereby one has the ability to collect and analyze data and implement the appropriate control mechanisms to improve network performance under high traffic conditions. 10.6 NETWORK FUNCTIONS ON DEMAND The vision for next-generation network service is simple-provide the ability for enterprise admin- istrators to choose, deploy, and manage any network function, anywhere within their network. Based on this vision, AT&T started the Network Functions on Demand (NFoD) effort, which is illustrated in Figure 10.14. It is about having a library of virtual network functions that can be instantiated on the service provider's cloud platform or at customer premise locations. To implement this, the following three core principles are used in the NFoD platform: Vendor neutral interfaces for the NFoD platform-the library of network functions not only provides a choice of various network functions but also a choice of vendors for each function. ILLUSTRATIVE FUNCTIONS ILLUSTRATIVE FUNCTIONS Router Router Firewall Virtualized Wireless LAN Network WAN Acceleration E-mail Security, DDOS Load Balancer Functions Remote Access Universal CPE AT&T Integrated Cloud On the Premises In the Network FIGURE 10.14 Network functions on demand. Building the Network of the Future Choice of deployment models-network functions can be instantiated on compute resources within the Network Cloud (on AT&T Integrated Cloud [AIC]) or on premise using the universal CPE (uCPE) platform (discussed in the next section). Flexible management models-while the service provider takes on the responsibility for managing the underlying hardware and software platform that VNFs run on, in both the AIC or uCPE, customers can choose the VNF management model. They can outsource th