on, leadership, and passion over the years to enable the Security Center of Excellence at AT&T. In particular, many thanks to Dan Solero, Johannes Jaskolski, Dan Sheleheda, Don Levy, Rick Huber, Rebecca Finnin, Shawn Hiemstra, Jason Godfrey, Craig Gentry, and Deon Ogle. REFERENCES 1. E. Amoroso. Rings around Things, AT&T Cyber Security Conference. 2. Seven Pillars of Carrier Grade Security in the AT&T Global IP/MPLS Network, AT&T, 2011. 3. AT&T Information and Network Security Customer Reference Guide, January, 2010, Version 4.1. https://www.nist.gov/sites/default/files/documents/it1/AT-T_APENDIX_A_-_ATTSecur Reference_Guide-1.pdf. 4. ECOMP (Enhanced Control, Orchestration, Management, and Policy) Architecture White Paper, AT&T Inc., 2016. 5. AT&T Project Astra, ISE® Northeast Project Award Winner 2015 and ISE® North America Project Award Winner 2015-Commercial Category. 6. M. Gillespie. 2015. Intel Trusted Execution Technology-A Primer, Intel Software Network: http:// software.intel.com. 7. T. Kim, M. Peinado, G. Mainar-Ruiz. StealthMEM: System-Level Protection against Cache-Based Side Channel Attacks in the Cloud, USENIX Association, August 8, 2012. Enterprise Networks Michael Satterlee and John Gibbons CONTENTS 10.1 Evolution of Network Complexity 10.2 Technology Innovations 10.2.1 Virtualization of Network Functions 10.2.2 Increasing Packet Processing Capabilities 10.2.3 Optimizing the Virtual Environment 10.2.3.1 Linux Bridge Approach 10.2.3.2 Virtual Switch (OVS)-Based Approach 10.2.3.3 SR-IOV-Based Approach 10.2.4 Optimizing VNF Performance 10.2.4.1 Processor Affinity 10.2.4.2 Intel DPDK and Related Technologies 10.3 Memory and Storage Resources 10.4 Network Management and Orchestration 10.4.1 Call Home Function 10.4.2 Data Modeling for Network Design 10.4.3 VF Deployment and Management 10.5 DPI and Visibility 10.6 Network Functions on Demand 10.7 Universal CPE 10.7.1 uCPE Phone Home Process 10.8 Conclusion References Today, virtualization is transforming the way traditional network functions are consumed 