Isolating services across a single physical network interface

One or more computer storage media storing computer executable instructions which, when executed by a gateway that includes an outbound port by which the gateway is connected to one or more switches of a network and an inbound port to which a plurality of network connectable devices at a user's premises are connected, each of the plurality of network connectable devices providing access to one or more services at the user's premises, implement a method for modifying frames received at the inbound port of the gateway to include a service-specific identifier, the method comprising:

• maintaining, at the gateway, an ID table that includes entries that associate IDs with matching criteria, the ID table including a first entry that associates a first ID with a first set of criteria and a second entry that associates a second ID with a second set of criteria;
• receiving, via the inbound port of the gateway, a first frame from a first network connectable device of the plurality of network connectable devices at the user's premises that are connected to the inbound port of the gateway, the first network connectable device providing access to a first service at the user's premises;
• evaluating contents of the first frame;
• comparing the contents of the first frame against the entries of the ID table;
• upon determining that the contents of the first frame match the first set of criteria, modifying the first frame to include the first ID which is specific to the first service;
• forwarding the modified first frame to the one or more switches of the network;
• receiving, via the inbound port of the gateway, a second frame from a second network connectable device of the plurality of network connectable devices at the user's premises that are connected to the inbound port of the gateway, the second network connectable device providing access to a second service at the user's premises;
• evaluating contents of the second frame;
• comparing the contents of the second frame against the entries of the ID table;
• upon determining that the contents of the second frame match the second set of criteria, modifying the second frame to include the second ID which is specific to the second service;
• and
• forwarding the modified second frame to the one or more switches of the network.

A software-defined network architecture comprising:

• a gateway that includes an outbound port by which the gateway is connected to one or more switches of a network and an inbound port to which a plurality of network connectable devices at a user's premises are connected, each of the plurality of network connectable devices providing access to one or more services at the user's premises;
• and
• an edge switch that includes a first port and a second port, the first port connecting a first service provider network to the one or more switches of the network, the second port connecting a second service provider network to the one or more switches of the network;
• wherein the gateway is configured to perform the following method for modifying frames received at the inbound port to include a service-specific identifier:
• maintaining an ID table that includes entries that associate IDs with matching criteria, the ID table including a first entry that associates a first ID with a first set of criteria and a second entry that associates a second ID with a second set of criteria;
• receiving, via the inbound port of the gateway, a first frame from a first network connectable device of the plurality of network connectable devices at the user's premises that are connected to the inbound port of the networking device, the first network connectable device providing access to a first service at the user's premises;
• evaluating contents of the first frame;
• comparing the contents of the first frame against the entries of the ID table;
• upon determining that the contents of the first frame match the first set of criteria, modifying the first frame to include the first ID, the first ID being associated with the first port of the edge switch;
• forwarding the modified first frame to the one or more switches of the network;
• receiving via the inbound port of the networking device, a second frame from a second network connectable device of the plurality of network connectable devices at the user's premises that are connected to the inbound port of the networking device, the second network connectable device providing access to a second service at the user's premises;
• evaluating contents of the second frame;
• comparing the contents of the second frame against the entries of the ID table;
• upon determining that the contents of the second frame match the second set of criteria, modifying the second frame to include the second ID, the second ID being associated with the second port of the edge switch;
• and
• forwarding the modified second frame to the one or more switches of the network.