Systems and methods for implementing a layer two proxy for wireless network data

A method, comprising:

• receiving, at a device, via a tunnel, device information and wireless network information from at least one mobile device over a layer three network connection, wherein the layer three network connection comprises a cellular network connection;
• based at least in part on receiving the device information and the wireless network information, generating a source address and a destination address for the at least one mobile device, the source address and the destination address corresponding to the device information and the wireless network information, wherein the source address is a source medium access control (MAC) address and the destination address is a destination MAC address;
• assigning a unique MAC address pair for packet encapsulation, the unique MAC address pair comprising the source address and the destination address;
• receiving, via the tunnel, an Internet protocol security (IPSec) packet from the at least one mobile device;
• encapsulating the IPSec packet into an uplink 802.3 MAC frame using the unique MAC address pair;
• and
• causing the device to send the uplink 802.3 MAC frame to an uplink layer two service function chain (SFC) infrastructure.

One or more non-transitory machine-accessible media having stored thereon instructions that, when executed by one or more machines, cause the one or more machines to perform operations comprising:

• receiving, at a device, a downlink 802.3 medium access control (MAC) frame from an uplink layer two service function chain (SFC) infrastructure, the downlink 802.3 MAC frame comprising an Internet Protocol security (IPSec) packet encapsulated in the downlink 802.3 MAC frame, wherein the downlink MAC frame comprises a unique MAC address pair used to encapsulate the IPSec packet in the downlink 802.3 MAC frame, the unique MAC address pair comprising a source MAC address and a destination MAC address;
• removing the IPSec packet from the downlink 802.3 MAC frame;
• and
• causing to send the IPSec packet to one or more mobile devices via a tunnel, wherein causing to send the IPSec packet to the one or more mobile devices via the tunnel comprises causing to send the IPSec packet over a layer three network connection with the one or more mobile devices via the tunnel.