Applying network policies to devices based on their current access network

A non-transitory, computer-readable medium storing instructions operable when executed to cause at least one processor to perform operations comprising:

• receiving, by a server connected to a particular network, a message from a device separate from the server over the particular network, the message associated with a source address;
• determining, by the server, a current access network for the device based at least in part on the source address, wherein the current access network is external to the particular network, and the message received from the device on the particular network is transmitted by the device over the current access network;
• and
• applying a network policy for the particular network to the device based on the determined current access network including assigning a maximum bandwidth usage parameter to the device that defines a maximum bandwidth usage permitted for the device.

A system for applying network policies to devices based on their current access network comprising:

• memory for storing data;
• and
• one or more processors operable to perform operations comprising:
• receiving, by a server connected to a particular network, a message from a device separate from the server over the particular network, the message associated with a source address;
• determining, by the server, a current access network for the device based at least in part on the source address, wherein the current access network is external to the particular network, and the message received from the device on the particular network is transmitted by the device over the current access network;
• and
• applying a network policy for the particular network to the device based on the determined current access network including assigning a maximum bandwidth usage parameter to the device that defines a maximum bandwidth usage permitted for the device.

A computer-implemented method executed by one or more processors for applying network policies to devices based on their current access network, the method comprising:

• receiving, by a server of a distributed computing system that is at least partially hosted on a particular access network, a plurality of messages from a plurality of devices over a network, each of the messages associated with a corresponding source address;
• determining, by the server for each device of the plurality of devices, a current access network for each device based at least in part on each device's corresponding source address, devices of a subset of the plurality of devices being determined to have a current access network other than the particular access network;
• applying, to the devices of the subset, a first network policy based on the determining, the first network policy defining a first encryption requirement;
• and
• applying, to the devices of the plurality of devices that are not of the subset, a second network policy based on the determining, the second network policy defining a second encryption requirement, wherein the first network policy and the second network policy each assign a maximum bandwidth usage parameter.

A non-transitory, computer-readable medium storing instructions operable when executed to cause at least one processor to perform operations comprising:

• receiving, by a server of a distributed computing system that is at least partially hosted on a particular access network, a plurality of messages from a plurality of devices over a network, each of the messages associated with a corresponding source address;
• determining, by the server for each device of the plurality of devices, a current access network for each device based at least in part on each device's corresponding source address, devices of a subset of the plurality of devices being determined to have a current access network other than the particular access network;
• applying, to the devices of the subset, a first network policy based on the determining, the first network policy defining a first encryption requirement;
• and
• applying, to the devices of the plurality of devices that are not of the subset, a second network policy based on the determining, the second network policy defining a second encryption requirement, wherein the first network policy and the second network policy each assign a maximum bandwidth usage parameter.

A system for applying network policies to devices based on their current access network comprising:

• memory for storing data;
• and
• one or more processors operable to perform operations comprising:
• receiving, by a server of a distributed computing system that is at least partially hosted on a particular access network, a plurality of messages from a plurality of devices over a network, each of the messages associated with a corresponding source address;
• determining, by the server for each device of the plurality of devices, a current access network for each device based at least in part on each device's corresponding source address, devices of a subset of the plurality of devices being determined to have a current access network other than the particular access network;
• applying, to the devices of the subset, a first network policy based on the determining, the first network policy defining a first encryption requirement;
• and
• applying, to the devices of the plurality of devices that are not of the subset, a second network policy based on the determining, the second network policy defining a second encryption requirement, wherein the first network policy and the second network policy each assign a maximum bandwidth usage parameter.