Access control for signaling traffic between network functions deployed on edge and in the cloud

An apparatus comprising:

• a memory;
• a network interface configured to enable network communications;
• and
• a processor, wherein the processor is configured to perform operations comprising:
• obtaining, by a cloud proxy service, a request originating from a source network function deployed in an on-premise network and destined for a destination network function deployed in a cloud network;
• determining whether the source network function is associated with an enterprise network based on a unique identifier extracted from the request, wherein the unique identifier is indicative of a particular enterprise network among a plurality of enterprise networks;
• providing the request to the destination network function based on determining that the source network function is associated with the particular enterprise network;
• and
• blocking the request from propagating to the destination network function based on determining that the source network function is not associated with the particular enterprise network.

One or more non-transitory computer readable storage media encoded with instructions that, when executed by a processor, cause the processor to execute a method comprising:

• obtaining, by a cloud proxy service, a request originating from a source network function deployed in an on-premise network and destined for a destination network function deployed in a cloud network;
• determining whether the source network function is associated with an enterprise network based on a unique identifier extracted from the request, wherein the unique identifier is indicative of a particular enterprise network among a plurality of enterprise networks;
• providing the request to the destination network function based on determining that the source network function is associated with the particular enterprise network;
• and
• blocking the request from propagating to the destination network function based on determining that the source network function is not associated with the particular enterprise network.