Differentiated business services for “cloud-first” customers enabling SLA-assured, multi-cloud access. Enhances branch connectivity with application-aware traffic steering across multiple links. Value-added services can be applied by service providers to cloud-bound traffic, including SASE for zero-trust secured access, from any endpoint to any service. pCPE/uCPE can be used as customer edge clouds, hosting value-added virtual functions in containers/VMs enable