Universal Customer Premises Equipment (uCPE) is a general-purpose server, usually a small x86 or similar computer, installed at a customer site to run network functions as software instead of on separate dedicated appliances. A single uCPE might run a router, an SD-WAN edge, a firewall and a WAN optimizer as virtual network functions, all managed remotely. It is the branch-office application of network function virtualization (NFV), and it is most often deployed by carriers and managed service providers as part of a managed network or security service.
At a glance
- uCPE is one general-purpose box at a site that runs several network functions as software.
- It replaces a stack of single-purpose devices, such as a router, firewall and SD-WAN appliance, with one platform.
- Functions can be added, changed or upgraded remotely, often without a site visit.
- Concentrating functions on one device creates a single point of failure unless the site has a spare or a second unit.
- It is usually delivered as part of a managed service, though some enterprises run their own.
What problem it solves
Branch networks used to accumulate hardware. A typical site might have a carrier router, a firewall, an SD-WAN or WAN optimization appliance and sometimes a separate device for wireless control or security inspection. Each box needed its own power, rack space, support contract and refresh cycle, and adding a new function meant shipping new hardware and often sending a technician.
uCPE turns those boxes into software. The hardware is generic, and the functions run on it as virtual machines or containers. A provider or IT team can add a firewall, move to a different SD-WAN vendor or resize a function by changing software remotely. For organizations with many sites, that can shorten rollouts and cut the number of devices to buy, ship and maintain.
How it works
Hardware. The uCPE itself is a compact server with a processor, memory, storage and several network ports. Sizing depends on how many functions it will run and how much traffic each needs to handle, especially if traffic is encrypted or inspected.
Hosting layer. A hypervisor or container platform runs on the hardware and hosts each network function as a separate virtual machine or container. Virtual switching connects the functions to each other and to the physical ports, so traffic can pass through a firewall before reaching the SD-WAN function, for example.
Virtual network functions. These are the software versions of routers, firewalls, SD-WAN edges, WAN optimizers and similar tools, sometimes from different vendors on the same box. Not every vendor supports every uCPE platform, so compatibility needs checking.
Orchestration and provisioning. A central management system loads software, pushes configuration and monitors health. Many deployments use zero-touch provisioning, where the device is shipped to the site, plugged in, and downloads its configuration automatically.
Many providers include uCPE in their managed offerings; see our Managed Network Services solution page.
When it matters for buyers
- Branch hardware refresh. When several branch devices reach end of life at once, consolidating onto uCPE is an option worth pricing.
- Rolling out SD-WAN or security. A managed SD-WAN or security service may arrive on uCPE, which affects what else you can run there later.
- Changing vendors. uCPE can make it easier to change firewall or SD-WAN software without replacing hardware, if the new vendor supports the platform.
- Many small sites. Fewer boxes and remote changes save the most where truck rolls are expensive or sites lack IT staff.
Questions to ask vendors
- Which network functions will run on the uCPE, and from which software vendors?
- How is the hardware sized, and how much headroom is there for adding functions or traffic later?
- Who owns the hardware and the software licenses, and what happens to them if we change providers?
- How are software updates tested and rolled out, and can we schedule them?
- What is the plan if the uCPE fails: a second unit, an on-site spare, or advance replacement, and within what time?
- How is the uCPE itself secured and monitored?
How it differs from CPE
Customer premises equipment (CPE) is any equipment at the customer site that connects to a provider’s service, such as a router, modem, phone or network interface device. Traditional CPE is usually single-purpose hardware: the router routes and the firewall filters. uCPE is a specific kind of CPE built as a general-purpose platform, where the functions are software and can be changed without changing the box. A site can have both, for example a carrier’s network interface device alongside a uCPE that runs everything behind it.