An SD-WAN service is deployed across multiple WANs with an SD-WAN Edge CPE (left site) and an SD-WAN Edge VNF running in a cloud environment. In this use case, the SD-WAN service tunnel begins on the SD-WAN Edge CPE at the left site and terminates on the physical compute server or virtual machine (VM) where the application is running, e.g., in a cloud service provider environment. The benefit of terminating the SD-WAN tunnel on the server or VM is that the SD-WAN tunnel provides secure connectivity between the site on the left and the cloud applications inside the cloud service provider’s data center.