The edge router of any combination of examples 22-27, wherein the BNG virtual machine manager is further configured to: receive, from the BNG controller, an instruction to destroy a particular vBNG instance of the one or more vBNG instances; and destroy the particular vBNG instance in response to the instruction to destroy the particular vBNG instance.

A method comprising: receiving, by a broadband network gateway (BNG) virtual machine manager operable by one or more processors of an edge router, from a BNG controller, an instruction to generate a virtual BNG (vBNG) instance; and generating, by the BNG virtual machine manager, the vBNG instance at the edge router to provision one or more vBNG instances operable by the one or more processors in response to the instruction; receiving, by the one or more vBNG instances operable by the one or more processors, a request to access service provider services from one or more subscriber devices; and selectively authenticating, by the one or more vBNG instances, the one or more subscriber devices based on authentication information included in the requests to access services provider services.

The method of example 29, further comprising: in response to determining, by a particular vBNG instance of the one or more vBNG instances, that the vBNG instance does not have enough computational resources to process a subscriber login from a subscriber device of the one or more subscriber devices: outputting, by the particular vBNG instance, a notification to the BNG controller indicating a lack of computational resources; and outputting, by the particular vBNG instance, a rejection message to the subscriber device.