A computer-implemented method for providing virtualized cloud services across a service provider network, the computer-implemented method comprising: providing access through a virtual private network, VPN, across the service provider network for each of a plurality of customers of the service provider network, wherein the access of each said customer is to a plurality of cloud service providers; providing private access across the service provider network between at least one of the plurality of customers and at least one of the plurality of cloud service providers associated with the service provider network, the private access being over a shared physical connection between the service provider network and the at least one of the plurality of cloud providers, wherein a said shared physical connection provides to more than one of said customers private access to cloud resources of a said cloud service provider; the computer-implemented method being characterized in that it further comprises: implementing Virtual Forwarding and Routing, VRF, thereby providing a secure multi-tenancy environment in the service provider network among the plurality of customers and the plurality of cloud service providers; and implementing Network Address Translation, NAT, to enable scaling private access between the plurality of customers and the plurality of cloud service providers across the service provider network, wherein the implementation of NAT comprises public-to-private and private-to-public NAT between the plurality of customers and the plurality of cloud service providers and comprises implementing NAT at an edge router in the service provider network to implement the NAT between at least one of the plurality of customers and at least one of the plurality of cloud service providers, and communicating by edge router with a cloud provider hub of a said cloud service provider. providing access through a virtual private network, VPN, across the service provider network for each of a plurality of customers of the service provider network, wherein the access of each said customer is to a plurality of cloud service providers; providing private access across the service provider network between at least one of the plurality of customers and at least one of the plurality of cloud service providers associated with the service provider network, the private access being over a shared physical connection between the service provider network and the at least one of the plurality of cloud providers, wherein a said shared physical connection provides to more than one of said customers private access to cloud resources of a said cloud service provider; the computer-implemented method being characterized in that it further comprises: implementing Virtual Forwarding and Routing, VRF, thereby providing a secure multi-tenancy environment in the service provider network among the plurality of customers and the plurality of cloud service providers; and implementing Network Address Translation, NAT, to enable scaling private access between the plurality of customers and the plurality of cloud service providers across the service provider network, wherein the implementation of NAT comprises public-to-private and private-to-public NAT between the plurality of customers and the plurality of cloud service providers and comprises implementing NAT at an edge router in the service provider network to implement the NAT between at least one of the plurality of customers and at least one of the plurality of cloud service providers, and communicating by edge router with a cloud provider hub of a said cloud service provider. implementing Virtual Forwarding and Routing, VRF, thereby providing a secure multi-tenancy environment in the service provider network among the plurality of customers and the plurality of cloud service providers; and implementing Network Address Translation, NAT, to enable scaling private access between the plurality of customers and the plurality of cloud service providers across the service provider network, wherein the implementation of NAT comprises public-to-private and private-to-public NAT between the plurality of customers and the plurality of cloud service providers and comprises implementing NAT at an edge router in the service provider network to implement the NAT between at least one of the plurality of customers and at least one of the plurality of cloud service providers, and communicating by edge router with a cloud provider hub of a said cloud service provider.