Novel tools and techniques for provisioning OTT internet services are provided. A system includes a user device associated with a first customer, a first physical customer local area network, and an enhanced network gateway. The enhanced network gateway may be configured to instantiate a virtual gateway associated with the first physical customer local area network, create a secure domain associated with the first physical customer local area network, determine whether a subscriber account is associated with the first customer. Responsive to determining that a subscriber account is not associated with the first customer, the enhanced network gateway may further provide a consumer portal to the user device, receive a selection of one or more services through the consumer portal, establish a connection to a service provider network associated with the one or more services, and provision the one or more services over the first physical customer local area network.