Apparatuses and methods enable connecting tunnels channeling data flow from a user terminal and to a mobile network through a virtual switch in a network device which is configured to provide a service by processing data in the data flow. A method (300) performed by a device (110, 400) having one or more processors (420) includes establishing (S310) (A) a first tunnel (125) between the device (110) and a node (120) of the mobile network, and (B) a second tunnel (135) between the device (110) and another network device (130) of the mobile network, the first tunnel and the second tunnel operating according to Internet protocols. The method further includes connecting (S320) the first tunnel to the second tunnel using a virtual switch (112) running on the device, and connecting (S330) a virtual machine (114) running on the device to the virtual switch, the virtual machine being configured to provide a service by processing data in the data flow.