Secure access for vCores

A cable distribution system includes a head end connected to a plurality of customer devices through a transmission network that includes a remote fiber node, that converts received data to analog data suitable to be provided on a coaxial cable for the plurality of customer devices. The plurality of vCores instantiated on at least one of servers is configured within a container to provide services to the plurality of customer devices through the transmission network, where each of the vCores includes a service endpoint that is accessible from within the container while each of the vCores does not include a service endpoint that is directly accessible from a network address exterior to the container. A gateway instantiated one of the servers within the container provides access to each of the vCores using said service endpoint over a non-encrypted channel, and provides access to the gateway from a network address exterior to the container over an encrypted channel.