A
software-defined wide area network (SD-WAN) is a network that is
abstracted from its hardware, creating a virtualized network
overlay.
Operators can remotely manage and quickly scale this overlay, which
can span over large geographical distances. It is an application of
software-defined networking (SDN).
An SD-WAN can connect several branch locations to a central hub
office or cover multiple locations in a large campus such as a
university campus. Because it is abstracted from hardware, it is
more flexible and available than a standard WAN.
It
relies on four central components:
Edge connectivity abstraction
WAN virtualization
Centralized management
Elastic traffic management
Features
Controller &
Orchestrator
Serves as the first point
of authentication
Requires public IP
address
Zero Touch Provisioning
Multi-Tenant
Support
Geo Mapping of
Devices
On-Cloud / In-Premise
deployments
Audit Logs
Configuration Backup and
Restore
Central Configuration
Management
Edge Devices WebUI/CLI
access
Template Based
Configuration
RBAC
NAC & WI-Fi Captive
Portal
Real-time monitoring &
Reporting
Notifications &
Alerts
SLA Reports
Histograms
Aggregator
Aggregation: Combining multiple network
connections or links (e.g., MPLS, broadband, cellular) to increase overall
bandwidth and optimize network performance.
Traffic Optimization: Prioritizing and routing
traffic based on application type, quality of service (QoS) requirements,
and network policies.
Load Balancing: Distributing network traffic
across available links to ensure efficient utilization and prevent
congestion.
Failover and Redundancy: Providing failover
capabilities to ensure continuous network connectivity even if one or more
links experience disruptions.
Security: Implementing security features to
protect against threats and ensuring data privacy.
Centralized Management: Offering centralized
configuration and monitoring capabilities to streamline network
administration.
Customer was looking for centralized visibility, control & security over
its network along with redundancy/fallback in last mile connectivity with
SLA monitoring
Challenges
Inconsistent connectivity
No redundancy in WAN Network
No uptime SLA/reports
No traffic prioritization
No centralized visibility/control over the entire network.
No alert mechanism during incidents
Solution
Multi fabric/media supportable CPE with B/w aggregation/auto failover to
avoid any
downtime
SLA Reports
QoS & Application/Traffic visibility
Encrypted VPN for end to end communication
Centralized visibility/control over the entire network