SD-WAN

SD-WAN is an acronym for software-defined networking (SDN) in a wide area network (WAN). SD-WAN simplifies the management and operation of a WAN by decoupling the networking hardware from its control mechanism. This concept is similar to how software-defined networking implements virtualization technology to improve data center management and operation.[1]

A key application of SD-WAN is to allow companies to build higher-performance WANs using lower-cost and commercially available Internet access, enabling businesses to partially or wholly replace more expensive private WAN connection technologies such as MPLS.[1]

Overview

WANs allow companies to extend their computer networks over large distances, connecting remote branch offices to data centers and to each other, and delivering applications and services required to perform business functions. Due to the physical constraints imposed by the propagation time over large distances, and the need to integrate multiple service providers to cover global geographies (often crossing nation boundaries), WANs face important operational challenges, including network congestion, packet delay variation,[2] packet loss,[3] and even service outages. Modern applications such as VoIP calling, videoconferencing, streaming media, and virtualized applications and desktops require low latency.[4] Bandwidth requirements are also increasing, especially for applications featuring high-definition video.[5] It can be expensive and difficult to expand WAN capability, with corresponding difficulties related to network management and troubleshooting.[1]

SD-WAN[6]

SD-WAN products are designed to address these network problems.[7] By enhancing or even replacing traditional branch routers with virtualization appliances that can control application-level policies and offer a network overlay, less expensive consumer-grade Internet links can act more like a dedicated circuit. This simplifies the setup process for branch personnel.[8] MEF Forum has defined an SD-WAN architecture[9] consisting of an SD-WAN Edge, SD-WAN Controller and SD-WAN Orchestrator. The SD-WAN Edge is a physical or virtual network function that is placed at an organization's branch/regional/central office site, data center, and in public or private clouds cloud platforms.[9] MEF Forum has published the first SD-WAN service standard, MEF 70[10] which defines the fundamental characteristics of an SD-WAN service plus service requirements and attributes.

The SD-WAN Orchestrator, which typically also includes the SD-WAN Controller functionality, is used to set centralized policies which are used to make forwarding decisions for application Flows.[10] Application flows are IP packets that have been classified to determine their user application or grouping of applications to which they are associated. The grouping of application flows based on a common type, e.g., conferencing applications, is referred to as an Application Flow Group in MEF 70. Per MEF 70, the SD-WAN Edge classifies incoming IP packets at the SD-WAN UNI,[10] determines, via OSI Layer 2 through Layer 7 classification, which application flow the IP packets belong to, and then applies the policies to block the application flow or allow the application flows to be forwarded based on the availability of a route to the destination SD-WAN UNI on a remote SD-WAN Edge. This helps ensure that application performance meets service level agreements (SLAs).[11]

History

WANs were very important for the development of networking technologies in general and were for a long time the most important application of networks both for military and enterprise applications. The ability to communicate data over large distances was one of the main driving factors for the development of data communications technologies, as it made it possible to overcome the distance limitations, as well as shortening the time necessary to exchange messages with other parties.

Legacy WANs technologies allowed communication over circuits connecting two or more endpoints. Earlier technologies supported point-to-point communication over a slow speed circuit, usually between two fixed locations. As technology evolved, WAN circuits became faster and more flexible. Innovations like circuit and packet switching (in the form of X.25, ATM and later Internet Protocol or Multiprotocol Label Switching communications) allowed communication to become more dynamic, supporting ever-growing networks.[12]

The need for strict control, security and quality of service meant that multinational corporations were very conservative in leasing and operating their WANs. National regulations restricted the companies that could provide local service in each country, and complex arrangements were necessary to establish truly global networks. All that changed with the growth of the Internet, which allowed entities around the world to connect to each other. However, over the first years, the uncontrolled nature of the Internet was not considered adequate or safe for private corporate use.

Independent of safety concerns, connectivity to the Internet became a mandatory necessity to the point where every branch required Internet access. At first, due to the safety concerns, private communications were still done via WAN, and communication with other entities (including customers and partners) moved to the Internet.

As the Internet grew in reach and maturity, companies started to evaluate how to leverage it for private corporate communications. During the early 2000s, application delivery over the WAN became an important topic of research and commercial innovation.[13] Over the next decade, the increasing computing power made it possible to create software-based appliances that were able to analyze traffic and make informed decisions in real time, making it possible to create large-scale overlay networks over the public Internet that could replicate all the functionality of legacy WANs, at a fraction of the cost.

SD-WAN combines several technologies to create full-fledged private networks, with the ability to dynamically share network bandwidth across the connection points.[1] Additional enhancements include central controllers, zero-touch provisioning, integrated analytics and on-demand circuit provisioning, with some network intelligence based in the cloud, allowing centralized policy management and security.[14]

Networking publications started using the term SD-WAN to describe this new networking trend as early as 2014.[7]

Required characteristics

Research firm Gartner has defined an SD-WAN as having four required characteristics:[1]

  • The ability to support multiple connection types, such as MPLS, Last Mile Fiber Optic Network or through high speed cellular networks e.g. 4G LTE and 5G wireless technologies
  • The ability to do dynamic path selection, for load sharing and resiliency purposes
  • A simple interface that is easy to configure and manage
  • The ability to support VPNs, and third party services such as WAN optimization controllers, firewalls and web gateways

Form factors

SD-WAN products can be physical appliances or software based only.[15]

Features

Features of SD-WANs include resilience, quality of service (QoS), security, and performance, with flexible deployment options; simplified administration and troubleshooting; and online traffic engineering.

Resilience

A resilient SD-WAN reduces network downtime. To be resilient, the technology must feature real time detection of outages and automatic switch over (fail over) to working links.[16]

Quality of service

SD-WAN technology supports quality of service by having application level awareness, giving bandwidth priority to the most critical applications. This may include dynamic path selection, sending an application on a faster link, or even splitting an application between two paths to improve performance by delivering it faster.[16]

Security

SD-WAN communication is usually secured using IPsec, a staple of WAN security.[17]

Application optimization

SD-WANs can improve application delivery using caching, storing recently accessed information in memory to speed future access.[18]

Deployment options

Most SD-WAN products are available as pre-configured appliances, placed at the network edge in data centers, branch offices and other remote locations. There are also virtual appliances that can work on existing network hardware, or the appliance can be deployed as a virtual appliance on the cloud in environments such as Amazon Web Services (AWS), Unified Communications as a service (UCaaS) or as Software as a Service (SaaS).[19] This allows enterprises to benefit from SD-WAN services as they migrate application delivery from corporate servers to cloud based services such as Salesforce.com and Google apps.[15]

Administration and troubleshooting

As with network equipment in general, GUIs may be preferred to command line interface (CLI) methods of configuration and control.[20] Other beneficial administrative features include automatic path selection, the ability to centrally configure each end appliance by pushing configuration changes out, and even a true software defined networking approach that lets all appliances and virtual appliances be configured centrally based on application needs rather than underlying hardware.[1]

Online traffic engineering

With a global view of network status, a controller that manages SD-WAN can perform careful and adaptive traffic engineering by assigning new transfer requests according to current usage of resources (links). For example, this can be achieved by performing central calculation of transmission rates at the controller and rate-limiting at the senders (end-points) according to such rates.[21][22][23][24][25]

Complementary technology

SD-WAN versus WAN Optimization

There are some similarities between SD-WAN and WAN optimization, the name given to the collection of techniques used to increase data-transfer efficiencies across WANs. The goal of each is to accelerate application delivery between branch offices and data centers, but SD-WAN technology focuses additionally on cost savings and efficiency, specifically by allowing lower cost network links to perform the work of more expensive leased lines, whereas WAN Optimization focuses squarely on improving packet delivery. An SD-WAN utilizing virtualization techniques assisted with WAN Optimization traffic control allows network bandwidth to dynamically grow or shrink as needed. SD-WAN technology and WAN optimization can be used separately or together,[26] and some SD-WAN vendors are adding WAN optimization features to their products.[18][27]

WAN edge routers

A WAN edge router is a device that routes data packets between different WAN locations, giving enterprise access to a carrier network. Also called a boundary router, it is unlike a core router, which only sends packets within a single network.[28] SD-WANs can work as an overlay to simplify the management of existing WAN edge routers, by lowering dependence on routing protocols.[7] SD-WAN can also potentially be an alternative to WAN Edge routers.[8]

SD-WAN versus hybrid WAN

SD-WANs are similar to hybrid WANs, and sometimes the terms are used interchangeably, but they are not identical. A hybrid WAN consists of different connection types, and may have a software defined network (SDN) component, but doesn't have to.[29]

SD-WAN versus MPLS

Cloud-based SD-WAN offers advanced features, such as enhanced security, seamless cloud, and support for mobile users, that result naturally from the use of cloud infrastructure. As a result, cloud-based SD-WAN can replace MPLS, enabling organizations to release resources once tied to WAN investments and create new capabilities.[30]

An overview discussing three typical reasons to compare MPLS with SD-WAN. Specifically where IT teams need to retain MPLS due to contract commitments and where the Enterprise migrates from MPLS to an Internet-based SD WAN.[31]

SD-CORE

SD-WAN appliances alone do not solve the middle-mile performance issues of the Internet core. SD-CORE architectures are more consistent than the Internet, routing traffic optimally through the core. SD-CORE is available as Independent MPLS backbones or Software-defined backbones.

Testing and validation

As there is no standard algorithm for SD-WAN controllers, device manufacturers each use their own proprietary algorithm in the transmission of data. These algorithms determine which traffic to direct over which link and when to switch traffic from one link to another. Given the breadth of options available in relation to both software and hardware SD-WAN control solutions, it's imperative they be tested and validated under real-world conditions within a lab setting prior to deployment.

There are multiple solutions available for testing purposes, ranging from purpose-built network emulation appliances which can apply specified network impairments to the network being tested in order to reliably validate performance, to software-based solutions.

Marketplace

IT website Network World divides the SD-WAN vendor market into three groups: established networking vendors who are adding SD-WAN products to their offerings, WAN specialists who are starting to integrate SD-WAN functionality into their products, and startups focused specifically on the SD-WAN market.[1]

Alternatively, a market overview by Nemertes Research groups SD-WAN vendors into categories based on their original technology space, and which are "Pure-play SD-WAN providers", "WAN optimization vendors", "Link-aggregation vendors", and "General network vendors"[32] While Network World's second category (startups focused specifically on the SD-WAN market), is generally equivalent to Nemertes' "Pure-play SD-WAN providers" category, Nemertes offers a more detailed view of the preexisting WAN and overall networking providers.

Additionally, Nemertes Research also describes the in-net side of the SD-WAN market, describing the go-to-market strategy of connectivity providers entering the SD-WAN market. These providers include "Network-as-a-service vendors", "Carriers or telcos", "Content delivery networks" and "Secure WAN providers".[32]

Opensource

MEF 70 standardizes SD-WAN service attributes and uses standard IPv4 and IPv6 routing protocols. SD-WAN services also use standard IPsec encryption protocols. Additional standardization for other SD-WAN functions and related security functionality not covered in MEF 70 are under development at the MEF Forum. There are several opensource SD-WAN solutions and opensource SD-WAN implementations available. For example, the Linux Foundation has three projects that intersect with and help the SD-WAN market: ONAP, OpenDaylight Project, and the Tungsten Fabric (formerly Juniper Networks' OpenContrail).

References
  1. "SD-WAN: What it is and why you'll use it one day". networkworld.com. 2016-02-10. Retrieved 2016-06-27.
  2. "How to address WAN jitter issues for real-time applications". networkworld.com. 2012-10-22. Retrieved 2016-06-27.
  3. "What's slowing down your network and how to fix it". computerweekly.com. 2015-04-01. Retrieved 2016-06-27.
  4. "Low-latency networks aren't just for Wall Street anymore". gigaom.com. 2012-04-06. Retrieved 2016-06-27.
  5. "How fast should my Internet connection be to watch streaming HD movies?". HowStuffWorks.com. 2011-10-31. Retrieved 2016-06-27.
  6. "SD-One". SD-One (in Dutch). Retrieved 2020-11-17.
  7. "Software-Defined WAN: A Primer". networkcomputing.com. 2014-09-09. Retrieved 2016-06-27.
  8. "SD-What? Understanding SD-WAN". techtarget.com. Retrieved 2016-06-28.
  9. Santitoro, Ralph (July 2017). "Understanding SD-WAN Managed Services". MEF Forum.
  10. "SD-WAN Service Attributes and Services". MEF Forum. July 2019.
  11. "SD-WAN Vendors Making A Splash". networkcomputing.com. 2015-08-27. Retrieved 2016-06-28.
  12. "A Brief History of the Enterprise WAN". networkworld.com. 2012-04-06. Retrieved 2016-06-28.
  13. "Managing the WAN". networkworld.com. 2006-03-13. Retrieved 2016-06-28.
  14. "SD-WAN: The Killer App For Enterprise SDN?". networkcomputing.com. 2015-07-22. Retrieved 2016-06-28.
  15. "SD-WAN: Bringing WAN Sexy Back". nojitter.com. 2015-11-02. Retrieved 2016-06-29.
  16. "Do wide area networks need to get software-defined?". techtarget.com. Retrieved 2015-05-13.
  17. "How IPsec provides secure communications". techtarget.com. Retrieved 2016-06-29.
  18. "List of SD-WAN Vendors". packetpushers.net. Retrieved 2016-06-29.
  19. Hardesty, Linda (20 December 2018). "Oracle's Purchase of Talari Makes It the First Major Public Cloud Provider to Offer SD-WAN". SDX Central. Retrieved 27 January 2019.
  20. "Difference Between GUI and Command Line". differencebtw.com. 2015-05-29. Retrieved 2016-06-29.
  21. C. Hong; et al. (2013). "Achieving High Utilization with Software-Driven WAN" (PDF). ACM SIGCOMM.
  22. S. Kandula; et al. (2014). "Calendaring for Wide Area Networks" (PDF). ACM SIGCOMM.
  23. H. Zhang; et al. (2015). "Guaranteeing Deadlines for Inter-Datacenter Transfers" (PDF). ACM EUROSYS.
  24. M. Noormohammadpour; et al. (2017). "DCCast: Efficient Point to Multipoint Transfers Across Datacenters". USENIX HOTCLOUD.
  25. M. Noormohammadpour; et al. (2018). "QuickCast: Fast and Efficient Inter-Datacenter Transfers using Forwarding Tree Cohorts". IEEE INFOCOM. Retrieved January 23, 2018.
  26. "Why SD-WAN is the next breed of WAN optimization". techtarget.com. Retrieved 2016-06-29.
  27. "Citrix Combines SD-WAN, WAN Optimization In Single Appliance". packetpushers.com. 2016-03-16. Retrieved 2016-06-29.
  28. "Definition: edge router". techtarget.com. Retrieved 2016-06-29.
  29. "Definition hybrid WAN". techtarget.com. Retrieved 2016-08-22.
  30. "SD-WAN vs. MPLS vs. Public Internet". Retrieved 2018-02-28.
  31. "How to compare SD-WAN vs MPLS?". Retrieved 2020-06-28.
  32. "SD-WAN providers: Consider the small with the big". SearchSDN. Retrieved 2017-11-01.
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.