Let’s talk about SD-WAN – What is it really? - · PDF fileLet’s talk about SD-WAN – What is it really? ... • Deep dive into our Cloud Intelligent WAN ... Google AWS Internet

Embed Size (px)

Citation preview

  • Lets talk about SD-WAN What is it really? Options for Service Providers

    October 2016

    Bill Reilly, Product Manager IWAN Product Management

    Chris Lewis, Product Manager Network Function Virtualization

  • 2 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

    What you will learn Where the industry currently is on SD-WAN

    How we define SD-WAN and why

    What it means for you, a Network Service Provider

    How you can use this technology

    Deep dive into our Cloud Intelligent WAN

  • 3 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

    Why are enterprises thinking about SD-WAN?

    Have either 2 or 3 WAN connections/branch

    70%

    of Apps accessed via Internet

    50%

    Cite poor application performance and latency as

    corporate WAN concern

    48.6%

    Cite management of connectivity at branch as a

    challenge

    32.4%

    Source: IDC Worldwide SD-WAN Survey Special Report (May 2016) PSOCRS-2011 3

  • 4 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

    IT Priorities Focused on Business Outcomes

    SD-WAN is expected to achieve all the above and a lot more.

  • 5 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

    Emerging WAN Core Drivers Hybrid WAN Cores Flexible transport Options

    easily mix, add or change transport services types and providers balance service level requirements and cost needs

    Cloud First applications and data can be anywhere Cost effective access to Private, Virtual Private and Public Clouds applications optimized to deliver the required user experience

    Secure infrastructure Internal and provider networks are not trusted any more segmentation, data privacy, hardened against attacks, etc

    Carrier Neutral Facilities For direct peering with cloud and transport providers

    Highly reliable infrastructure now more than ever Outages impact revenue 24x7x365, no downtime for maintenance

    Operational efficiency, automation Simplify operations, PnP, Cloud Self managed, On-Prem Self managed, IWANaaS

    Internet West

    Region IWAN

    East Region IWAN IWAN

    Core

    South Region IWAN

    North Region IWAN

    Public Cloud

    vPrivate Cloud

    Internet

    Facebook Yahoo

    YouTube,

    Private Cloud

    Ent POP

    Branch

    vBranch

    V

    Cloud PoP

    V V

    Ent POP

    Cloud POP

  • 6 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

    Cisco Digital Network Architecture Deliver DNA with Cisco IWAN

    Cisco Intelligent WAN

    Cloud Service Management

    Automation

    Analytics

    Virtualization

    Digital Network Architecture

    Benefits

    Automate with policies

    Analytics with network insights

    Physical and virtual platforms

    Faster Innovation Reduce Cost & Complexity Lower Risk & Meet Compliance

  • 7 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

    Separate Transport and Service CPE-to-CPE overlay enables separation of transport (underlay) and VPN service (overlay)

    Routing in VPN service overlay environment should be almost trivial

    CPE1

    CPE2 CPE5

    CPE3

    CPE4

    = Service aware

    = Service unaware

    IP or MPLS Transport Underlay

    VPN Service Overlay

    SDN Service Control

    Transport Policy and Optimisation

  • 8 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

    Hybrid WAN: Leveraging the Internet Secure WAN Transport and Internet Access

    Branch

    MPLS (IP-VPN)

    Internet

    Private Cloud

    Virtual Private Cloud

    Public Cloud

    Secure WAN transport for private and virtual private cloud access

    Leverage local Internet path for public cloud and Internet access

    Increased WAN transport capacity, cost effectively!

    Improve application performance (right flows to right places)

    Secure WAN Transport

    Direct Internet Access

    Secure WAN transport for private and virtual private cloud access

    Leverage local Internet path for public cloud and Internet access

    Increased WAN transport capacity; and cost effectively!

    Improve application performance (right flows to right places)

  • 9 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

    SP Shared Services

    IWAN Transport Option1

    P

    P

    Router 1

    Router 2

    Single network

    MPLS

    PE

    Customer-A Branch

    PE

    PE

    Router 3 Router 1

    Router 2

    Customer-A Transit/Hub Site

    Cloud Service Node

    DM

    Z

    IWAN Edge

    Customer-A Branch

    vBranch

    BE

    GA

    NFV

    Physical Platform

    Microsoft Azure

    Internet

    Google AWS

    Internet

    Facebook Yahoo

    YouTube,

    VPN Secure

    GW VPN Secure

    GW

    BE

    PE

    PE

    GA

    BE

    GA

    GA Guaranteed Access (SLA) BE Best Effort, Broadband (No SLA)

    Service Orchestration (NSO)

    NFV Orchestration (ESC) PnP Server

    SP Portal

    Reporting LivingObjects

  • 10 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

    SP Shared Services

    IWAN Transport Option 2

    Router 1

    Router 2

    MPLS

    PE

    Customer-A Branch

    PE

    PE

    Router 3 Router 1

    Router 2

    Customer-A Transit/Hub Site

    Cloud Service Node

    DM

    Z

    IWAN Edge

    Customer-A Branch

    vBranch

    BE

    GA

    NFV

    Physical Platform

    Microsoft Azure

    Internet

    Google AWS

    Internet

    Facebook Yahoo

    YouTube,

    BE

    PE

    PE

    GA

    BE

    GA

    GA Guaranteed Access (SLA) BE Best Effort, Broadband (No SLA)

    INET

    GATEWAY

    Service Orchestration (NSO)

    NFV Orchestration (ESC) PnP Server

    SP Portal

    Reporting LivingObjects

  • 11 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

    SP Shared Services

    IWAN Overlay

    P

    P

    Router 1

    Router 2

    PE

    DMVPN Overlay

    MPLS

    PE

    PE

    Customer-A Branch

    PE

    PE

    Router 3 Router 1

    Router 2

    Customer-A Transit/Hub Site

    Cloud Service Node

    DM

    Z

    IWAN Edge

    Customer-A Branch

    vBranch DMVPN MPLS

    DMVPN INET

    Microsoft Azure

    Internet

    Google AWS

    Internet

    Facebook Yahoo

    YouTube,

    Service Orchestration (NSO)

    NFV Orchestration (ESC) PnP Server

    SP Portal

    Reporting LivingObjects

  • 12 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

    Identify Prioritize Accelerate

    See 1000+ apps running on your network

    Automate app priority based on business policies

    Boost app performance

    Securely on any connection or platform for all users

    Cisco Intelligent WAN Application-centric SD-WAN

  • 13 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

    Ubiquitous Visibility Across Entire Network Make The Network Application-Aware

    Intelligence & Insights Detect/Categorize 1000+ applications automatically

    Application Categories Consumer Apps Voice and Video

    File Sharing Business and Productivity Tools

    Social Networking Software Updates Instant Messaging

    Database Gaming

    Browsing Email

    72 48 36 31 28 24 19 17 12 9 8

    Any user, device, wired or wireless

    Facilitates trouble-shooting

    No probes or additional HW

    Browsing Consumer_apps Unknown Net-admin File-sharing Voice-and-video Other

    Cisco AVC also makes it easy to see if slow application performance is a result of client network delay or server network delay.

    IT staff gain a 360-degree view of all devices, users, and applications from a single location.

  • 14 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

    Business Priority based Intelligent Path Control Increase Application Availability

    Route app path based on policies 3

    Use Internet as the 2nd WAN 2

    Set app rankings and policies 1 Business Relevant High Priority

    Business Irrelevant Low Priority

    Default Medium Priority

    Active-Standby Active-Active

    Full utilization of ALL available

    bandwidth

    Improved application

    performance

    Lower operating costs

    I want my critical data and voice traffic moving over MPLS, because I have a service-level agreement with my MPLS provider and I can hold him accountable if theres an outage or slowdown. PfR does that for me, while sending lower-priority traffic like web surfing to DMVPN.

  • 15 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

    WAN Optimization and Content Caching Enhance the Application Experience

    Mobile Apps

    Guest WiFi

    Video Conferencing

    Digital Signage

    Catalogs

    On-demand Training

    Enable Business Initiatives

    Reduced Bandwidth

    0 0

    1

    2

    3

    4

    40

    80

    120

    160

    App Bandwidth App Latency

    Bandwidth (Mbps)

    Latency (ms)

    Reduced Latency

    Bandwidth with IWA