VeloCloud Cloud-Delivered SD-WAN · VeloCloud SD-WAN Datacenter Enterprise DC SDWAN to the Cloud...
Transcript of VeloCloud Cloud-Delivered SD-WAN · VeloCloud SD-WAN Datacenter Enterprise DC SDWAN to the Cloud...
VeloCloud Cloud-Delivered SD-WAN
VeloCloud Networks Proprietary & Confidential | © Copyright 2016
Solution Overview
VeloCloud Networks Proprietary & Confidential | © Copyright 2015 2
Businesses Blocked by WAN Challenges
2
App Performance / Bandwidth Expense & Constraint Issues
Branch deployment Complexity
Cloud migration Not supported by static architectures
X
X
X VeloCloud Networks Proprietary & Confidential | © Copyright 2016
VeloCloud SDWAN Advantages
Branch Edges
Cloud Gateways SaaS
Zero touch deployments, simplified operations, one-click service insertion
Direct cloud access with performance, reliability and security
Simplified WAN Management
Managed on-ramp to the cloud
Datacenter Edges
Internet
Transport independent performance for the most demanding apps, leverages economical bandwidth
SD-WAN Overlay
Assured Application Performance
VeloCloud Networks Proprietary & Confidential | © Copyright 2016
Cloud Delivered SDWAN Architecture
Cloud Network On premise and cloud delivery
Dynamic Multi-Path
Cloud VPN
Smart QoS
App Firewall & Web Security
Application Performance Monitoring
Services Catalog
Virtual Services Delivery
SD-WAN Services Orchestration Business Policy Framework
Network Services Insertion
Visualization & Analytics/Learning
Multi-tenant, cloud scale
Zero touch activation
VeloCloud Networks Proprietary & Confidential | © Copyright 2016
SD-WAN Solution – “Architecture Matters”
Branch Site Enterprise DC
Hub Edge
Branch Edge
Enterprise DC
SaaS Hybrid Cloud
Cloud DC
Traditional Private Datacenters
INTERNET
Cloud Gateways
Orchestrator
Private & Internet circuits, Enterprise & SaaS applications, On premise & Cloud deployments
Private - MPLS
VeloCloud Networks Proprietary & Confidential | © Copyright 2016
NEW
NEW
Dynamic branch to branch
Controllers NEW
On-Premise SDWAN Deployment
SaaS / IaaS
INTERNET and MPLS
VeloCloud Edge
Enterprise DC
SDWAN On-Premise ü Edges in “hub” role at enterprise datacenters and regional
hubs ü On-premise Orchestrator and Controllers ü One-click granular traffic backhaul to regional hubs ü Direct breakout to Internet for non-backhaul traffic
VeloCloud Orchestrator
VeloCloud Networks Proprietary & Confidential | © Copyright 2016
Regional Hubs
VeloCloud Edge
VeloCloud Edge
Branch
Internet
NEW
NEW
VeloCloud Controllers
NEW
Dynamic Multi-Path Optimization Assured Application performance over MPLS, Internet broadband and LTE circuits
Continuous Monitoring Automatic capacity testing
Continuous link & path quality monitoring MPLS Class-of-Service aware
Dynamic App Steering App aware per Packet Steering Virtualized: apps not tied to links
Aggregated bandwidth for single flows Policies abstracted by link groups
Backup link policy
On Demand Remediation Error & jitter correction
Automatic steering for brownouts/blackout
Case Study: Largest Retail Hybrid WAN • MPLS packet loss and outage • Performance issues on CABLE
VeloCloud Delivers Excellent VOIP Quality • Sub-sec steering of VOIP without call drops • On-demand mitigation of packet loss & jitter
VeloCloud Networks Proprietary & Confidential | © Copyright 2016
Dynamic Multi-Path Optimization – Single Link
8 VeloCloud Networks Proprietary & Confidential | © Copyright 2016
Software Defined Automation
• Remote cloud provisioning • Group business level policies • Automatic link profiling
• One-click VPN to DC and cloud • Eliminate NxN manual tunnels • Dynamic branch-to-branch
Simplified Configurations Zero Touch Branches
VeloCloud Networks Proprietary & Confidential | © Copyright 2016
One Click VPN Deployment
10
Automatic VPN setup • To enterprise DC hub
with dynamic branch to branch
• Eliminates N x N manual tunnels to cloud with cloud gateway aggregation
• Interoperable IPsec for no touch legacy DC
End to end encryption
Branch Site Non-VeloCloud Enterprise DC
Enterprise DC
VeloCloud Networks Proprietary & Confidential | © Copyright 2016
Software Defined Automation
11
• Auto learning of routes • Enterprise wide route visibility • One-click update distribution
Simplified Routing
• Cloud services insertion • Backhaul to on-premises services • No complex per node routing
Easy Services Insertion
VeloCloud Networks Proprietary & Confidential | © Copyright 2016
Ease of Network Services Insertion
12
Branch Site
Enterprise Hub
On Premise Email DLP
Other Web traffic
Salesforce.com
Web email
Internet
• One-click service insertion
• Virtual services platform at branch
• Optimized performance to remote cloud and centralized enterprise services
• Partner ecosystem
Advanced Firewall
VeloCloud Networks Proprietary & Confidential | © Copyright 2016
SDWAN Routing Control
Silver Site Single L2/L3
switch
Legacy Site MPLS with
VPN backup
Bronze Site Single/dual
Internet
VeloCloud DC-WEST
VeloCloud DC-EAST
Velocloud Orchestrator
OSPF
Velocloud Controller VeloCloud Edge
VeloCloud Edge VeloCloud Hub Edge
VeloCloud Hub Edge
OSPF
172.30.0.0/24
• Network routes automatically learned
• Visibility and control with enterprise wide route table
• One-click preferences distributed via redundant controllers
• Dynamic routing to attract traffic into overlay VeloCloud Networks Proprietary & Confidential | © Copyright 2016
Optimized Cloud Access
Legacy or Other SDWAN
SaaS / IaaS
INTERNET and MPLS
Edge
VeloCloud SD-WAN
Datacenter Edge
Enterprise DC
SDWAN to the Cloud ü Pre-installed at cloud doorstep ü Delivered as-a-service ü Performance, Reliability & Security ü Multi-source inbound QoS
On Demand Remediation SDWAN to the Datacenter ü On-premise for Enterprise sites ü Cloud option for zero touch DC connect
VeloCloud Gateways
VeloCloud Networks Proprietary & Confidential | © Copyright 2016
SD-WAN Orchestration
15
Multi-tenant managed IT portal * Enterprise wide * Site drill down: link and usage discovery
VeloCloud Networks Proprietary & Confidential | © Copyright 2016
Flexible Deployment Options
VM
• Appliance, Software or Multi-tenant Cloud Hosted
Datacenter Options Branch Options
• Appliance or Virtual Software Form
Fac
tor
Inse
rtion
Mod
es
VM
• L3 inline and off-path insertion • Selective and full overlay forwarding • Simplified wiring with logical interface • Automated network discovery and
forwarding with OSPF • Resiliency without HA pair
Flexible options simplify and enable incremental deployments
VeloCloud Networks Proprietary & Confidential | © Copyright 2016
VeloCloud Networks Proprietary & Confidential | © Copyright 2015 17
Provider Cloud Deployments
17 Branch Site
VeloCloudGateways
VeloCloud Edge
Cloud SP Datacenter
VeloCloud Orchestrator
Peering or Cross connect
VeloCloud Networks Proprietary & Confidential | © Copyright 2016
IPsec tunnel
Private Access
PRIVATE / MPLS
PE
PE Carrier
Private Core
• Multi-tenant Gateways deployed by Service Providers – At cloud datacenters for hosted apps – At POPs for access to private core
• Delivered as a service not DIY install for enterprise • Multi-tier Orchestrator for SP and end customer portal