China Telecom Americas has the only fully licensed SD-WAN service to connect between mainland China, North America, Europe, Asia Pacific, and elsewhere in the world.
This presentation covers the challenges with Enterprise WAN, discuss how SD-WAN promise to address the problem and lastly Nuage Network SD-WAN solution, Virtualized Network Services (VNS)..
Introduction to Software Defined WANs, by Alastair Johnson.
A presentation given at APRICOT 2016’s Software Defined Networking session on 24 February 2016.
SD WAN Overview | What is SD WAN | Benefits of SD WAN Ashutosh Kaushik
Small Brief on Next Generation SD-WAN
Dynamic business landscape and uncompromised demands of applications and users have driven dramatic transformation in IT Networking after many years of relative stability. Frequent changes in technologies are shifting networking from static Infrastructure to more agile, secured, future ready and hybrid-cloud infrastructure. This created un-precedented network management complexities that has become a growing concern for the enterprise.
Early Generation of SD-WAN providers were primarily focused on cost reduction via replacing MPLS with low-cost broadband.
Infinxt Next Generation SD-WAN handles data and network security with in-built NGFW, SLA based Application Performance Enhancement, Traffic Shaping, Multi/ Hybrid Cloud App aware routing, in addition to the traditional SD-WAN features
Infinxt Product Variants
1. Infinxt – Next Generation SD-WAN
Infinxt provides you with the best of the SD-WAN features that can address any of your WAN challenges. The device itself being a Zone based firewall, provides application visibility and control. The decoupled Data Plane and Control plane provides you with the needed flexibility and efficiency in addressing Day 0, Day 1 and Day 2 challenges.
The solution is industry and business agnostic whereby it would be able to meet any type of WAN requirements. The offering being indigenously made would be able to address unique requirements for niche industries too through customization
Features
2. Infinxt - Next Generation Firewall Powered by Palo Alto Networks
Legacy firewall security solutions react to new threats. Intelligent network security stays ahead of attackers and increases business agility. Infinxt SD-WAN comes with a pre-hosted Palo Alto Networks VM in the Infinxt iEdge devices. This offering is a boon for customers to convert their branches into next generation secured branches with the NGFW security capability of Palo Alto Networks.
3. Infinxt - Next Generation Secure SD-WAN Powered by Palo Alto Networks
The Secure Next Generation SD-WAN offering from Infinity Labs provides its customers with the best of both Network connectivity and Application security. It’s a unique combination where both the VMs are service chained to leverage their proficiency to provide a secured application experience to the users. Along with SD-WAN features it also gives NGFW features Powered by Palo Alto Networks.
Infinxt SD-WAN Console gives a Single UI for both SD-WAN and NGFW for ease of Network Operation and Management.
This feature gives the enterprises a unique proposition to have Palo Alto NGFW on tried and tested Infinxt Edge Device.
Palo Alto Networks Advantages
EMA’s published software-defined wide-area network (SD-WAN) transformation research, based on a survey of 303 enterprise IT professionals, identifies best practices for modernizing the WAN with SD-WAN and other technology.
These slides from the webinar featuring EMA VP of Research Shamus McGillicuddy
- Give results from EMA’s industry-leading research in enterprise WAN strategies by looking at the dos and don’ts of SD-WAN projects
- Explore emerging requirements for secure access service edge (SASE) solutions
- Examine how the COVID-19 pandemic has affected these networks
Amin Vahdat
Principal Engineer
Google
ONS2015: http://bit.ly/ons2015sd
ONS Inspire! Webinars: http://bit.ly/oiw-sd
Watch the talk (video) on ONS Content Archives: http://bit.ly/ons-archives-sd
Fernando Nunez's ANDICOM 2016 presentation discusses NFV and SDN and outlines use cases of vE-CPE and SD-WAN. He focuses on how combining these two use cases creates a comprehensive and powerful solution and describes the concept of Ensemble SmartWAN (SD-WAN 2.0).
This presentation covers the challenges with Enterprise WAN, discuss how SD-WAN promise to address the problem and lastly Nuage Network SD-WAN solution, Virtualized Network Services (VNS)..
Introduction to Software Defined WANs, by Alastair Johnson.
A presentation given at APRICOT 2016’s Software Defined Networking session on 24 February 2016.
SD WAN Overview | What is SD WAN | Benefits of SD WAN Ashutosh Kaushik
Small Brief on Next Generation SD-WAN
Dynamic business landscape and uncompromised demands of applications and users have driven dramatic transformation in IT Networking after many years of relative stability. Frequent changes in technologies are shifting networking from static Infrastructure to more agile, secured, future ready and hybrid-cloud infrastructure. This created un-precedented network management complexities that has become a growing concern for the enterprise.
Early Generation of SD-WAN providers were primarily focused on cost reduction via replacing MPLS with low-cost broadband.
Infinxt Next Generation SD-WAN handles data and network security with in-built NGFW, SLA based Application Performance Enhancement, Traffic Shaping, Multi/ Hybrid Cloud App aware routing, in addition to the traditional SD-WAN features
Infinxt Product Variants
1. Infinxt – Next Generation SD-WAN
Infinxt provides you with the best of the SD-WAN features that can address any of your WAN challenges. The device itself being a Zone based firewall, provides application visibility and control. The decoupled Data Plane and Control plane provides you with the needed flexibility and efficiency in addressing Day 0, Day 1 and Day 2 challenges.
The solution is industry and business agnostic whereby it would be able to meet any type of WAN requirements. The offering being indigenously made would be able to address unique requirements for niche industries too through customization
Features
2. Infinxt - Next Generation Firewall Powered by Palo Alto Networks
Legacy firewall security solutions react to new threats. Intelligent network security stays ahead of attackers and increases business agility. Infinxt SD-WAN comes with a pre-hosted Palo Alto Networks VM in the Infinxt iEdge devices. This offering is a boon for customers to convert their branches into next generation secured branches with the NGFW security capability of Palo Alto Networks.
3. Infinxt - Next Generation Secure SD-WAN Powered by Palo Alto Networks
The Secure Next Generation SD-WAN offering from Infinity Labs provides its customers with the best of both Network connectivity and Application security. It’s a unique combination where both the VMs are service chained to leverage their proficiency to provide a secured application experience to the users. Along with SD-WAN features it also gives NGFW features Powered by Palo Alto Networks.
Infinxt SD-WAN Console gives a Single UI for both SD-WAN and NGFW for ease of Network Operation and Management.
This feature gives the enterprises a unique proposition to have Palo Alto NGFW on tried and tested Infinxt Edge Device.
Palo Alto Networks Advantages
EMA’s published software-defined wide-area network (SD-WAN) transformation research, based on a survey of 303 enterprise IT professionals, identifies best practices for modernizing the WAN with SD-WAN and other technology.
These slides from the webinar featuring EMA VP of Research Shamus McGillicuddy
- Give results from EMA’s industry-leading research in enterprise WAN strategies by looking at the dos and don’ts of SD-WAN projects
- Explore emerging requirements for secure access service edge (SASE) solutions
- Examine how the COVID-19 pandemic has affected these networks
Amin Vahdat
Principal Engineer
Google
ONS2015: http://bit.ly/ons2015sd
ONS Inspire! Webinars: http://bit.ly/oiw-sd
Watch the talk (video) on ONS Content Archives: http://bit.ly/ons-archives-sd
Fernando Nunez's ANDICOM 2016 presentation discusses NFV and SDN and outlines use cases of vE-CPE and SD-WAN. He focuses on how combining these two use cases creates a comprehensive and powerful solution and describes the concept of Ensemble SmartWAN (SD-WAN 2.0).
SD WAN VS MPLS – Which is better for your Business?Phani Kumar
Multiprotocol Label Switching (MPLS) has long been the standard for wide area network before SD-WAN came along. While most professionals consider SD-WAN to be the latest and more effective in enterprise networking problems, the benefits of MPLS technology cannot be ignored. Choosing between these two will depend on your company’s priorities. This guide will explore the two technologies to help you choose the best for your business.
Enterprises continue to implement or evaluate shifting services which were typically hosted in the branch into the cloud. The reasons include creating a leaner branch, taking advantage of increases in broadband Internet bandwidth and reduced complexity and cost.
This presentation takes a deep dive into the Cloud-Delivered SD-WAN architecture for service chaining. You’ll understanding the architectural differentiation and benefits of this approach and why it offers a superior model for delivering secure, reliable, and high performance service chaining.
Presentation from the July 22, 2015 Webcast: Software-Defined WAN - A Real World Success Story.
See how MWH Global, a worldwide construction management company, improved its network service and reduced its IT management burdens by deploying a Glue Networks Gluworks software-defined WAN software solution over its existing Cisco Integrated Services Routers (ISRs).
Miss the webcast? View the replay here: https://grs.cisco.com/grsx/cust/grsEventSite.html?EventCode=12200&LanguageId=1&KeyCode=000833700
Build the SD-WAN business case for your whole company and identify the hidden benefits for everyone involved. Persona content and technical diagrams presented.
Secure Access – Anywhere by Prisma, PaloAltoPrime Infoserv
The purpose of the session is to ensure security on the rapidly scaled work from Home situations during the COVID-19 outbreak. The objective is to ensure that they can securely and rapidly connect to all of their applications, including SaaS, cloud, and data-center applications.
The session will be delivered by Mohammad Faizan Sheikh, Channel Systems Engineer, India & SAARC for Palo Alto Networks..
Deploying new WAN services can take a long time and require a significant up-front capital investment. The software-defined nature of SD-WAN enables service agility, rapid rollout, and instant-on WAN that the Service Provider can immediately benefit from. This accelerates the time to market and time to revenue.
Watch the replay: http://cs.co/9001DxsKP
Are you getting unrivaled simplicity, end-to-end visibility, hardware reliability, and consistent policies from your WAN? You can get all of these things when you combine SD-WAN software with Cisco IOS XE routing platforms.
Experts from Cisco’s enterprise routing team will be on hand to show you what intent-based networking and software-defined simplicity in the WAN can bring. Powerful new capabilities are possible with a simple software image change.
Resources:
Watch the related TechWiseTV episode: http://cs.co/9003DvZHt
TechWiseTV: http://cs.co/9009DzrjN
Next Generation Nexus 9000 ArchitectureCisco Canada
In the upcoming year, 2016, the industry will see a significant capacity, capability and cost point shift in Data Center switching. The introduction of 25/100G supplementing the previous standard of 10/40G at the same cost points and power efficiency which represents a 250% increase in capacity for roughly the same capital costs is just one example of the scope of the change. These changes are occurring due to the introduction of new generations of ASICs leveraging improvements in semiconductor fabrication combined with innovative developments in network algorithms, SerDes capabilities and ASIC design approaches. This session will take a deep dive look at the technology changes enabling this shift and the architecture of the next generation nexus 9000 Data Center switches enabled due to these changes. Topics will include a discussion of the introduction of 25/50/100G to compliment existing 10/40G, why next generation fabrication techniques enable much larger forwarding scale, more intelligent buffering and queuing algorithms and embedded telemetry enabling big data analytics based on network traffic
Learn how you can streamline your migration to Cisco Intelligent WAN (IWAN) with lab-tested deployment best practices from Verizon Managed Services. Profit from the real-world expertise and valuable insights of this leading WAN solutions provider.
Miss the webcast? Register to view replay here: http://cs.co/9008BPw6A
Security continues to be top of mind as enterprises and service providers work to implement Software-Defined WAN (SD-WAN). Security is a critical requirement for enterprises as they rely more on the Internet for wide area networking, leverage the cloud for applications and services, and adopt new SD-WAN and NFV technologies for increased agility.
SD-WAN architectures are different and Cloud-Delivered SD-WAN offers a unique multi-pronged approach to accommodate the needs of all sizes of enterprises including the largest, as well as the service providers that serve them. Join this webinar to learn about new approaches with SD-WAN that both strengthen and simplify your security posture.
With uCPE/SD-WAN taking center stage in enabling software-defined Cloud services to enterprise branch offices globally, this session will provide a uCPE review from a solution, deployment and reference design standpoint.
Speaker: Sab Gosal, Segment Manager
Network Platforms Group (NPG), September 2018
The enterprise WAN is adapting to address the pervasive availability of broadband Internet, the shift of applications to the cloud and the increasing demands for real-time, online and critical applications in the branch office.
At the same time enterprises have made significant investments in their existing WAN architecture infrastructure network equipment and WAN services. Many enterprises are evaluating an SD-WAN solution as a way to address the changing enterprise landscape without decommissioning their existing WAN any time soon.
This webinar guides you through various flexible architectures and transition steps for SD-WAN that target maximum return while minimizing disruption and risk. Examples of how a cloud-delivered SD-WAN enables flexible transition and deployment in both hybrid and Internet only branches will be shared.
SD WAN VS MPLS – Which is better for your Business?Phani Kumar
Multiprotocol Label Switching (MPLS) has long been the standard for wide area network before SD-WAN came along. While most professionals consider SD-WAN to be the latest and more effective in enterprise networking problems, the benefits of MPLS technology cannot be ignored. Choosing between these two will depend on your company’s priorities. This guide will explore the two technologies to help you choose the best for your business.
Enterprises continue to implement or evaluate shifting services which were typically hosted in the branch into the cloud. The reasons include creating a leaner branch, taking advantage of increases in broadband Internet bandwidth and reduced complexity and cost.
This presentation takes a deep dive into the Cloud-Delivered SD-WAN architecture for service chaining. You’ll understanding the architectural differentiation and benefits of this approach and why it offers a superior model for delivering secure, reliable, and high performance service chaining.
Presentation from the July 22, 2015 Webcast: Software-Defined WAN - A Real World Success Story.
See how MWH Global, a worldwide construction management company, improved its network service and reduced its IT management burdens by deploying a Glue Networks Gluworks software-defined WAN software solution over its existing Cisco Integrated Services Routers (ISRs).
Miss the webcast? View the replay here: https://grs.cisco.com/grsx/cust/grsEventSite.html?EventCode=12200&LanguageId=1&KeyCode=000833700
Build the SD-WAN business case for your whole company and identify the hidden benefits for everyone involved. Persona content and technical diagrams presented.
Secure Access – Anywhere by Prisma, PaloAltoPrime Infoserv
The purpose of the session is to ensure security on the rapidly scaled work from Home situations during the COVID-19 outbreak. The objective is to ensure that they can securely and rapidly connect to all of their applications, including SaaS, cloud, and data-center applications.
The session will be delivered by Mohammad Faizan Sheikh, Channel Systems Engineer, India & SAARC for Palo Alto Networks..
Deploying new WAN services can take a long time and require a significant up-front capital investment. The software-defined nature of SD-WAN enables service agility, rapid rollout, and instant-on WAN that the Service Provider can immediately benefit from. This accelerates the time to market and time to revenue.
Watch the replay: http://cs.co/9001DxsKP
Are you getting unrivaled simplicity, end-to-end visibility, hardware reliability, and consistent policies from your WAN? You can get all of these things when you combine SD-WAN software with Cisco IOS XE routing platforms.
Experts from Cisco’s enterprise routing team will be on hand to show you what intent-based networking and software-defined simplicity in the WAN can bring. Powerful new capabilities are possible with a simple software image change.
Resources:
Watch the related TechWiseTV episode: http://cs.co/9003DvZHt
TechWiseTV: http://cs.co/9009DzrjN
Next Generation Nexus 9000 ArchitectureCisco Canada
In the upcoming year, 2016, the industry will see a significant capacity, capability and cost point shift in Data Center switching. The introduction of 25/100G supplementing the previous standard of 10/40G at the same cost points and power efficiency which represents a 250% increase in capacity for roughly the same capital costs is just one example of the scope of the change. These changes are occurring due to the introduction of new generations of ASICs leveraging improvements in semiconductor fabrication combined with innovative developments in network algorithms, SerDes capabilities and ASIC design approaches. This session will take a deep dive look at the technology changes enabling this shift and the architecture of the next generation nexus 9000 Data Center switches enabled due to these changes. Topics will include a discussion of the introduction of 25/50/100G to compliment existing 10/40G, why next generation fabrication techniques enable much larger forwarding scale, more intelligent buffering and queuing algorithms and embedded telemetry enabling big data analytics based on network traffic
Learn how you can streamline your migration to Cisco Intelligent WAN (IWAN) with lab-tested deployment best practices from Verizon Managed Services. Profit from the real-world expertise and valuable insights of this leading WAN solutions provider.
Miss the webcast? Register to view replay here: http://cs.co/9008BPw6A
Security continues to be top of mind as enterprises and service providers work to implement Software-Defined WAN (SD-WAN). Security is a critical requirement for enterprises as they rely more on the Internet for wide area networking, leverage the cloud for applications and services, and adopt new SD-WAN and NFV technologies for increased agility.
SD-WAN architectures are different and Cloud-Delivered SD-WAN offers a unique multi-pronged approach to accommodate the needs of all sizes of enterprises including the largest, as well as the service providers that serve them. Join this webinar to learn about new approaches with SD-WAN that both strengthen and simplify your security posture.
With uCPE/SD-WAN taking center stage in enabling software-defined Cloud services to enterprise branch offices globally, this session will provide a uCPE review from a solution, deployment and reference design standpoint.
Speaker: Sab Gosal, Segment Manager
Network Platforms Group (NPG), September 2018
The enterprise WAN is adapting to address the pervasive availability of broadband Internet, the shift of applications to the cloud and the increasing demands for real-time, online and critical applications in the branch office.
At the same time enterprises have made significant investments in their existing WAN architecture infrastructure network equipment and WAN services. Many enterprises are evaluating an SD-WAN solution as a way to address the changing enterprise landscape without decommissioning their existing WAN any time soon.
This webinar guides you through various flexible architectures and transition steps for SD-WAN that target maximum return while minimizing disruption and risk. Examples of how a cloud-delivered SD-WAN enables flexible transition and deployment in both hybrid and Internet only branches will be shared.
It's a very exciting time to be a member of the QLogic team. I'm referring to our recent announcement of the new QLogic NetXtreme II Ethernet products acquired from Broadcom.
Do you run an MPLS network to some or all of your branches? If so, you are likely wasting MPLS capacity backhauling Internet traffic.
For many organizations, a lot of the traffic is Internet-bound due to increased cloud-usage. Backhauling Internet traffic over an expensive MPLS service adds latency and puts pressure on limited and expensive MPLS capacity.
presentation on cloud - internet reengineering? at cloud computing symposium, as part of acm bangalore compute 2009 conference, by venki nishtala, Rediff
if your are always confused about ip tunneling L2/L3 tunneling ipsec acces vpn u have to come to right place This presentation in pdf will get you started on right path towards tunnling concept & implementaion
Taking Speed out of the Equation - Session Sponsored by TPG TelecomAmazon Web Services
Amazon Web Services own and maintain the network-connected hardware required for application services, while you provision and use what you need via a web application. How are you connecting to this highly optimised, automated solution?
TPG's presence in the AWS Direct Connect location enables you to connect directly to AWS privately without using the public internet. You can reduce your bandwidth costs significantly, providing better reliability and network performance as well as keeping your traffic secure between your service.
TPG offer a range of dedicated AWS network services varying from Fibre400, delivering guaranteed 400Mb symmetrical bandwidth, up to high capacity 100MB-100GB services.
Speaker: Nick Pachos, Head of Product Development, TPG Telecom
Key Trends Shaping the Future of Infrastructure.pdfCheryl Hung
Keynote at DIGIT West Expo, Glasgow on 29 May 2024.
Cheryl Hung, ochery.com
Sr Director, Infrastructure Ecosystem, Arm.
The key trends across hardware, cloud and open-source; exploring how these areas are likely to mature and develop over the short and long-term, and then considering how organisations can position themselves to adapt and thrive.
DevOps and Testing slides at DASA ConnectKari Kakkonen
My and Rik Marselis slides at 30.5.2024 DASA Connect conference. We discuss about what is testing, then what is agile testing and finally what is Testing in DevOps. Finally we had lovely workshop with the participants trying to find out different ways to think about quality and testing in different parts of the DevOps infinity loop.
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...James Anderson
Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM
The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management.
The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM).
Speakers:
Bob Boule
Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle.
Gopinath Rebala
Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.
Epistemic Interaction - tuning interfaces to provide information for AI supportAlan Dix
Paper presented at SYNERGY workshop at AVI 2024, Genoa, Italy. 3rd June 2024
https://alandix.com/academic/papers/synergy2024-epistemic/
As machine learning integrates deeper into human-computer interactions, the concept of epistemic interaction emerges, aiming to refine these interactions to enhance system adaptability. This approach encourages minor, intentional adjustments in user behaviour to enrich the data available for system learning. This paper introduces epistemic interaction within the context of human-system communication, illustrating how deliberate interaction design can improve system understanding and adaptation. Through concrete examples, we demonstrate the potential of epistemic interaction to significantly advance human-computer interaction by leveraging intuitive human communication strategies to inform system design and functionality, offering a novel pathway for enriching user-system engagements.
Kubernetes & AI - Beauty and the Beast !?! @KCD Istanbul 2024Tobias Schneck
As AI technology is pushing into IT I was wondering myself, as an “infrastructure container kubernetes guy”, how get this fancy AI technology get managed from an infrastructure operational view? Is it possible to apply our lovely cloud native principals as well? What benefit’s both technologies could bring to each other?
Let me take this questions and provide you a short journey through existing deployment models and use cases for AI software. On practical examples, we discuss what cloud/on-premise strategy we may need for applying it to our own infrastructure to get it to work from an enterprise perspective. I want to give an overview about infrastructure requirements and technologies, what could be beneficial or limiting your AI use cases in an enterprise environment. An interactive Demo will give you some insides, what approaches I got already working for real.
Transcript: Selling digital books in 2024: Insights from industry leaders - T...BookNet Canada
The publishing industry has been selling digital audiobooks and ebooks for over a decade and has found its groove. What’s changed? What has stayed the same? Where do we go from here? Join a group of leading sales peers from across the industry for a conversation about the lessons learned since the popularization of digital books, best practices, digital book supply chain management, and more.
Link to video recording: https://bnctechforum.ca/sessions/selling-digital-books-in-2024-insights-from-industry-leaders/
Presented by BookNet Canada on May 28, 2024, with support from the Department of Canadian Heritage.
JMeter webinar - integration with InfluxDB and GrafanaRTTS
Watch this recorded webinar about real-time monitoring of application performance. See how to integrate Apache JMeter, the open-source leader in performance testing, with InfluxDB, the open-source time-series database, and Grafana, the open-source analytics and visualization application.
In this webinar, we will review the benefits of leveraging InfluxDB and Grafana when executing load tests and demonstrate how these tools are used to visualize performance metrics.
Length: 30 minutes
Session Overview
-------------------------------------------
During this webinar, we will cover the following topics while demonstrating the integrations of JMeter, InfluxDB and Grafana:
- What out-of-the-box solutions are available for real-time monitoring JMeter tests?
- What are the benefits of integrating InfluxDB and Grafana into the load testing stack?
- Which features are provided by Grafana?
- Demonstration of InfluxDB and Grafana using a practice web application
To view the webinar recording, go to:
https://www.rttsweb.com/jmeter-integration-webinar
3. Classic SD-WAN Structure Overview
3
Branch Branch
Branch
Branch
Branch
Branch
Branch Branch
Data Center
SD-WAN PLANE
Headquarter
Private
Cloud
OTT Network,IP
Reachable
Based on multi type
of lower layer,
MPLS VPN,IEPL,
Internet etc.
Overlay Network
Underlay
Network
Same docking
procedure as
traditional
network .
Could be MPLS
VPN, IEPL,
IPsec etc..
SD-WAN:Software Defined Wide Area Network
A management platform that provides connectivity and cross-border networking. Compared to
traditional solutions, it has more flexibility accessing, configuring and managing.
Cloud Node
Cloud Node
Cloud Node
Cloud Node
Cloud Node
Cloud Node
Cloud Node
Cloud Node
Cloud Node
4. CTG SD-WAN Product Topology Design
4
CAE(Cloud Anchor Equipment)
At customer on-premises
network. Use for gathering the
internal traffic and play
integrated managed point.
(Software/Physical device form
both supported)
The Last Mile Coverage
Use Overlay tunnel to
transfer traffic instead of
physical cable.
CGW (Cloud Gateway)
deployment on the edge of CTG
backbone network ,which
converge regional traffic and
transfer to other nodes.
SDN Controller
deployment on the Cloud as
software
Service Orchestrator
deployment in CTG global Cloud node
5. SD-WAN Global Coverage
5
Hong Kong
Singapore
Los Angeles
Sydney
Frankfurt
Jakarta
Mumbai
Paris
Kuala Lumpur
Tokyo
Ready for Service
Ready in 2018
China Network
Beijing
Shanghai
Shenzhen
Washington D.C.
Chicago
San Jose
Johannesburg
Seoul
Guangzhou
San Paulo
Nairobi
Fujairah
Macau
Honie
6. CTG SD-WAN Profile
6
Coverage: Based on global cloud and extends to China
mainland
Basic Network: Any network provider, prefer CT ON-NET
SD-WAN Network: IDC-NET(AS36678) & CN2(AS 4809)
SD-WAN deployment mode: fully-meshed
Portal software: Versa
VAS(Value Added Service):
• Onsite CAE install and configuration
• Traffic application identification and acceleration
• Versa Portal Training Course
SLA: 99.95% (CGW to CGW)
Post-Sale Support: 7*24 email and hotline.
Solution: SD-WAN Basic (VAS) & SD-WAN Access
Trial: YES
CAE Equipment: ADVANTECH FWA-1320
CAE deployment mode:
• ZTP(Zero-touch-provision)
• Software over server
10. 10
Headquarter
Branch
CTG DCI-net
CGW
CGW
SD-WAN CAE : Cloud Anchor Equipment
CGW: Cloud Gateway
CTG MPLS VPN
CAECAE
Internet
PE
(MPLS VPN)
Internet
PE: Provider Edge
PE
(MPLS VPN)
Hybrid WAN – Replace CPE By CAE
SD-WAN Basic - Hybrid
11. 11
Headquarter
Branch
CTG DCI-net
CGW
CGW
SD-WAN CAE : Cloud Anchor Equipment
CGW: Cloud Gateway
CTG MPLS VPN
CAE
CPE
Internet
Local Loop
PE PE
Internet
PE: Provider Edge
Critical Traffic
Non-Critical Traffic
Hybrid WAN – Extended exist network to SDWAN
SD-WAN Basic - Hybrid
12. 12
CTG IDC-net
SD-WAN CAE : Cloud Anchor Equipment
CGW: Cloud Gateway
Internet
Headquarter
MPLS-VPN
Headquarter
Cloud Exchange
Fiber
SD-WAN Access
Internet Egress
Cloud Connected WAN – Via CX or Global Internet
13. 13
Internet
SD-WAN CAE : Cloud Anchor Equipment
CGW: Cloud Gateway
Headquarter
Cloud Connected WAN – Via CX outer path
vCAE
(Installed on Cloud server)
Internet
Branch
SD-WAN Access
14. 14
Internet
CTG SD-WAN Network
CGW
IPsec Gateway
(IPSec/L2TP , SSL-VPN)
CAE
Mobile Access
SD-WAN
IP Sec Server
(Installed on Cloud server)
IPSec VPN tunnel
CGW: Cloud Gateway
Mobile device
SD-WAN Basic - Mobile
15. Accelerate Traffic to SaaS Platform
15
Internet
Internet
Internet
Headquarter
Branch A
Branch B
CTG IDC-net
CAE
CAE
CAE
CGW
CGW
CGW
SD-WAN tunnel CAE : Cloud Anchor Equipment
CGW: Cloud Gateway
Internet Egress A
Internet Egress B
Internet Egress C
SD-WAN Access
China
Mainland
16. Case : MAO
16
Background:
MAO is committed to excellence as a Global Transportation and Logistics provider including air and ocean transportation,
customsbrokerage, warehousing & distribution and related MIS services. MAO have 2-5M “basic” Internet circuits at each
of their 7 sites in China with local CT or CU. MAO is using their own IP VPN, however the connection from China sites to the
ERP system located in U.S. data center do not have good performance. Their IP VPN either does not work or is unstable with
high latency and large packet loss.
Requirements and Challenges:
• MAO needed a stable network to support their 7 China sites accessing their ERP system located in U.S.
• MAO wanted our network to support Sophos equipment.
• The public Internet latency between China and U.S. normally is around 250ms, however MAO required that the average
latency be lower than 200ms.
• MAO is not a big company and has budget limitations.
17. Case : MAO Cont.
Architecture: SD-WAN Basic
LA IDC
China Internet
MAO Chicago IDC
Shanghai Branch
CTG DCI-net
CAE
CAE
LAX CGW
SD-WAN Tunnel
CAE : Cloud Anchor EquipmentCGW: Cloud Gateway
Tokyo CGW
IEPL
Shenzhen Branch Guangzhou Branch
Xiamen Branch
Ningbo Branch
Beijing Branch
Qingdao Branch
CAE
CAE
CAE
CAE
CAE
CAE
CT Cage Customer
Cage
18. Case : MAO Cont.
18
Solution:
• Free cloud-based SD-WAN trial in HK and Tokyo.
• 7 customer branches in China and 1 core data center in U.S. with CAE communication with 2 CGWs in
Tokyo and Los Angeles
• Utilizing network IDC-NET and CN2 to set up tunnel between TKO CGW and LAX CGW.
• Customer can access the Versa portal to manage whole network including traffic application
identification and acceleration.
• ZTP(Zero-touch-provision): we send the CAE and instructions to customer site. Easy for customer to
self-install and CT will offer on-line assistance.
Result:
• Enhanced user experience: MAO is able to reduce latency between China and U.S. from around
250ms to 200ms resulting in significant improvement in user experience.
• One stop shopping: Though this corporation, MAO integrate different local Internet providers in
China to CT with SD-WAN. The IP solution is easy for customer to manage all China sites basic
Internet network with CT only.
• Centrally managed cloud network: The centralized cloud network management and monitoring
capabilities of Versa helps MAO better manage all sites traffic flow.
• Lower TCO: MAO enjoy deep combined discount up to 15% off in SD-WAN and 60% off in Internet.