WAN. Re-invented.SD-WAN for Public and Private Cloud

Parag Thakore, Director Product Management

Agenda

• SD-WAN for Enterprise Key Enterprise Requirements and Challenges

SD-WAN Deployments for Public and Private Cloud

• SD-WAN for Service Providers Service Provider (SP) Goals and WAN Challenges

SD-WAN Architecture for SPs

8/10/2015 2

Businesses Blocked by WAN Challenges

8/10/2015 3

Application rollouts

inhibited by expensive

bandwidth

Branch deployments delayed

by IT complexity

Cloud migration not supported

by static architectures

X

X

X

Flexible Deployments

MPLS

Internet

VM

MPLS

Internet

MPLS

Internet

Internet

Internet

Virtual Edge 500

Edge 500

Edge 500

Edge 1000

Software Edge 1000

Cloud Gateways

VeloCloud Orchestrator

LTE

Branch Options

4

Datacenter Options

Virtual or Physical Internet and private circuits SaaS and enterprise applications

8/10/20155

Dynamic Multi-path

Optimization

Branch Sites

Enterprise DC

Cloud DC

INTERNET

Private / MPLS

On-premise DC Edge

Edge

Orchestrator

Cloud Gateways

Enterprise DC

SaaS

VeloCloud’s network service consists of 3 key components: Edge, Cloud Gateways, Orchestrator

VeloCloud Cloud-Delivered SD-WAN

• Zero touch, thin branch auto provisioned from cloud

• Cloud orchestration eliminates complexity

• No datacenter installation required

• Direct path to enterprise and cloud apps

• Scalable, redundant, pay-as-you-go cloud network

Incremental SD-WAN Deployments

Legacy SiteMPLS with

VPN backup

Gold Site

Datacenter/Regional Hub

Existing

VPN hub

Silver Site

SiteHybrid

transport

Bronze SiteInternet:

Single / Multi

Interoperability between branch types * Easy migration between site types

VeloCloud

Edge

Branch Sites

Campus Core

Gold and Silver Site: Use Cases

7

Performance-aware, secure overlay

over Internet

Offload selected traffic to Internet links

Use OSPF to attract traffic, no touch to

MPLS CE & minimal touch to L3 switch

Dynamic multipath assures app

performance to both DC and SaaS

Dynamic Edge to Edge

Internet Overlay Hybrid Overlay

Performance-aware, secure overlay

over MPLS and Internet

Forward all traffic to Overlay

Full app-aware multipath over both

MPLS and Internet links

Full CoS awareness on MPLS

Dynamic Edge to Edge

Bronze Site – Real-World Use Case with VeloCloud

17%of the time

single Internet link fails to

deliver expected application

performance

8.89

VQS >99%of the time

SD-WAN with dual Internet to

delivers predictable

application performance

VQS

9.96

Internet Cloud-delivered SD-WAN

Source: VeloCloud Internet Quality Report

Cloud VPN for Virtual Private Cloud (VPC)Simple to Configure, High Performance Connection to VPC

VPC VPC VPC VPC

Connection to VPC requires either backhaul

to DC first or setting up IPSec tunnel from

every branch to VPC

Complicated and manual IPSec

configuration to VPC

Traditional WAN to VPC Connect to VPC with Cloud-delivered SD-WAN

High performance, secure connectivity to VPC

with Dynamic Multipath Optimization

Eliminate the mesh tunnels from branches to

VPC; only IPSec tunnels from the Cloud

Gateways are required

Automated IPSec configuration Cloud-

delivered SD-WAN

Dynamic Multi-Path Optimization

8/10/2015 10

App performance over broadband, LTE and private circuits

WAN Monitoring

Automatic capacity testing

Continuous link & path quality monitoring

App Steering

Aggregate Links

App Aware per Packet Steering

Optimal link & path across Internet

and private

Link Remediation

Error & jitter correction

Automatic steering for brownouts/blackout

WAN Expansion - Scalable, Pay as You Grow

8/10/2015 11

SaaS

Legacy Ent DC

Branch

SaaS

VeloCloud Edge

DC/Regional Hub

Branch

Step 1 – Single to small

number of sites

NO DC Foot-Print

Zero Touch thin Branch

auto provisioned from Cloud

Step 2 – Expand Branch

Deployments

Edge DC Footprint for

Service insertion

SaaS

Branch

Step 3 – Future Ready WAN

Easily integrate

Non-VeloCloud sites Growth

via Acquisitions Or Cloud

DC Migration

WAN Growth due

to acquisitions

Cloud DC

VeloCloud Edge

DC/Regional Hub

Ease of Network Services Insertion

8/10/2015 12

Branch Site

Enterprise DC

Or

Regional Hubs

On Premise

Email DLP

Other Web traffic

Salesforce.com

Web email

Internet

• One-click service insertion – In Branch, In Cloud or In Regional Hub

• Virtual services platform at branch

• Partner ecosystem

SD-WAN for Service Providers

8/10/2015 13

Service Provider Goals and Challenges

8/10/2015 14

Meeting customer

requirement for

BW

Direct access

to cloud

Reduce truck roll Simplify service

and operation

How to Increase

Revenue?

How to Reduce

OPEX?Goals

Challenges

How do we Help?

8/10/2015 15

Unified Elastic

TransportTMCloud

On-Ramp

Virtual Services

DeliverySD-WAN

Automation

VeloCloud Site

Legacy Sites

Service Provider Cloud

FW

VPN

WanO

P VNF

SD-WAN Automation

VeloCloud Orchestrator

Internet

MPLS

Wireless

VeloCloud SD-WAN Solution for Service Provider

Unified Elastic Transport Hybrid, Internet, Offnet

Cloud On-RampUCaaS,

Cloud Security

Virtual Service

DeliveryVCE with Virtual Services,

vEdge

Cloud NetworkOn premise and cloud delivery

Summary - SD-WAN for Enterprise and SPs

8/10/2015 17

CABL

EDSLLTE

MPLS

Branch

Edge

DC Edge

Enterprise DC

Dynamic Multi-Path

Cloud VPN

Smart QoS

App Firewall & Web Security

Application Performance Monitoring

Services Catalog

Virtual Services Delivery

SD-WAN Services Orchestration

Business Policy Framework

Network Services Insertion

Visualization & Analytics/Learning

Cloud DC

Multi-tenant, cloud scale

Zero touch activation

Thank You.