Now we have visibility to our network traffic but what’s next? Should we go to each user and ask them to turn off their Netflix, Hulu, Gaming, File sharing, etc because some other users are trying to work, and their Citrix VDI sessions are dropping? Of course not! We need the ability to set policies and control the network behavior automatically and prioritize (L7 QoS) the correct Application (not by using old school QoS of 802.1p or DSCP), and what is the better location to do that than the router that is the heart and center of our network and our gateway to the expensive WAN connection. Intelligent WAN (IWAN) is a comprehensive set of traffic control and security features for the wide-area network that supplies us with all the business-grade capabilities of an MPLS VPN – such as quality of service (QoS), WAN optimization, and VPN tunneling – that we can put to work using less-expensive connections. As a result, we can grow our MPLS network using the Internet, cellular, and other lower-cost links without compromising performance, reliability, or security. If we’re like many IT organizations, we’re under pressure to meet the growing bandwidth demands of cloud services, mobile traffic, and video in our branch sites. Not adding bandwidth could clog the network, cause poor user experiences, and slow down business response times. To remedy the situation while staying within budget, we can confidently add Internet or other lower-cost links in our branch offices and still get 99.999 percent (“five nines”) availability. With the Performance Routing (PfR) and two internet lines, our reliability is very close to the 99.999% that we like so much and will probably cost half the price. The really cool part about it is that with DMVPN our security is the same as the expensive MPLS connection even though it is over the public internet. The PfR will also give us full use of our main WAN connection and our backup WAN connection and make it active-active instead of an active-standby topology, so we will actually use the backup connection as part as your internet off-loading from the main WAN connection.
Ora abbiamo visibilità sul nostro traffico di rete, ma quali sono le prospettive? Dovremmo andare da ogni utente e chiedere loro di disattivare Netflix, Hulu, Gaming, Condivisione di file, ecc. Perché alcuni altri utenti stanno provando a lavorare e le loro sessioni Citrix VDI sono in calo? Ovviamente no! Abbiamo bisogno della capacità di impostare politiche e controllare il comportamento della rete automaticamente e dare la priorità (L7 QoS) all'applicazione corretta (non usando la QoS vecchia scuola di 802.1p o DSCP), e qual è la posizione migliore per farlo rispetto al router che è il cuore e il centro della nostra rete e il nostro gateway per la costosa connessione WAN. Intelligent WAN (IWAN) è un set completo di funzioni di controllo del traffico e di sicurezza per la rete wide-area che ci fornisce tutte le funzionalità di livello aziendale di una VPN MPLS, quali qualità del servizio (QoS), ottimizzazione WAN e VPN tunneling - che possiamo mettere al lavoro utilizzando connessioni meno costose. Di conseguenza, possiamo espandere la nostra rete MPLS utilizzando Internet, cellulari e altri collegamenti a basso costo senza compromettere prestazioni, affidabilità o sicurezza. Se siamo come molte organizzazioni IT, siamo sotto pressione per soddisfare le crescenti richieste di larghezza di banda di servizi cloud, traffico mobile e video nei nostri siti di filiali. Non aggiungere larghezza di banda potrebbe intasare la rete, causare esperienze utente scadenti e rallentare i tempi di risposta del business. Per rimediare alla situazione rimanendo entro i limiti del budget, possiamo tranquillamente aggiungere Internet o altri collegamenti a basso costo nelle nostre filiali e ottenere comunque una disponibilità del 99,999 percento ("cinque nove"). Con il Performance Routing (PfR) e due linee Internet, la nostra affidabilità è molto vicina al 99,999% che ci piace così tanto e probabilmente costa la metà del prezzo. La parte davvero interessante è che con DMVPN la nostra sicurezza è la stessa della costosa connessione MPLS, anche se è su Internet pubblica. La PfR ci consentirà inoltre di utilizzare appieno la nostra connessione WAN principale e la nostra connessione WAN di backup e renderla attiva-attiva anziché una topologia active-standby, quindi utilizzeremo effettivamente la connessione di backup come parte del download di Internet dal connessione WAN principale.
Design of the intelligent WAN for the next generation
KARIM, S M RAKIB UL
2018/2019
Abstract
Now we have visibility to our network traffic but what’s next? Should we go to each user and ask them to turn off their Netflix, Hulu, Gaming, File sharing, etc because some other users are trying to work, and their Citrix VDI sessions are dropping? Of course not! We need the ability to set policies and control the network behavior automatically and prioritize (L7 QoS) the correct Application (not by using old school QoS of 802.1p or DSCP), and what is the better location to do that than the router that is the heart and center of our network and our gateway to the expensive WAN connection. Intelligent WAN (IWAN) is a comprehensive set of traffic control and security features for the wide-area network that supplies us with all the business-grade capabilities of an MPLS VPN – such as quality of service (QoS), WAN optimization, and VPN tunneling – that we can put to work using less-expensive connections. As a result, we can grow our MPLS network using the Internet, cellular, and other lower-cost links without compromising performance, reliability, or security. If we’re like many IT organizations, we’re under pressure to meet the growing bandwidth demands of cloud services, mobile traffic, and video in our branch sites. Not adding bandwidth could clog the network, cause poor user experiences, and slow down business response times. To remedy the situation while staying within budget, we can confidently add Internet or other lower-cost links in our branch offices and still get 99.999 percent (“five nines”) availability. With the Performance Routing (PfR) and two internet lines, our reliability is very close to the 99.999% that we like so much and will probably cost half the price. The really cool part about it is that with DMVPN our security is the same as the expensive MPLS connection even though it is over the public internet. The PfR will also give us full use of our main WAN connection and our backup WAN connection and make it active-active instead of an active-standby topology, so we will actually use the backup connection as part as your internet off-loading from the main WAN connection.| File | Dimensione | Formato | |
|---|---|---|---|
|
Design of the Intelligent WAN for the Next Generation.pdf
accessibile in internet per tutti
Descrizione: Design of the Intelligent WAN for the Next Generation
Dimensione
5.77 MB
Formato
Adobe PDF
|
5.77 MB | Adobe PDF | Visualizza/Apri |
I documenti in POLITesi sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.
https://hdl.handle.net/10589/147317