Re: SD-WAN for enlightened

[Colton Conor]

What I don't understand is how do all these newer, SD-WAN vendors, differ
from any of the managed FireWall companies that have nice pretty GUI's and
web management? For example, Sophos, Meraki, Fortinet, and the other large
firewall vendors that do dual wan, virus filtering, remote management, etc?



On Tue, May 2, 2017 at 1:19 PM, Stefan <netfort...@gmail.com> wrote:

> As of this announcement:
>
> http://investor.cisco.com/investor-relations/news-and-
> events/news/news-details/2017/Cisco-Announces-Intent-to-
> Acquire-Viptela/default.aspx
>
> there will be one less than before :-)
>
> Seriously - when I first learned about them, upon service inclusion of the
> Viptela products into the VzB SD-WAN offering, they (Viptela -
> http://blog.ipspace.net/2014/11/viptela-sen-hybrid-wan-connectivity.html)
> looked very nice, already, as standalone products. And that was a few years
> back.
>
> ***Stefan
>
> On Tue, May 2, 2017 at 12:44 PM, Doug Marschke <d...@sdnessentials.com>
> wrote:
>
>> Too many to list.  I don’t know who is “winning” in market share right
>> now, as I am sure each vendor tracks their wins differently.
>>
>> There are definitely a few making more noise than others.
>>
>> Doug Marschke
>>
>> CTO
>>
>>  <http://www.sdnessentials.com> www.sdnessentials.com
>>
>> JNCIE-SP #41, JNCIE-ENT #3
>>
>> 415-902-5702 (cell)
>>
>> 415-340-3112 (office)
>>
>>
>>
>> From: Colton Conor [mailto:colton.co...@gmail.com]
>> Sent: Thursday, April 27, 2017 6:26 PM
>> To: Doug Marschke <d...@sdnessentials.com>
>> Cc: Kasper Adel <karim.a...@gmail.com>; NANOG list <nanog@nanog.org>
>> Subject: Re: SD-WAN for enlightened
>>
>>
>>
>> So who are the big SD-WAN players out there?
>>
>>
>>
>> On Mon, Apr 17, 2017 at 10:31 AM, Doug Marschke <d...@sdnessentials.com
>> <mailto:d...@sdnessentials.com> > wrote:
>>
>> Hello Kasper,
>>
>> I will do my best to answer your SD-WAN question, but as you mentioned it
>> is a buzzword that has a bit of confusion in its definitions.  I would say
>> that a SD-WAN solution should have the following elements:
>>
>> 1.) Ability to manage multiple WAN connection and choose the path based
>> on user and machine criteria (The Hybrid WAN)
>> 2.) A controller to manage the polices and operations of the SD-WAN
>> devices
>> 3.) Analytics on the network and application level
>> 4.) A software overlay that abstracts and secures the underlying networks
>>
>> Currently there are a lot of solutions out there by many vendors.  Some
>> do all of these and some a subset, so it make the landscape a bit
>> confusing.   Lots of times vendors use SD-WAN when they are really just
>> talking about Hybrid WAN (multiple connections) or WAN optimization.
>>
>>
>>
>>
>>
>> Doug Marschke
>> CTO
>> www.sdnessentials.com <http://www.sdnessentials.com>
>> JNCIE-SP #41, JNCIE-ENT #3
>> 415-902-5702   (cell)
>> 415-340-3112   (office)
>>
>>
>> -Original Message-
>> From: NANOG [mailto:nanog-boun...@nanog.org > nanog-boun...@nanog.org> ] On Behalf Of Kasper Adel
>> Sent: Sunday, April 16, 2017 1:14 PM
>> To: NANOG list <nanog@nanog.org <mailto:nanog@nanog.org> >
>> Subject: SD-WAN for enlightened
>>
>> Hi,
>>
>> I'm not sure if the buzzword SD-WAN is used to compensate for another
>> buzzword that got over-utilized (SDN) or it is a true 'new and improved'
>> way of doing things that has some innovation into it.
>>
>> I heard different explanation from different vendors:
>>
>> 1) appliances (+ controller) placed in-line to put traffic in tunnels
>> based on policy, with some DPI and traffic tagging...(to do
>> performance/policy based routing) over an expensive link (MPLS) and a cheap
>> one (broadband) with some 'firewall-like' filtering capabilities.
>> 2) same as above, with a flavor of 'machine learning' to find a pattern
>> for traffic to optimize utilization.
>> 3) a controller that instantiates and tears down tunnels from 'classic
>> routers' based on external policies and Network based features to do
>> performance based routing over an expensive link (MPLS) and a cheap one
>> (broadband) with encryption.
>>
>> Is the above a decent high-level summary?
>>
>> Has anyone tried any of these solutions, any general feedback ?
>>
>> Cheers,
>> Kim
>>
>>
>>
>>
>

Re: SD-WAN for enlightened

[Stefan]

As of this announcement:

http://investor.cisco.com/investor-relations/news-and-events/news/news-details/2017/Cisco-Announces-Intent-to-Acquire-Viptela/default.aspx

there will be one less than before :-)

Seriously - when I first learned about them, upon service inclusion of the
Viptela products into the VzB SD-WAN offering, they (Viptela -
http://blog.ipspace.net/2014/11/viptela-sen-hybrid-wan-connectivity.html)
looked very nice, already, as standalone products. And that was a few years
back.

***Stefan

On Tue, May 2, 2017 at 12:44 PM, Doug Marschke <d...@sdnessentials.com>
wrote:

> Too many to list.  I don’t know who is “winning” in market share right
> now, as I am sure each vendor tracks their wins differently.
>
> There are definitely a few making more noise than others.
>
> Doug Marschke
>
> CTO
>
>  <http://www.sdnessentials.com> www.sdnessentials.com
>
> JNCIE-SP #41, JNCIE-ENT #3
>
> 415-902-5702 (cell)
>
> 415-340-3112 (office)
>
>
>
> From: Colton Conor [mailto:colton.co...@gmail.com]
> Sent: Thursday, April 27, 2017 6:26 PM
> To: Doug Marschke <d...@sdnessentials.com>
> Cc: Kasper Adel <karim.a...@gmail.com>; NANOG list <nanog@nanog.org>
> Subject: Re: SD-WAN for enlightened
>
>
>
> So who are the big SD-WAN players out there?
>
>
>
> On Mon, Apr 17, 2017 at 10:31 AM, Doug Marschke <d...@sdnessentials.com
> <mailto:d...@sdnessentials.com> > wrote:
>
> Hello Kasper,
>
> I will do my best to answer your SD-WAN question, but as you mentioned it
> is a buzzword that has a bit of confusion in its definitions.  I would say
> that a SD-WAN solution should have the following elements:
>
> 1.) Ability to manage multiple WAN connection and choose the path based on
> user and machine criteria (The Hybrid WAN)
> 2.) A controller to manage the polices and operations of the SD-WAN devices
> 3.) Analytics on the network and application level
> 4.) A software overlay that abstracts and secures the underlying networks
>
> Currently there are a lot of solutions out there by many vendors.  Some do
> all of these and some a subset, so it make the landscape a bit confusing.
>  Lots of times vendors use SD-WAN when they are really just talking about
> Hybrid WAN (multiple connections) or WAN optimization.
>
>
>
>
>
> Doug Marschke
> CTO
> www.sdnessentials.com <http://www.sdnessentials.com>
> JNCIE-SP #41, JNCIE-ENT #3
> 415-902-5702   (cell)
> 415-340-3112   (office)
>
>
> -Original Message-
> From: NANOG [mailto:nanog-boun...@nanog.org <mailto:nanog-bounces@nanog.
> org> ] On Behalf Of Kasper Adel
> Sent: Sunday, April 16, 2017 1:14 PM
> To: NANOG list <nanog@nanog.org <mailto:nanog@nanog.org> >
> Subject: SD-WAN for enlightened
>
> Hi,
>
> I'm not sure if the buzzword SD-WAN is used to compensate for another
> buzzword that got over-utilized (SDN) or it is a true 'new and improved'
> way of doing things that has some innovation into it.
>
> I heard different explanation from different vendors:
>
> 1) appliances (+ controller) placed in-line to put traffic in tunnels
> based on policy, with some DPI and traffic tagging...(to do
> performance/policy based routing) over an expensive link (MPLS) and a cheap
> one (broadband) with some 'firewall-like' filtering capabilities.
> 2) same as above, with a flavor of 'machine learning' to find a pattern
> for traffic to optimize utilization.
> 3) a controller that instantiates and tears down tunnels from 'classic
> routers' based on external policies and Network based features to do
> performance based routing over an expensive link (MPLS) and a cheap one
> (broadband) with encryption.
>
> Is the above a decent high-level summary?
>
> Has anyone tried any of these solutions, any general feedback ?
>
> Cheers,
> Kim
>
>
>
>

RE: SD-WAN for enlightened

[Doug Marschke]

Too many to list.  I don’t know who is “winning” in market share right now, as 
I am sure each vendor tracks their wins differently.

 

There are definitely a few making more noise than others.

 

Doug Marschke

CTO

 <http://www.sdnessentials.com> www.sdnessentials.com

JNCIE-SP #41, JNCIE-ENT #3

415-902-5702 (cell)

415-340-3112 (office)

 

From: Colton Conor [mailto:colton.co...@gmail.com] 
Sent: Thursday, April 27, 2017 6:26 PM
To: Doug Marschke <d...@sdnessentials.com>
Cc: Kasper Adel <karim.a...@gmail.com>; NANOG list <nanog@nanog.org>
Subject: Re: SD-WAN for enlightened

 

So who are the big SD-WAN players out there? 

 

On Mon, Apr 17, 2017 at 10:31 AM, Doug Marschke <d...@sdnessentials.com 
<mailto:d...@sdnessentials.com> > wrote:

Hello Kasper,

I will do my best to answer your SD-WAN question, but as you mentioned it is a 
buzzword that has a bit of confusion in its definitions.  I would say that a 
SD-WAN solution should have the following elements:

1.) Ability to manage multiple WAN connection and choose the path based on user 
and machine criteria (The Hybrid WAN)
2.) A controller to manage the polices and operations of the SD-WAN devices
3.) Analytics on the network and application level
4.) A software overlay that abstracts and secures the underlying networks

Currently there are a lot of solutions out there by many vendors.  Some do all 
of these and some a subset, so it make the landscape a bit confusing.   Lots of 
times vendors use SD-WAN when they are really just talking about Hybrid WAN 
(multiple connections) or WAN optimization.





Doug Marschke
CTO
www.sdnessentials.com <http://www.sdnessentials.com> 
JNCIE-SP #41, JNCIE-ENT #3
415-902-5702   (cell)
415-340-3112   (office)


-Original Message-
From: NANOG [mailto:nanog-boun...@nanog.org <mailto:nanog-boun...@nanog.org> ] 
On Behalf Of Kasper Adel
Sent: Sunday, April 16, 2017 1:14 PM
To: NANOG list <nanog@nanog.org <mailto:nanog@nanog.org> >
Subject: SD-WAN for enlightened

Hi,

I'm not sure if the buzzword SD-WAN is used to compensate for another buzzword 
that got over-utilized (SDN) or it is a true 'new and improved'
way of doing things that has some innovation into it.

I heard different explanation from different vendors:

1) appliances (+ controller) placed in-line to put traffic in tunnels based on 
policy, with some DPI and traffic tagging...(to do performance/policy based 
routing) over an expensive link (MPLS) and a cheap one (broadband) with some 
'firewall-like' filtering capabilities.
2) same as above, with a flavor of 'machine learning' to find a pattern for 
traffic to optimize utilization.
3) a controller that instantiates and tears down tunnels from 'classic routers' 
based on external policies and Network based features to do performance based 
routing over an expensive link (MPLS) and a cheap one
(broadband) with encryption.

Is the above a decent high-level summary?

Has anyone tried any of these solutions, any general feedback ?

Cheers,
Kim

 

Re: SD-WAN for enlightened

[Colton Conor]

So who are the big SD-WAN players out there?

On Mon, Apr 17, 2017 at 10:31 AM, Doug Marschke 
wrote:

> Hello Kasper,
>
> I will do my best to answer your SD-WAN question, but as you mentioned it
> is a buzzword that has a bit of confusion in its definitions.  I would say
> that a SD-WAN solution should have the following elements:
>
> 1.) Ability to manage multiple WAN connection and choose the path based on
> user and machine criteria (The Hybrid WAN)
> 2.) A controller to manage the polices and operations of the SD-WAN devices
> 3.) Analytics on the network and application level
> 4.) A software overlay that abstracts and secures the underlying networks
>
> Currently there are a lot of solutions out there by many vendors.  Some do
> all of these and some a subset, so it make the landscape a bit confusing.
>  Lots of times vendors use SD-WAN when they are really just talking about
> Hybrid WAN (multiple connections) or WAN optimization.
>
>
>
>
>
> Doug Marschke
> CTO
> www.sdnessentials.com
> JNCIE-SP #41, JNCIE-ENT #3
> 415-902-5702 (cell)
> 415-340-3112 (office)
>
> -Original Message-
> From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Kasper Adel
> Sent: Sunday, April 16, 2017 1:14 PM
> To: NANOG list 
> Subject: SD-WAN for enlightened
>
> Hi,
>
> I'm not sure if the buzzword SD-WAN is used to compensate for another
> buzzword that got over-utilized (SDN) or it is a true 'new and improved'
> way of doing things that has some innovation into it.
>
> I heard different explanation from different vendors:
>
> 1) appliances (+ controller) placed in-line to put traffic in tunnels
> based on policy, with some DPI and traffic tagging...(to do
> performance/policy based routing) over an expensive link (MPLS) and a cheap
> one (broadband) with some 'firewall-like' filtering capabilities.
> 2) same as above, with a flavor of 'machine learning' to find a pattern
> for traffic to optimize utilization.
> 3) a controller that instantiates and tears down tunnels from 'classic
> routers' based on external policies and Network based features to do
> performance based routing over an expensive link (MPLS) and a cheap one
> (broadband) with encryption.
>
> Is the above a decent high-level summary?
>
> Has anyone tried any of these solutions, any general feedback ?
>
> Cheers,
> Kim
>
>

Fw: Re: SD-WAN for enlightened

[Douglas Silva]

RE: SD-WAN for enlightened

[Doug Marschke]

Hello Kasper,

I will do my best to answer your SD-WAN question, but as you mentioned it is a 
buzzword that has a bit of confusion in its definitions.  I would say that a 
SD-WAN solution should have the following elements:

1.) Ability to manage multiple WAN connection and choose the path based on user 
and machine criteria (The Hybrid WAN)
2.) A controller to manage the polices and operations of the SD-WAN devices
3.) Analytics on the network and application level
4.) A software overlay that abstracts and secures the underlying networks

Currently there are a lot of solutions out there by many vendors.  Some do all 
of these and some a subset, so it make the landscape a bit confusing.   Lots of 
times vendors use SD-WAN when they are really just talking about Hybrid WAN 
(multiple connections) or WAN optimization.





Doug Marschke
CTO
www.sdnessentials.com
JNCIE-SP #41, JNCIE-ENT #3
415-902-5702 (cell)
415-340-3112 (office)

-Original Message-
From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Kasper Adel
Sent: Sunday, April 16, 2017 1:14 PM
To: NANOG list 
Subject: SD-WAN for enlightened

Hi,

I'm not sure if the buzzword SD-WAN is used to compensate for another buzzword 
that got over-utilized (SDN) or it is a true 'new and improved'
way of doing things that has some innovation into it.

I heard different explanation from different vendors:

1) appliances (+ controller) placed in-line to put traffic in tunnels based on 
policy, with some DPI and traffic tagging...(to do performance/policy based 
routing) over an expensive link (MPLS) and a cheap one (broadband) with some 
'firewall-like' filtering capabilities.
2) same as above, with a flavor of 'machine learning' to find a pattern for 
traffic to optimize utilization.
3) a controller that instantiates and tears down tunnels from 'classic routers' 
based on external policies and Network based features to do performance based 
routing over an expensive link (MPLS) and a cheap one
(broadband) with encryption.

Is the above a decent high-level summary?

Has anyone tried any of these solutions, any general feedback ?

Cheers,
Kim