SD-WAN

 View Only
  • 1.  What is the difference SD WAN and cloud controller

    Posted Jan 19, 2023 06:12 AM
    I cant tell the difference between the two.
    SD-WAN is software developed wide area network so doesnt it mean that we are using software to control the internet?
    So isnt it the same as cloud controller (like aruba central)?
    But my colleague tell me cloud is not SD WAN.
    So what is the difference between aruba central and SD WAN?


  • 2.  RE: What is the difference SD WAN and cloud controller

    Posted Jan 19, 2023 04:47 PM
    Aruba Central is the orchestrator for Aruba gateways (formally known as Aruba controllers)
    Aruba Gateways run a firmware that not only can do the classic anchoring of Aruba AP tunnels but also all the SD-WAN functionality

    Check this overview
    https://www.arubanetworks.com/techdocs/central/latest/content/aos10x/overview/architecture-overview-aos10.htm

    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------



  • 3.  RE: What is the difference SD WAN and cloud controller

    Posted Jan 19, 2023 09:43 PM
    I understand that aruba central is used for controlling SDWAN and AP.
    Okay let me start with something more basic.
    What is the difference between WAN, SDWAN and internet?


  • 4.  RE: What is the difference SD WAN and cloud controller

    Posted Jan 20, 2023 04:42 AM

    A WAN is any network that is used to connect disparate LAN's together. This is where the acronyms are relevant, Wide Area Network versus Local Area Network.

    The Internet is a WAN, but there are others like MPLS, Satellite, Radio Networks (i.e. LoRa, 4G and 5G).

    An SD-WAN allows you to combine multiple WAN technologies (or multiple ISP's if you only want to use Internet) into a single logical WAN where you route different applications and/or users over different paths.

    As an example: I have locations A and B that can connect via MPLS, AT&T and Comcast. MPLS is expensive, only 10Mbps but 99.999% available, low latency and no packet loss. AT&T is cheaper 100Mbps 200mSec latency and 2% packet loss on average. Comcast is the cheapest 200Mbps but has frequent outages. SD-WAN allows you to steer traffic between A and B across different underlays (providers). In this case you would use MPLS exclusively for Voice and Video conferencing and make sure backup jobs never go across it, but use Comcast primarily and AT&T only when Comcast is down too long.

    Depending on which SD-WAN solution you choose you have more advanced features. Aruba SD-WAN allows you to send the Voice/Video over AT&T and Comcast in parallel and deal with the packet loss that is incurred on these circuits.


  • 5.  RE: What is the difference SD WAN and cloud controller

    Posted Jan 20, 2023 04:49 AM
    So If I just use Aruba central to manage my aruba controller, is it called SD WAN?
    I am not using any leased line or MPLS.


  • 6.  RE: What is the difference SD WAN and cloud controller

    Posted Jan 20, 2023 08:01 AM
    There are essentially two modes for an Aruba Controller to operate in when managed by Aruba Central.

    • As a Mobility Gateway the controller (we now call them gateways) will allow incoming tunnels from Access Points and Switches allowing deep packet inspection and application control and monitoring within these purpose built appliances. 
    • As an SDWAN Gateway the appliance will establish secure tunnels across the WAN (Internet and/or private WAN, such as MPLS) in order to establish secure and efficient network links between locations that cannot feasibly use LAN technology.
    You don't have to have MPLS or leased lines to use SDWAN. You can operate SDWAN with standard commodity Internet links. But SDWAN typically implies that you have multiple sites that you are interconnecting across WAN services. If you have a single site and use a Gateway at that site, it can still operate as a managed router/firewall. You would configure it as an SDWAN Gateway for this purpose without the focus on configuration/orchestration of inter-site tunnels.

    If you are configuring the Gateway for the purpose of terminating Wi-Fi client traffic, this is not SDWAN.


  • 7.  RE: What is the difference SD WAN and cloud controller

    Posted Jan 22, 2023 02:36 AM
    ok. I am using aruba central to manage aruba controller with a default route to the internet.
    It is not called sd wan so what is it called?


  • 8.  RE: What is the difference SD WAN and cloud controller

    Posted Jan 22, 2023 05:44 PM
    A router... maybe a cloud-managed router or firewall.

    The software defined aspect is loose (and largely a hype term). You could call Wi-Fi software defined if you really wanted to. But it may not be useful.

    I suspect it's important to come to some sort of consensus, as much as possible, with colleagues and those you communicate with as to what you are defining. If adding software defined to the beginning of a word helps you describe it better, then do it. 

    See, look, I've done it in my first sentence... As more and more things become cloud managed, do we even need to prefix them with "cloud managed"?


  • 9.  RE: What is the difference SD WAN and cloud controller

    Posted Jan 20, 2023 07:54 AM
    Edited by ProbeRequest Jan 20, 2023 08:05 AM
    Hi @businessuser

    It's important to begin with the difference between WAN and Internet. 

    Wide Area Networks connect LANs over wide areas. The technology and service delivery used to make these connections is usually quite different to that of the LAN. Wikipedia describes WAN like this:

    "A wide area network (WAN) is a telecommunications network that extends over a large geographic area. Wide area networks are often established with leased telecommunication circuits.[1]
    Businesses, as well as schools and government entities, use wide area networks to relay data to staff, students, clients, buyers and suppliers from various locations around the world. In essence, this mode of telecommunication allows a business to effectively carry out its daily function regardless of location."

    It then states "The
    Internet may be considered a WAN.[2]" In fact it is common to see on network diagrams the area outside the LAN is defined as the WAN, or a router with ports labelled distinctively LAN and WAN. 
    ​​
    Many organisations will lease telecommunications services which are effectively private to the organisation in order to interlink sites across cities, countries and around the world. These leased services may offer guaranteed bandwidth and can cost a lot of money. Commonly they offer a level of privacy also, as the WAN circuits may only provide a link between the organisations locations and not to the public Internet. So there are many WANs that are distinctly separate from the Internet.

    Some people prefer to distinguish the Internet from a WAN in diagrams or terminology because of this fact that many WANs are private and when used in this private way are distinctly different the Internet. If you like could be consider the Internet more of a "public" WAN.

    Also be mindful of the distinction between a LAN from the WAN. LANs commonly use Ethernet and Wi-Fi to connect devices which are close by. WANs commonly use different networking technology such as MPLS, ATM and Frame Relay for much longer distance communication.

    SDWAN (Software Defined Wide Area Network) is a WAN which utilises software to manipulate or augment the WAN in some beneficial way. A very common use case for SDWAN would be to mimic the private connectivity a private WAN provides by letting software build secure tunnels across the public Internet. The "Software Defined" aspect here helps the network establish secure and private connectivity, route traffic appropriately between the LANs which are being interconnected and in some cases manipulate or create efficiencies in the path of the traffic (possibly by compressing the traffic, or duplicating it across multiple WAN links). This in many cases may remove the need entirely for expensive leased line private WAN services.

    Many businesses who use Aruba's SDWAN have a private WAN as well as an Internet connection at each site. The SDWAN solution builds paths between the sites on both of these WAN links (private WAN + Internet) which creates redundancy for the traffic path and allows the SDWAN solution to make clever decisions about which path certain applications should take. For example there might be a preference to have Voice over IP traffic take a less latent path between sites on the private WAN while sending Intranet services across the cheaper, higher bandwidth Internet link.

    SDWAN provides flexibility in the way sites interconnect and in many cases removes the requirement for private, expensive WAN links at all.

    In the case of Aruba's Edge Connect SD-Branch management and orchestration of the solution takes place in Aruba Central.

    Aruba Central is a cloud service which provides network management and monitoring for Wi-Fi, Wired and SDWANs. It plays a part in orchestrating, configuring and long term monitoring of an SDWAN but the WAN network itself is more made up of hardware appliances at each of the sites.

    This YouTube video might be of value: Aruba SD Branch Solution Overview.

    Hope this helps your understanding and learning journey.