This presentation covers the challenges with Enterprise WAN, discuss how SD-WAN promise to address the problem and lastly Nuage Network SD-WAN solution, Virtualized Network Services (VNS)..

1. Copyright
2015 Alcatel-­‐Lucent.
All
rights
reserved.
8/28/15
1

2. Copyright
2015 Alcatel-­‐Lucent.
All
rights
reserved.
What
SD-­‐WAN
means
for
Enterprise
Toshal
Dudhwala
August
25,
2015
The
next
generation
Enterprise
branch
network
and
services
@tdudh

3. Copyright
2015 Alcatel-­‐Lucent.
All
rights
reserved.
Agenda
§ State
of
Enterprise
WAN
§ What
is
SD-­‐WAN?
§ What
is
Nuage
Networks
doing?
§ Use
Cases
3

4. Copyright
2015 Alcatel-­‐Lucent.
All
rights
reserved.
Adoption
of
Off-­‐Premise
Cloud
services
§ Off-­‐premises
cloud
services
to
be
$200B
by
2018
§ IaaS– to
augment
in-­‐house
infrastructure
during
peak
loads,
keeping
capex
lower
§ PaaS/CaaS – to
speed
up
application
development
and
deployment
§ SaaS
– to
allow
experimentation
with
new
applications
§ Hybrid
Cloud
becomes
architecture
of
choice
§ Public
cloud
becomes
too
costly
as
the
usage
scales
up
§ Want
more
control
than
public
cloud
offers
§ The
WAN
becomes
strategic
§ Corporate
WAN
traffic
is
forecast
to
grow
at
15%/year
through
2018
§ Cost
savings
is
even
more
important
4
Source:
www.ihs.com

5. Copyright
2015 Alcatel-­‐Lucent.
All
rights
reserved.
Next
Generation
WAN
Requirements
Customer Current
Network Key
Requirements Driving
Factors
Bank 3000+
ATM/branch
locations
2 x
MPLS
Networks
ATM,
Banking,
Video,
Internet
High BW
(100Mbps)
links
for
non-­‐sensitive
data
with
strong
security
for
sensitive
data
Enhanced
services
for
customer
(i.e.
Agility)
e.g.
Video
ATM
Restaurant
Chain
1000+
international
locations
T1
MPLS
links
POS,
Ordering Menu,
Inventory
High
BW
(50
Mbps)
links
with
3G/4G connection
as
a
backup
for
MPLS
Cloud
based
application
with
high
BW
access
at
branch sites
Retail Chain
(Food,
Drug,
Clothing,
etc)
7000+
locations
MPLS
Network
POS,
Inventory,
VoIP
Managed
VPN
service
(10
Mbps)
with
converged
services
Lower
WAN OPEX
cost
Government 100+
locations
T1
MPLS
Network
Voice
Load balance
voice
traffic
on
multiple
WAN
(MPLS,
Microwave,
LTE
and
Internet)
100%
reliability
via
Hybrid
WAN networks
5

6. Copyright
2015 Alcatel-­‐Lucent.
All
rights
reserved.
State
of
Enterprise
WAN
Today
TRANSPORT
DEPENDENT
LOCATION
DEPENDENT
DEVICE
DEPENDENT
MANUAL
(TIME ‘DEPENDENT’)
ENTERPRISE WAN
1. Turn-up a new site
2. Reconfiguration of existing site
3. Transport introduction/upgrades
4. L2-L4 VPN service configuration
5. Security implementation
6. Security assessment
7. L4-L7 application insertion
8. Datacenter interconnection
9. Operational moves/adds/changes
10. Service assurance/fault localization
11. Service optimization/fault prevention
12. Device replacement
13. Configuration auditing/compliance
14. . . .

7. Copyright
2015 Alcatel-­‐Lucent.
All
rights
reserved.
What
is
SD-­‐WAN?
SD-WAN promises to shift incremental control to enterprise IT
SD-WAN (Software Defined Wide Area Networks ) is a new model for the delivery
of Enterprise services over WAN based on SDN principles
Overlay(offers(
transport(
choices(
Self%governance-
of-service-
func1ons-
--
IT-­‐approach
to
network
service
delivery

8. Copyright
2015 Alcatel-­‐Lucent.
All
rights
reserved.
SD-­‐WAN
– Bigger
picture
8
MPLS
WAN
Internet
Site1
Site2
HQ/DC
SD-­‐WAN
enabled
VPN
Network
Centralized
Policy
and
Control
Any-­‐to-­‐any
network
connection
Transport
Independent
Intelligent
Traffic
control
Policy
based
Network
management
Automated
branch
and
Services
orchestration

9. Copyright
2015 Alcatel-­‐Lucent.
All
rights
reserved.
WAN
Evolution
with
SD-­‐WAN
TRANSPORT
DEPENDENT
LOCATION
DEPENDENT
DEVICE
DEPENDEN
T
MANUAL
(TIME ‘DEPENDENT’)
ENTERPRISE
WAN
TRANSPORT
INDEPENDENT
LOCATION
INDEPENDENT
DEVICE
INDEPENDENT
ENTERPRISE
VNS
AUTOMATED
(TIME ‘INDEPENDENT’)

10. Copyright
2015 Alcatel-­‐Lucent.
All
rights
reserved.
Virtualized
Network
Services
(VNS)
– definition
10
• VNS
(def.)
: Enterprise
focused
solution
aimed
at
automating
the
Enterprise
WAN
– Automating:
device
installation/replacement/upgrades,
new
transport
introduction,
VPN
service
instantiation,
IP/MPLS
interoperability,
traffic
encryption,
security
enforcement,
L4-­‐7
application
insertion,
cloud-­‐bursting,
moves/adds/changes,
service
assurance,
traffic
analytics,
policy
auditing
.
.
.
SOFTWARE
DEFINED
AUTOMATED NETWORKING
Seamless
Cloud
Integration
Flexible
Deployment
Model
Unified
Services
Policy

11. Copyright
2015 Alcatel-­‐Lucent.
All
rights
reserved.
VNS
– Componentry
11
VSP:
Unified
Multi-­‐tenanted
Policy
and
Control
Virtualized
Services
Controller
(VSC)
Virtualized
Services
Directory
(VSD)
. . .
.
Layer
4 Security
Traffic
SteeringQoSLayer
3
NSG
(Physical) NSG
(Virtual)
Layer
2
✔
✔
Bootstrap
§ Runtime topology engine
§ Federated control-plane manager
§ Instantaneous programming of the network
§ Unified policy-plane for mgmt of distributed end points
§ Business/IT Service engine (definition of rules)
§ Multi-tenant templates & Analytics
§ General-purpose compute platform
§ Lightweight data-path agent leverage HW acceleration
§ Security hardened with TPM/X.509/TLS-based identification
§ Multi-tenant/Multi-VPN with enhanced networking services

12. Copyright
2015 Alcatel-­‐Lucent.
All
rights
reserved.
Mapping
VNS
to
SD-­‐WAN
12
Overlay(offers(
transport(
choices(
IT#approach*to*
network*service*
delivery*
VSP:
Unified
Multi-­‐tenanted
Policy
and
Control
Virtualized
Services
Controller
(VSC)
Virtualized
Services
Directory
(VSD)
. . .
.
Layer
4 Security
Traffic
SteeringQoSLayer
3
NSG
(Physical) NSG
(Virtual)
Layer
2
✔
✔
Bootstrap
Self%governance-
of-service-
func1ons-
--

13. Copyright
2015 Alcatel-­‐Lucent.
All
rights
reserved.
Traditional
Branch
Control
plane
BRANCH
NETWORKING
DEVICE
Management
plane
Forwarding
plane
PROPRIETARY
HARDWARE
VNS
Branch
GENERAL
PURPOSE
COMPUTE
OPEN
OS
x86
Centralized Policy Manager
SDN Controller
Security
Traffic
SteeringQoS
Branch
Networking
for
Cloud
Era

14. Copyright
2015 Alcatel-­‐Lucent.
All
rights
reserved.
Fixed
Office
/
Building Retail
/
Store
Front Kiosk
/
ATM
Pop-­‐up
Virtual
Private
Datacenter
Temporary
Mobile
workforce Public
Datacenter
(IaaS) Cloud
Applications
(SaaS)
What
is
Branch?
Branch (def.):
Any
location
requiring
attachment
to
Enterprise
WAN

15. Copyright
2015 Alcatel-­‐Lucent.
All
rights
reserved.
Private Data
Center (or HQ)
VNS
Deployment
15
MPLS
WAN
(Provider
Networks)
Internet
(3G,
LTE,
BB)
Site1
Site2
Public
Cloud

16. Copyright
2015 Alcatel-­‐Lucent.
All
rights
reserved.
Private Data
Center (or HQ)
VNS
Deployment
16
MPLS
WAN
(Provider
Networks)
Internet
(3G,
LTE,
BB)
Site1
Site2
Public
Cloud
VSD
VSC
Enterprise
admin

17. Copyright
2015 Alcatel-­‐Lucent.
All
rights
reserved.
VNS
Deployment
17
MPLS
WAN
(Provider
Networks)
Internet
(3G,
LTE,
BB)
Site1
Site2
Public
Cloud
VSD
VSC
Enterprise
admin
Private Data
Center (or HQ)NSG
NSG
N
S
G

18. Copyright
2015 Alcatel-­‐Lucent.
All
rights
reserved.
Private Data
Center (or HQ)
Public
Cloud
VNS
Deployment
18
VSD
VSC
MPLS
WAN
(Provider
Networks)
Internet
(3G,
LTE,
BB)
Site1
Site2
Enterprise
admin
OF-­‐TLS
NSG
NSG
N
S
G

19. Copyright
2015 Alcatel-­‐Lucent.
All
rights
reserved.
Private Data
Center (or HQ)
Public
Cloud
VNS
Deployment
19
VSD
VSC
MPLS
WAN
(Provider
Networks)
Internet
(3G,
LTE,
BB)
Site1
Site2
Enterprise
admin
OF-­‐TLS
Virtualized
Network
Services
(VNS)
WAN
VXLAN/
MPLSoGRE
IPSec
NSG
NSG
N
S
G

20. Copyright
2015 Alcatel-­‐Lucent.
All
rights
reserved.
…
a
fully
automated,
policy
driven
WAN
20
Private Data
Center (or HQ)
Public
Cloud
VSD
VSC
MPLS
WAN
(Provider
Networks)
Internet
(3G,
LTE,
BB)
Site1
Site2
Enterprise
admin
OF-­‐TLS
Virtualized
Network
Services
(VNS)
WAN
VXLAN/
MPLSoGRE
IPSec
NSG
NSG
N
S
G

21. Copyright
2015 Alcatel-­‐Lucent.
All
rights
reserved.
Private Data
Center (or HQ)
Public
Cloud
Use
Case
#1
-­‐ Hybrid
WAN
21
VSD
VSC
MPLS
WAN
(Provider
Networks)
Internet
(3G,
LTE,
BB)
Site1
Site2
Enterprise
admin
NSG
NSG
N
S
G
ECMP
across
both
links

22. Copyright
2015 Alcatel-­‐Lucent.
All
rights
reserved.
Private Data
Center (or HQ)
Public
Cloud
Use
Case
#1
-­‐ Hybrid
WAN
22
VSD
VSC
MPLS
WAN
(Provider
Networks)
Internet
(3G,
LTE,
BB)
Site1
Site2
Enterprise
admin
Voice
Video
NSG
NSG
N
S
G
ECMP
across
both
links
Intelligent
Traffic
Steering

23. Copyright
2015 Alcatel-­‐Lucent.
All
rights
reserved.
Private Data
Center (or HQ)
Public
Cloud
Use
Case
#1
-­‐ Hybrid
WAN
23
VSD
VSC
MPLS
WAN
(Provider
Networks)
Internet
(3G,
LTE,
BB)
Site1
Site2
Enterprise
admin
Video
NSG
NSG
N
S
G
ECMP
across
both
links
Intelligent
Traffic
Steering
Seamless
Backup
X
Voice

24. Copyright
2015 Alcatel-­‐Lucent.
All
rights
reserved.
Private Data
Center (or HQ)
Public
Cloud
Use
Case
#2
– Hybrid
Cloud
24
VSD
VSC
MPLS
WAN
(Provider
Networks)
Internet
(3G,
LTE,
BB)
Site1
Site2
Enterprise
admin
NSG
NSG
N
S
G

25. Copyright
2015 Alcatel-­‐Lucent.
All
rights
reserved.
VNS
Business
Case
for
Enterprise
§ Large
Enterprise
with
200
branch
locations
worldwide
§ Uses
Multiple
transport
medium
for
VPN
connectivity
§ Over
80%
saving
in
rollout
cost
§ Using
ZTP
with
policy
based
orchestration
§ Over
40%
saving
in
TCO
(Total
Cost
of
Ownership)
§ Template
based
policy
allows
easily
and
automated
management
of
branch
network
policies
25
1 2 3 4
TCO
(USD)
YEAR
Traditional VNS
Savings 14% 34% 41% 65%

26. Copyright
2015 Alcatel-­‐Lucent.
All
rights
reserved.
Summary
§ The
decade-­‐only
WAN
architecture
is
no
match
for
today’s
Enterprise
business
needs
§ SD-­‐WAN
is
a
next
generation
architecture
to
meet
Enterprise
next
generation
WAN
requirements.
§ VNS
provides
an
automated,
policy
based
solution
to
deliver
business
services
in
a
secured
way
26
TRANSPORT
INDEPENDENT
LOCATION
INDEPENDENT
DEVICE
INDEPENDENT
ENTERPRISE
WAN
POLICY DRIVEN
AUTOMATION
INTER OPERABLE
FLEXIBLE DEPLOYMENT
MODEL

27. Copyright
2015 Alcatel-­‐Lucent.
All
rights
reserved.
THANK
YOU

28. Copyright
2015 Alcatel-­‐Lucent.
All
rights
reserved.
nuagenetworks.net @nuagenetworks