SaaS蒲公英sdwan官网

IntroductionEdgecomputingusecases,includingartificialintelligence(AI),wireless,andcloudnativeservices,havebecomemorecost-effectivetodeployaspowerfuluniversalcustomerpremisesequipment(uCPE)productsfacilitateadvancedworkloadprocessingandservicesdelivery.
VirtualizedinfrastructurecombinedwithcloudnativeservicesandedgeintelligencelayeredontotheuCPEprovideagileandinnovativeworkloadprocessingandserviceswithreasonabledeploymentandoperationalcosts.
CloudnativeedgeplatformsbasedonConvergedEdgeReferenceArchitecture(CERA)offeranewvaluepropositiontoenterprisemarketsegmentssuchassmartcities,transportation,industrial,andmedia(seeFigure1)byenablingnewvideoandanalyticsusecasesanddeliveringimprovementsinkeyperformanceindicators(KPIs)suchasreducedlatency,backhaulsavings,dataprivacy,andreliability.
CERADevelopedforEdgeComputingInnovationWiththedevelopmentofmulti-accessedgecomputing(MEC)standards,edgecomputinghasgivencommunicationsserviceproviders(CommSPs)andenterprisesanetworkarchitecturethatreducesbackhaulnetworktrafficanddeliverslow-latencycloudapplicationsinawiderangeofusecases(seeFigure1).
Edgecomputinghasalsoopenedthedoortonewedge-deployedworkloadssuchasedgeanalytics,AIandinferencing,virtualizedradioaccessnetworks(vRAN),virtualizedevolvedpacketcore(vEPC),moresecureorchestration,andmulti-platformconnectivitywiththesameseamlessscalabilitythathasbeenprevalentinthecloud.
CERAsupportsdevelopmentandinnovationofplatformstodelivertheseworkloads.
CERAoffersacompute,storage,andnetworkingspecificationthatunifiesandconvergesinternetofthings(IoT)with4Gand5Gwirelessinfrastructuretosimplifyworkloadconvergenceattheedgewhiledensifyingwirelessnetworks.
Withtheexpectedproliferationofedgenodes,oneaspectofparticularimportanceisconnectivitymanagement.
Asthenumberofconnectedbranchofficesandremoteworkersgrows,networkconnectivitybecomesmoreimportanttoensureworkershavethetoolstobeproductive.
Thisrequiresdeliveringnetworkperformance,security,anduptimewhileminimizingthecostofmaintainingthenetwork.
Withtheseneedsinmind,theVersaSD-WANsolutionprovidesahighlyscalable,automated,access-independentmulti-tenantplatformtoservethenetworkingrequirementsofthenext-generationMECplatform.
IndustryUseCasesCERAcombinesIntelarchitectureprocessorswithastrongsoftwarefoundationtoadvancenext-generationedgecomputingsolutions.
01010102020304TableofContentsIntroductionCERADevelopedforEdgeComputingInnovationIndustryUseCasesIntroducingtheVersaSD-WANSolutionVersaCERA-basedSolutionCERA5GReferenceSolutionSegmentation,Multi-tenancy,andPrivacyConclusion05LearnMore.
05Acronyms.
05UsingConvergedEdgeReferenceArchitecture(CERA),VersaoffersanSD-WANsolutionthatdeliversmoresecure,segmentedmulti-tenantservicesforedgecomputingapplicationsVersaOffersSD-WANConvergedEdgeSolutionsEdgeComputingConveregedEdgeReferenceArchitecture(CERA)VersaFlexVNFisintelligentmultiserviceandmulti-tenantedgesoftwarethatdeliversscalable,segmented,programmable,andautomatedSD-Infrastructure(SD-Routing,SD-WAN,SD-SecurityandSD-Branch)atthebranch.
VersaDirectorofferscentralizedcontrolandmanagementforbothconnectivityandservices.
VersaSD-WANControlleristhenetwork-widecontrollerwithdatasecurityfeaturesthatmanagethedistributedcontrolplaneacrosstheSD-WANfabric.
VersaAnalyticsprovidesholisticbig-datadrivenvisibility,baselining,correlation,andpredictiveanalysisfornetwork,applicationusage,andsecurityevents.
VersaNetworksenablesorganizationstosimplifytheirWANandbranchofficenetworksbyconsolidatingnetworking,SD-WAN,andsecurityfeaturesintoasinglesoftwareplatform,insteadofdeployingsiloedhardwareorvirtualappliancesfrommultiplevendors.
KeydifferentiatedfeaturesandfunctionalityoftheVersasolution,ascitedbycustomers,partners,andanalysts,includethefollowing:IntegratedSecurityFeatures:Versa'ssolutionenablesenterprisestodeployamoresecureSD-WANfabricfortheirbranch/multi-cloudnetworks,withdeepcontextualvisibility,enablingbetterWANcostsmanagement.
Multi-CloudExtensibility:Versaenablesmulti-cloudtopologieswithcloud-to-cloudinteroperabilityforworkloadmigration,additionalsecurity,management,analytics,andmonitoring.
SaaSAcceleration:Versaemploysend-userQoEcomputationsthatdeterminehowaspecificappisperforming,effectivelyutilizingSaaSapplicationmonitoring,todeliverdeterministicandadaptivetrafficconditioningoptimizedforeachapplication.
VersaSD-WANprovidesanelastic,application-aware,access-agnosticnetworkingsolutionwithintegratedsecurityfeatures.
VersaSD-WANintegrateswiththeCERA-basedplatformtocreatemultiplevirtualprivatenetworksforhelpingsecurethecommunicationofeachandeveryVNFhostedonaCERA-basedplatform.
VersaCERA-basedSolutionVersaSD-WANcanbedeployedonuniversalcustomerpremisesequipment(uCPE)whiteboxservers.
TheseofferthecomputeandstoragefunctionswithnetworkingfunctionalitylimitedtowirelineandpotentiallyWi-Fi.
RunningVersaSD-BranchonaCERA-basedplatformoffersseveraldifferentiatingattributes,includingthefollowing:WhitePaper|VersaOffersSD-WANConvergedEdgeSolutionsFigure1.
ExampleoftopusecasesforCERA-basedplatformsVersa,anIntelNetworkBuildersecosystempartner,hasdevelopedasoftwaredefinedwideareanetwork(SD-WAN)designedtorunonCERA-basedservers.
IntroducingtheVersaSD-WANSolutionEnterprisesaroundtheworldhavemovedtoa"cloud-first"approachbyembracingmultiplepubliccloudandsoftwareasaservice(SaaS)services.
Inthismulti-cloudworld,thenetworkmusttransitionfromasite-to-sitecontexttoaclient-to-cloudcontextwiththegoalofdeliveringthebestapplicationuserqualityofexperience(QoE).
Thisshifthascompelledmanyenterprisestore-architecttheirwideareanetworkandsecurityarchitecture.
Versa,aGartnerWANEdgeleadingvisionary,enablesthistransitionwithitsinnovativeSD-Branchsolutionthatcombinesrouting,networking,SD-WAN,andsecurityfeaturesinaunifiedsolutionthatsimplifiesandautomatesbranchnetworkoperationsandWANedgeserviceswhilehelpingsecurethedistributedenterprise.
ThemainelementsoftheVersaSD-WANproductincludethefollowing:SmallCellsStreetLightsTrafficLightsRetail&PublicKiosksRoadSideUnitsIndustrial&EnterpriseNetworkScalingDigitalSecurity&SurveillanceManufacturingAutomationWorkerSafetyDeviceConnectivityFormFactorsDigitalSignageAdvertisingMediaTranscodingCDNGamingTrafficManagementIntersectionSafetyPedestrianWarningsAirQualityMonitoringFloodWarningsPOISecuritySurveillanceGunShotDetectionIndustrialRetailTransportationMonitoringDSS2WhitePaper|VersaOffersSD-WANConvergedEdgeSolutions1.
ControlPlaneandDataPlaneSegmentation:CERAcanhostanumberofVNFs,eachVNFhavingamanagement/controlaspectasmanysolutionswillbemanagedcentrally.
Forexample,thevirtualevolvedpacketcore(EPC)mighthaveMME/AMFaswellasOSS/BSSinacentrallocationownedbyaCommSP.
Additionally,thedatathatflowsthroughthevEPCisdestinedforsomeapplicationinanexternaldatacenterorcloud.
VersaSD-WANsegmentationcreatesmultipleoverlaytunnelstokeepsuchtrafficseparatewhilehelpingprotectthenetwork.
2.
Multi-tenancy:WhenusedinaCommSPnetwork,theremaybeseveralVNFsontheCERA-basedplatform,whichareownedbydifferentorganizationsordifferentgroupswithinthesameorganization.
Ineithercase,Versaseparatestrafficwithdifferentpoliciesfornetworkingandsecurity.
TheVersaSD-WANgroupsasetofapplicationsintoasingletenantandseparatesitfromothergroupsofapplicationsbelongingtootherorganizationsorbusinessunits.
Forexample,imagineprocessingasecuritycamerafeedsegmentedfromcorporatetrafficover5G.
ThisenablesanextralayerofprotectionbykeepingIoTtrafficseparatefromcorporateapplications.
3.
Automation:Everytimeanewapplicationisinstantiated,Versacreatesanewtenantand/orupdatesadestinationbranchand/orupdatespolicies.
VersaDirectorprovidesAPIstoprogrammaticallyperformthesetaskswithoutmanualintervention.
4.
SecurityFunction:VersaSD-WANwithintegratedsecurityfeaturesprovidesafullsuiteofdefense-in-depthcapabilities,includingNGFW,URM,SWG,URLfiltering,andNG-IPS(NSSLabsrecommended).
Figure2.
CERA5GreferencesolutionarchitectureCERA5GReferenceSolutionFigure2presentsthearchitectureofCERA's5Greferencesolution.
Thearchitecturecomprisesthefollowing:5Gaccessnetworkandcorenetwork(ANandCN)components(includingFlexRANL1,third-partyL2,andL3orFlexCore)thatdelivera3GPP-compliantsolutionthatservicesremoteradioheads(RRHs)atthefronthaulanddeliversanSGiinterfaceconnectivityontotheplatform.
OpenNetworkEdgeServicesSoftware(OpenNESS),anopensourceinitiativefromIntelthatdirectstraffictoedgeservicesco-locatedonCERA-basedplatformsandmanagesthelifecycleoftheseservices.
OpenVINOtoolkitframeworkandsampleapplicationsthatrepresentedgeservicesforinferencing.
VersaFlexVNFSD-WANtoprovidemoresecureIPsec-enabledbackhaulfunctionality.
Versa'sCERA-basedsolutionhasadoptedCERA'sdataplanesegmentationimplementation,whichisakeyarchitecturetenetunderpinningthearchitecture.
Withthisdataplane,all4G,5G,wirelessLANandwiredLANdatatrafficisdecapsulatedontheedgenode.
For4G/5G,theSGiinterfacepresentsitselfontheedge.
InanenterpriseorCommSPWANenvironment,itisexpectedthattheCERA-basedplatformisreplicatedacrosshundredsoreventhousandsofbranchofficesites.
TheSD-WANsoftwareandotherapplicationshostedontheCERA-basedplatformarealsodeployedatsimilarscale.
Eachoftheseapplicationscanbecentrallymanagedbytheapplicationserviceprovider(ASP)andarecontrolledandmanagedbyOSS/BSS,NMS,orchestrators,andothersthataredeployedinanenterprisedatacenterorpubliccloud.
Forexample,the4G/5GnetworkdeployedwouldneedtocommunicatewithMME/AMFintheoperatormobilecorenetworkforauthenticationandbillingpurposes.
TheOSS/BSSintheoperatorcoreisusedforconfigurationmanagementandmonitoringpurposes.
ThiscontrolandmanagementtraffictraversesthenetworkasdatatrafficovertheWANinterface.
TheVersaSD-WANsoftwarecanprotectthiscriticalinfrastructurebysegmentingitfromothertrafficreceivedfromtherestoftheusers.
eNB/gNBVNFICNFFlexRANDUFlexRANCUEPCDataPlaneVNFICNFEPC/5GCoreContainerOpenNESSEdgeNodeMicroservicesContainer/VMOtherAppsVMOpenVINOToolkitContainer/VMSD-WANOpenNESSDataPlaneMicroserviceCentOSRTFrontHaulI/O10GbpsAdditionalEthernetConnectivityNFPGAAccelerationOpenCLAccelerationOtherConnectivityBackHaulI/O10GbpsHostPlatformEth/IPRRHWi-FiAccessPointAdditionalIP-onlyconnectivityoptionsSingleNICinterfaceforallbackhaulconnectivityoptionsInternetSD-WANFabricIP/MPLSVPNBranchwithCERAEnterpriseDCOpenNESSControllerCommunityEditionSD-WANControllerOperatorControllerEnterpriseCloudServerAppMME/AMFControlStackCloud/EnterpriseServicesEdgeStack/DataPlaneSegmentation3WhitePaper|VersaOffersSD-WANConvergedEdgeSolutionsInadditiontocentrallyhostedapplications,theCERA-basedservermighthostenterpriseapplicationsthatneedcommunicationbetweentheenterprise'sbranchserversordatacenter.
Thereisaneedforprivacyandsecuritybetweenthedifferentapplicationdataflows.
Versaleveragesitsmulti-tenancycapabilitytosegment,monitor,andmanagethesegmentednetwork.
Segmentation,Multi-tenancy,andPrivacyTosupportmulti-tenancy,theVersaDirectormanagementportalsupportsrole-basedaccesscontroltoseparatetheadministrationofindividualtenants,inthiscaseapplications.
Thismulti-tenancytranslatesintoaseparateconfigurationthatisdownloadedtotheSD-WANFlexVNF.
TheFlexVNFcreatesseparateprivateencryptedtunnelsforeachtenant.
Ontheedgenode,VersaFlexVNFhassoleownershipoftheWANinterfaceandisdirect-connectedviaSR-IOVtothisport.
ThisimpliesallWANtraffic,ingressandegress,flowsthroughFlexVNF.
InSD-WANparlance,theCERA-basedplatformischaracterizedasanSD-WANbranchnode.
DownstreamtrafficthatisultimatelydestinedfortheuserismanagedanddirectedviathedataplanemoduleontheCERA-basedplatform,whichisbasedonOpenvSwitch(OVS)andDataPlaneDevelopmentKit(DPDK).
WhetherthetrafficisfromthevEPCanddestinedforthecloud,orwhetherthetrafficislocallyinterceptedbyMECapplicationsthattheninturnrequireconnectivitytothecloud,ineithercaseOVS-DPDKisconfiguredtodirecttraffictoFlexVNF,whichinturnappliesSD-WANlogictothetrafficflows.
TheentiretyoftheabovearchitectureishostedonasingleserverpoweredbyanIntelXeonDprocessor.
Thesecondandequallyimportantintegrationpointworthhighlightingisthecontrolstack.
Whiletheedgestackispredominantlyconcernedwiththemanagementofpernodetrafficflows,thecontrolstackworkswithnodesacrossthenetworktocoordinatethesetrafficflows.
Thecontrolplaneoversees:4G/5Gcontrolplaneplacement,forexample,MMEonedgevs.
incentraloffice/datacenterLocationofspecificVNFmanagementfunctions;onedgeorincentraloffice/datacenterOpenNESSservicemanagementBothOpenNESSandSD-WANcontrollershandleamyriadofmanagementtaskswithintheirzoneofresponsibility.
TheformerispredominantlyresponsibleforMECapplicationmanagement.
ThelatterisconcernedwiththesecurityandmanagementofanSD-WANbranchnodeandtheWANconnection.
Figure3showsthespecificandnon-overlappingrolesofthecontrollerandOpenNESS.
CERA-basedPlatform>ONAP/OSMcmpMANOOrchestrationOpenNESSControllerOpenNESSEdgeNodeMicroservicesandDataPlaneDirector>SD-WANBranchSD-WANBranch::IPsec/SD-WANSD-WANBranch::StatefulFirewallSD-WANBranch::Routing/CGNATAnalyticsControllerFigure3.
CERA-basedSD-WANcontrolarchitecture.
OneofthekeyrequirementsforenterpriseMECplatformsistheabilitytodeployandupdatenewapplicationsdynamically.
AMECapplicationcanbedeployedon-demandbasedonthetriggersreceivedfromotherMECapplicationsorexternalevents(forexample,asecurityalertcantriggeranimageprocessingapplicationtobedeployedon-premises)orcanbedeployedaspartofnormalchangeprocess.
Ineithercase,wheneveranewapplicationisdeployed,appropriatevirtualprivatenetworksarerequiredinordertoconnecttheplatformtotheirmanagementnetworkand/orotherMECnodes/servers.
4WhitePaper|VersaOffersSD-WANConvergedEdgeSolutionsVersaSD-WANprovidesautomatednetworkingarchitecture.
TheVersaSD-WANsolutionprovidesAPI-basedaccessthatcanbeintegratedwithnorth-boundorchestrators.
Beingmulti-tenanted,multiplenorth-boundorchestrators(eachownedbyindividualapplications)areinstantiatedtocontrolthesegmentofthenetworktheapplicationsoperateon.
Thenorth-boundAPIsprovidefunctionalitytoonboardnewsites,createsegments,configurepolicies,andmonitorthenetwork.
Inasimilarvein,CERA'sOpenNESSControllerpresentsanorth-boundinterface.
Thisinterfaceoffersservicestolifecyclemanageservices,createandincarnatetrafficpolicies,andmanagethenetworkinterfacesonanedgenode.
Coordinationbetweenthesetwonorth-boundinterfacesisthusrequired.
Eachcontrollerisapeertoeachother.
Hence,aMANOlayercanfacilitatethecoordinationofactionbetweenthesecontrolleraspresentedinFigure3.
ConclusionTheedgenetworkisevolvingtosupportconvergedapplicationsrangingfromSD-WANtoIoTto4G/5Gbasestations.
CERAwasdesignedtooffertheperformanceandfunctionalitytodeliverthesenext-generationservices.
ByembracingCERA,VersahasdevelopedanSD-WANsolutionthatutilizestheadvancedfeaturesofCERA-basedplatformstosupportmulti-tenantSD-WANsthathavethedeploymentandmanagementfeaturesformassdeploymentbyCommSPs.
LearnMoreIntelNetworkBuildersEdgeEcosystem:https://networkbuilders.
intel.
com/network-technologies/networkedgeecosystemVersaNetworksSD-WAN:https://www.
versa-networks.
comACRONYMSAIArtificialintelligenceAMFAccessmanagementfunctionCERAConvergedEdgeReferenceArchitectureCommSPsCommunicationsserviceprovidersDPDKDataPlaneDevelopmentKitEPCExtendedPacketCoreFPGAFieldprogrammablegatearrayIPsecInternetprotocolsecurityKPIKeyperformanceindicatorsMECMulti-accessedgecomputingMMEMobilitymanagemententityNMSNetworkmanagementsystemOpenNESSOpenNetworkEdgeServicesSoftwareOSS/BSSOperationssupportsystems/businesssupportsystemsOVSOpenvSwitchRANRadioaccessnetworkSD-WANSoftwaredefinedwideareanetworkuCPEUniversalcustomerpremisesequipmentVNFVirtualnetworkfunction5Inteltechnologiesmayrequireenabledhardware,softwareorserviceactivation.
Noproductorcomponentcanbeabsolutelysecure.
Yourcostsandresultsmayvary.
Inteldoesnotcontrolorauditthird-partydata.
Youshouldconsultothersourcestoevaluateaccuracy.
Intel'scompilersmayormaynotoptimizetothesamedegreefornon-IntelmicroprocessorsforoptimizationsthatarenotuniquetoIntelmicroprocessors.
TheseoptimizationsincludeSSE2,SSE3,andSSSE3instructionsetsandotheroptimizations.
Inteldoesnotguaranteetheavailability,functionality,oreffectivenessofanyoptimizationonmicroprocessorsnotmanufacturedbyIntel.
Microprocessor-dependentoptimizationsinthisproductareintendedforusewithIntelmicroprocessors.
CertainoptimizationsnotspecifictoIntelmicroarchitecturearereservedforIntelmicroprocessors.
PleaserefertotheapplicableproductUserandReferenceGuidesformoreinformationregardingthespecificinstructionsetscoveredbythisnotice.
NoticeRevision#20110804IntelCorporation.
Intel,theIntellogo,andotherIntelmarksaretrademarksofIntelCorporationoritssubsidiaries.
Othernamesandbrandsmaybeclaimedasthepropertyofothers.
0320/DO/H09/PDFPleaseRecycle342546-001US