SD-WAN plays an important role in the enterprise digital transformation. When enterprise applications ran exclusively on site or in private data centers, traditional wide area network (WAN) services interconnecting enterprise sites and data centers were sufficient. However, as enterprise applications migrated to the public cloud as software-as-a-service or workloads running in Virtual Private Clouds (VPCs), traditional WAN services proved inadequate to address these new application requirements. This led to the rise of software-defined WAN services.
An SD-WAN service is an overlay network service that operates over-the-top of traditional WAN connectivity (underlay) services. Unlike traditional WAN services, SD-WAN services also are cognizant of subscriber applications and thus can apply policies, e.g., quality-of-service, security, WAN cost policies, etc., to unique application flows rather than indiscriminately on packets for all application. SD-WAN services also leverage local and remote Internet access connections to dynamically select the path with optimal performance to connect to SaaS applications.
A major industry challenge today is the lack of a formal definition of an SD-WAN service. In other words, what are the minimum set of capabilities required for one to be able to claim that a service is an SD-WAN service? Without an industry standard definition, buyers need to be very meticulous when comparing services branded as "SD-WAN." Sellers also must expend an excessive amount of time explaining their SD-WAN service capabilities as part of the pre-sales process. If an industry definition existed, one could simply refer to that definition thus saving time and effort for buyers and sellers as they evaluate, sell and compare SD-WAN service offerings.
MEF is creating an SD-WAN service definition to do just that -- describe the core, baseline capabilities of such a service to help buyers and sellers of SD-WAN services. In the spirit of agile development methodologies, MEF plans to define the requirements for a "minimum viable service" -- the fundamental capabilities for an offering to be considered an SD-WAN service. This work will be augmented frequently through MEF's new agile standards development process. The MEF standardization of an SD-WAN service will accelerate industry growth as MEF has exemplified with its work standardizing Carrier Ethernet services.
As part of this SD-WAN work, MEF is defining the core capabilities and components that encompass an SD-WAN service as they have done for Carrier Ethernet, IP, and Optical Transport service definitions. Below is a preview of the MEF's SD-WAN Service definition work in progress that will be discussed at the MEF18 event in Los Angeles on October 29.
Core SD-WAN service capabilities:
- Secure, IP-based virtual overlay network
- Operates over any underlay network (MPLS, CE, Broadband, LTE, etc.)
- Real-time QoS performance monitoring of underlay networks
- Application-aware networking
- Underlay network bonding to utilize all underlay network bandwidth
- Higher availability via multiple underlay networks from multiple service providers
- Policy-based packet forwarding (or blocking) by application versus indiscriminately on all IP packets
- Local and Remote Internet Breakouts for optimal SaaS and Public Cloud Performance
SD-WAN service components:
- Application flow classification
- Real-time QoS performance measurements over each Underlay Connectivity Service for making packet forwarding decisions based on individual application flows
- Encrypting packets before sending over a particular WAN
- Determining whether application flows should be sent over a TVC or a local Internet breakout connection based on bandwidth cost, security, QoS, SaaS application in public cloud, etc.
- Enforcing Policies on different application flows before forwarding over a TVC.
SD-WAN services are typically deployed over existing Underlay Connectivity Services at the subscriber site. The SD-WAN Edge is placed between the subscriber's network and the WAN demarcation devices provided by the WAN service srovider. Such devices include Ethernet NIDs, DSL/Cable/LTE Modems, MPLS CE routers and IP routers which provide the service termination for Carrier Ethernet (CE), Internet and LTE services.
The SD-WAN Edge functionality may be placed in a VPC operating in a public cloud provider's infrastructure, e.g., AWS, Azure or GCP. The SD-WAN Edge virtual network function (VNF) running in the VPC enables the enterprise subscriber to use an SD-WAN service to securely interconnect their physical sites with workloads in their VPC dynamically and seamlessly over multiple operator networks. This is what makes an SD-WAN service unique when compared to traditional WAN connectivity services.
As enterprises increasingly move their workloads to VPCs, they need their physical office locations to connect to their VPC securely and reliably. Unlike a physical SD-WAN Edge operating a subscriber location, the SD-WAN Edge VNF operating in the enterprise subscriber's VPC needs more sophisticated onboarding and lifecycle management by the service provider delivering the SD-WAN service.
This requires ETSI MANO functionality used in conjunction with the SD-WAN service orchestration and control provided by MEF's LSO. Additionally, MEF has several active LSO projects from business operations, e.g., service quotations, through service activation, e.g., network resource provisioning that are readily extensible to SD-WAN services. MEF's holistic approach to services, from service ordering through service delivery and lifecycle management, will accelerate enterprise digital transformation through SD-WAN service growth and market adoption. To learn more about MEF's SD-WAN work, attend the upcoming MEF18 event Oct. 29-Nov. 1 in Los Angeles or visit mef.net/services/sd-wan,
— Ralph Santitoro is a MEF Distinguished Fellow and Head of SDN/NFV/SD-WAN Services at Fujitsu Network Communications. Ralph is a lead contributor to MEF's SD-WAN work and authored MEF's "Understanding SD-WAN Managed Services" paper. At Fujitsu, he and his team defined, developed and launched SD-WAN-as-a-Service, an over-the-top, subscription-based SD-WAN managed service.