WirePlanner: Fast, Secure and Cost-Efficient Route Configuration for SD-WAN (2311.15099v1)
Abstract: As enterprises increasingly migrate their applications to the cloud, the demand for secure and cost-effective Wide Area Networking (WAN) solutions for data transmission between branches and data centers grows. Among these solutions, Software-Defined Wide Area Networking (SD-WAN) has emerged as a promising approach. However, existing SD-WAN implementations largely rely on IPSec tunnels for data encryption between edge routers, resulting in drawbacks such as extended setup times and limited throughput. Additionally, the SD-WAN control plane rarely takes both latency and monetary cost into consideration when determining routes between nodes, resulting in unsatisfactory Quality of Service (QoS). We propose WirePlanner, an SD-WAN solution that employs a novel algorithm for path discovery, optimizing both latency and cost, and configures WireGuard tunnels for secure and efficient data transmission. WirePlanner considers two payment methods: Pay-As-You-Go, where users pay for a fixed amount of bandwidth over a certain duration, and Pay-For-Data-Transfer, where users pay for the volume of transmitted data. Given an underlay topology of edge routers and a user-defined budget constraint, WirePlanner identifies a path between nodes that minimizes latency and remains within the budget, while utilizing WireGuard for secure data transmission.
- Alibaba Cloud. Elastic Compute Service. https://www.alibabacloud.com/product/ecs
- Pricing - Bandwidth |||| Microsoft Azure, https://azure.microsoft.com/en-us/pricing/details/bandwidth/
- All networking pricing |||| Virtual Private Cloud |||| Google Cloud, https://cloud.google.com/vpc/network-pricing
- EC2 On-Demand Instance Pricing - Amazon Web Services, https://aws.amazon.com/ec2/pricing/on-demand/
- Donenfeld, Jason A. ”Wireguard: next generation kernel network tunnel.” NDSS. 2017
- Business VPN |||| Next-Gen VPN |||| OpenVPN, https://openvpn.net/
- RFC 4301: Security Architecture for the Internet Protocol, https://www.rfc-editor.org/rfc/rfc4301
- Cisco SD-WAN Design Guide, https://www.cisco.com/c/en/us/td/docs/solutions/CVD/SDWAN/cisco-sdwan-design-guide.html#Components
- Versa Secure SD-WAN |||| Versa Networks, https://versa-networks.com/products/sd-wan/
- Meraki Auto VPN - Configuration and Troubleshooting, https://documentation.meraki.com/MX/Site-to-site_VPN/Meraki_Auto_VPN_-_Configuration_and_Troubleshooting
- What Is SD-WAN? - Software-Defined WAN (SDWAN) - Cisco, https://www.cisco.com/c/en/us/solutions/enterprise-networks/sd-wan/what-is-sd-wan.html
- Rangan, Raghavan Kasturi. ”Trends in sd-wan and SDN.” CSI Transactions on ICT 8.1 (2020): 21-27.
- What Is SD-WAN? Software-Defined WAN - Intel, www.intel.com/content/www/us/en/communications/what-is-sd-wan.html
- What are the Benefits of SD-WAN? - Cisco, https://www.cisco.com/c/en/us/solutions/enterprise-networks/sd-wan/benefits.html
- Cisco SD-WAN Cloud scale architecture, https://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise-networks/sd-wan/nb-06-cisco-sd-wan-ebook-cte-en.pdf
- Cloud Router Overview |||| Google Cloud, cloud.google.com/network-connectivity/docs/router/concepts/overview
- Cloud Router - Packet Fabric, https://packetfabric.com/cloud-router
- Advantages of Cloud Managed Routers, https://novotech.com/cloud-managed-routers/
- ping, https://linux.die.net/man/8/ping
- Cisco, https://community.cisco.com/t5/networking-knowledge-base/sd-wan-overview-amp-advanced-deployment-lab-part-1/ta-p/4387959