Huawei SD-WAN Solution

Huawei SD-WAN Solution HUAWEI TECHNOLOGIES CO., LTD.

1 Trends and Challenges Faced by Enterprise Networks Enterprise IT architecture is continuously transforming towards the cloud architecture, and public clouds such as Amazon Web Services (AWS) are emerging and becoming widely used. This drives infrastructures such as enterprise data centers to move to the cloud. More and more enterprises begin to use public clouds, making the network architecture of enterprises more open. At the same time, key applications of enterprises gradually migrate to the cloud. Relying on SaaS (such as Office 365, production ERP system, and Salesforce) provided by application service providers, an increasing number of enterprises access key office applications from the cloud through the Internet. Cloudification represents both a technical revolution and business model transformation. Enterprises face many challenges as branch services migrate to the cloud. 1 Huawei SD-WAN Solution

1 Traditional Leased Lines Are Expensive, so Cost-Effective All- Scenario Connections Are Required to Meet Requirements of Increasing WAN Traffic 2 As enterprise networks frequently interact with cloud data centers, high network bandwidth is essential. Traditionally, enterprises use carriers' Multiprotocol Label Switching (MPLS) leased lines for WAN interconnection. Although this method guarantees network quality, it requires enterprises to spend a great deal on MPLS leased lines, which accounts for more than 50 percent of enterprises' Operating Expense (OPEX). Unstable Applications: Numerous Applications Share Bandwidth and Service Conflicts Lead to Poor User Experience In addition to traditional leased lines, the Internet offers another option for enterprises but does not guarantee service quality. Additionally, traditional networks cannot detect services and therefore cannot obtain the application status. When burst traffic causes link congestion or quality deterioration, Internet connections cannot guarantee the quality of mission-critical services. 3 Long Service Provisioning Process: Traditional Methods Cannot Meet Requirements for Flexible Service Deployment On traditional leased lines, the provisioning of new services requires multiple tasks, such as in-store application, service provisioning, and onsite configuration the service provisioning alone usually takes from one month to three months. As cloudbased transformation progresses, enterprises update services more rapidly. Current networks cannot meet requirements for fast service provisioning. 4 Network O&M Difficulties: Invisible Service Traffic and Low O&M Efficiency Traditional leased lines require onsite device maintenance by dedicated personnel. Enterprises that have branches in many locations and a large number of devices deployed may find it difficult and expensive to maintain the branch networks. Additionally, as services expand and become cloud-based, WAN traffic between the headquarters, branches, public clouds, and private clouds becomes more complex. Traditional network O&M methods cannot adapt well to service development. Huawei SD-WAN Solution 2

2 Huawei SD-WAN Solution Huawei provides a Software-Defined WAN (SD-WAN) solution to solve enterprise network problems, including high cost, poor experience, slow deployment, and difficult O&M. Huawei SD-WAN Solution provides on-demand interconnection between branches; between branches and data centers; and between branches and the cloud. To deliver assured service experience, the solution re-architects the end-to-end service handling on enterprise leased lines through application-based intelligent traffic steering and acceleration, on-demand Value-Added Services (VASs), and intelligent O&M. 2.1 Architecture of Huawei SD-WAN Solution Huawei SD-WAN Solution architecture includes the network connection layer, cloud management platform, and application layer. Application layer BSS/ OSS Selfservice portal VAS Store Open API Cloud management platform Fault prediction and backtracking Agile Controller Analyzer Application and Policy execution network status insight Network connection layer: combination of any links Branch A vfw vwoc ucpe xdsl Eth LTE Internet MPLS LTE VPC/VNET vcpe Public Cloud vcpe Private Cloud Branch B CPE HQ/DC CPE/uCPE Figure 2-1 Architecture of Huawei SD-WAN Solution 3 Huawei SD-WAN Solution

Network connection layer The solution uses links that include the Internet and traditional leased lines to provide interconnection between enterprise headquarters, branches, public clouds, and private clouds. This layer includes devices such as Customer-Premises Equipment (CPE), universal CPE (ucpe), and virtual CPE (vcpe), as well as Huawei SDN overlay technology to achieve on-demand network-wide connections. The SDN-based Agile Controller implements unified device management, unified overlay network control, and automatic service delivery. Cloud management platform layer The Agile Controller uses NETCONF to manage devices in the southbound direction and interconnects with the application layer through RESTful interfaces in the northbound direction. Application layer The application layer includes a third-party Business Support System (BSS), Operations Support System (OSS), service portal, and app store. The Agile Controller provides northbound interfaces so that it can be integrated with third-party applications. 2.2 Characteristics of Huawei SD-WAN Solution This solution has the following characteristics: All-scenario interconnection Supports flexible bundling of many types of WAN links (such as xdsl and LTE/4G) over MPLS or the Internet. Supports different WAN Topologies, such as hub and spoke, partial mesh, full mesh with automatic creation of VPN connections Provides various networking and access modes, such as single-cpe or dual-cpe networking, single-hub or dualhub networking, and SaaS access. Achieves hybrid access of low-cost Internet links and leased line links. Allows deployment of vcpes on the cloud, optimizing cloud service access. Reduces WAN bandwidth leasing costs by 50 percent while guaranteeing the quality of mission-critical services. Application experience optimization Supports identification of over 6,000 applications and identification of special industry applications based on user-defined applications. Achieves intelligent service detection and application-based intelligent traffic scheduling and ensures optimal performance for key applications through technologies such as IP Flow Performance Measurement (IP FPM), Smart Policy Routing (SPR), and three-level QoS traffic scheduling. Achieves intelligent acceleration of key applications and improves service performance through methods such as optimization of WAN transmission and applications. On-demand VAS Uses serialized x86/arm-based open ucpes to cover branches of various scales. Includes 10+ mainstream VASs (such as vfw and vwoc) to enable on-demand service expansion. Offers full-lifecycle VNF management and automatic service chain orchestration, with VAS provisioning within minutes. Visualized & intelligent O&M Enables flexible deployment (USB-based and email-based) with plug-and-play devices and VNF automatic deployment by dragging. Simplifies branch network deployment through automatic configuration of all services based on templates, including service policy configuration, VAS orchestration, and VPN dynamic connection. Support system software upgrade automatically based on task policies. Support application-based reports, including connection bandwidth, connection quality, application quality, statistic of visitors, etc Supports visualized management of applications and links, on-demand display of user-defined reports, and fault prediction and quick fault locating. Huawei SD-WAN Solution 4

3 Application Scenarios of Huawei SD-WAN Solution 3.1 Enterprise-Built SD-WAN Interconnection In Huawei's enterprise SD-WAN solution, an independent Agile Controller is deployed locally, as shown in Figure 3-1, to enable the enterprise to manage its own SD-WAN services. Control domain Site1 MPLS Agile Controller Site2 Internet Enterprise HQ/DC Site3 Figure 3-1 Enterprise-built SD-WAN 3.2 Carrier SD-WAN Supporting Multiple Tenants In Huawei's carrier SD-WAN solution, the carrier provides the Agile Controller as a unified management and control component to offer SD-WAN services to multiple enterprises. Each enterprise is a tenant of the management and control component, and each enterprise can manage the SD-WAN services of every site within their scope. Enterprise A Site 1 Control domain A (service scope perceived by tenant A) Enterprise A Site2 MPLS Enterprise A HQ/DC Agile Controller Internet Enterprise B Site1 Carrier Enterprise B Site2 MPLS Control domain B (service scope perceived by tenant B) Enterprise B HQ/DC Service scope controlled by carrier SD-WAN Figure 3-2 Carrier SD-WAN supporting multiple tenants 5 Huawei SD-WAN Solution

4 Huawei SD-WAN Solution Products The main products in Huawei SD-WAN Solution are the Agile Controller, CPE, ucpe, vcpe, and VASs. HQ/DC Application vcpe AR1000V vfw USG6000V Third-party VAS Leading vcpe enables on-demand performance and function provisioning, as well as flexible service customization KVM/FusionSphere/VMware multiplatform compatibility Flexible deployment in branches, DCs, and public clouds Internet vcpe/ Gateway Lease Line AR160 CPE AR2240 AR3200 Data/voice/security/WLAN/LTE multiservice convergence Multi-core architecture, excellent performance, and optimal branch service experience Modular design, covering all types of branch scenarios CPE Branch ucpe ucpe(ar G3) AR650 AR1600 AR3600 Small-sized branch Medium-sized branch Large-sized branch/hq ucpe, supporting flexible cards and integrating 10+ WAN interface types (such as xdsl, Ethernet, and LTE) NFV architecture achieves full-lifecycle management of local VASs and quick deployment of VASs Flexible deployment modes (such as email-based and USB-based) simplify management Figure 4-1 Portfolio of Huawei SD-WAN Solution The following table describes functions of each component in Huawei SD-WAN Solution. Component Product Function Description Controller VAS CPE ucpe vcpe Agile Controller Includes: Huawei-developed software, for example, vfw (USG6000V) Third-party software, for example, Riverbed's WAN acceleration (SteelHead VCX) Traditional CPE such as AR161EW and AR3260 AR1600/AR650 series, such as AR1610-X6, AR651W-X4, and AR651-X8 AR1000V Centralized and automatic management of network devices VNFs and independent software Traditional Access Routers supporting evolution to SD-WAN Support 3rd party VNF automatic installation and service chain orchestration based on KVM/QEMU/Docker Can be installed on a public cloud (AWS/ Azure/Huawei), VMs, or independent servers for interconnection between a branch and a hub node, or between a branch and the service on the cloud. Huawei SD-WAN Solution 6

Copyright Huawei Technologies Co., Ltd. 2018. All rights reserved. No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co., Ltd. Trademark Notice, HUAWEI, and are trademarks or registered trademarks of Huawei Technologies Co., Ltd. Other trademarks, product, service and company names mentioned are the property of their respective owners. General Disclaimer The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice. HUAWEI TECHNOLOGIES CO., LTD. Huawei Industrial Base Bantian Longgang Shenzhen 518129, P.R. China Tel: +86-755-28780808 www.huawei.com