Latest

Cisco Viptela SDWAN: Transit VPC in AWS and DIA- Direct Internet Access

Cisco Viptela SDWAN: Transit VPC in AWS and DIA- Direct Internet Access


Today we will talk about the extension of the Cisco Viptela SDWAN in the cloud. The purpose to extend the full capabilities into the cloud. With the extension of the Cisco Viptela SDWAN will extends a common policy framework across SD-WAN fabric and cloud.

How will VPC/VNET works with the Cisco SDWAN solution?
A Transit VPC/VNET is created within the Cloud Service Provider, automatically. A pair of vEdge Cloud routers are then instantiated within this Transit VPC/VNET. A pair of standard-based IPSec tunnels is stretched from Transit VPC/VNET to each host VPC/VNET. This provides Connectivity redundancy.

Cisco Viptela SDWAN: Transit VPC in AWS and DIA- Direct Internet Access
Fig 1.1- Cisco Viptela SDWAN with Transit VPC on AWS


How we connect the vEdge with the cloud ?
BGP is established across IPSec tunnels for route advertisement. Bi-directional BGP/OMP redistribution on Transit VPC/VNET vEdge Cloud routers and no change to existing compute VPCs/VNETs

       DIA: Direct Internet Access for Cloud Access
Cisco Viptela SDWAN: Transit VPC in AWS and DIA- Direct Internet Access
Fig 1.2- DIA with Cisco SDWAN

Generally DIA is recommended when we have the design option for Cloud onRamp for IaaS deployments. Cisco Viptela SDWAN fabric routers have direct adjacency to Cloud service provider instance via SDWAN overlay.

DIA is a component of the Cisco SD-WAN architecture in which certain Internet-bound traffic or public cloud traffic from the branch can be routed directly to the Internet, thereby bypassing the latency of tunneling Internet-bound traffic to a central site. 

AWS Direct Connector Microsoft Azure Express Route utilized to provide high-speed, private access into Cloud Service Provider via Co-location or Data Center.

Co-location Centers allow you to rent equipment, bandwidth, or space in a cabinet located in a secure public data center. The co-location provider provides flexibility to directly connect with a variety of telecommunications, network, and cloud service providers on-site.

Carrier-Neutral Facility (CNF) utilized to provide high-speed, inexpensive access into Cloud Service Provider backbone.

Benefits of using DIA
  1. Reduced bandwidth consumption, latency and cost savings on WAN links by offloading Internet traffic from the private WAN circuit.
  2. Improved branch office user experience by providing Direct Internet Access (DIA) for employees at remote site locations
This article is on the basic of the Cisco SDWAN onRamp solution. We will discuss all the use cases one by one.