Constant connectivity in an SD-WAN network

Enterprise Mobility

Article | June 15, 2023

The second quarter of 2020 was the strongest second quarter the data center market has ever recorded. Server shipments in what is seasonally a weak period exceeded 3.4 million units. Despite this record baseline, first data points on 2Q21 indicate server shipments exceeded 3.4 million units yet again. Demand for data center compute continues to be strong and we believe 2Q21 would have been even stronger had it not been for semiconductor supply shortages. We saw strong indication that shortages in CPU substrate materials and other components impacted server supply in 2Q21. This seems to have impacted Intel in particular with AMD gaining share in the quarter. AMD set their own record, for the first time crossing the 15% server market share threshold. It looks like demand from hyperscale cloud service providers, and Google in particular, has been a big contributing factor for AMD’s strong performance. The historic best AMD performance in the data center server market was in 2006 when 14% of the servers shipped were configured with an AMD CPU. 2Q21 indeed proves that the EPYC roadmap is highly competitive. In 2Q21, servers with arm-based CPUs again made up a

Network Infrastructure, Network Management

Article | July 27, 2023

At the tail-end of June, both AT&T and Swisscom announced plans to outsource their 5G mobile core networks to cloud service providers. AT&T’s announcement was with Microsoft Azure. Swisscom’s was with AWS. With the AT&T deal, Azure will be acquiring IP and engineering expertise from AT&T that it can resell to other operators. It was reported that Azure will offer jobs to current AT&T employees, as well. This move suggests Microsoft understands how critical it will be to retain talent that has deep networking knowledge. Swisscom’s deal does not appear to include AWS acquiring any Swisscom assets or employees, but the operator did say it will be using AWS for its own IT applications.

5G

Article | September 28, 2023

Discover network intrusion monitoring with top network monitoring books. Explore insights, best practices, and tools to secure network visibility and processes used in monitoring network performance. Observing networks for performance and security anomalies is crucial for businesses that rely on their business network. Network monitoring solutions monitor performance metrics across an entire network to guarantee that your systems operate properly. From monitoring network performance to ensuring comprehensive visibility, the books listed below will offer a wealth of knowledge and expertise to empower professionals in the networking industry. 10 Network Monitoring Books to Effectively Monitor Performance 1 Zabbix Network Monitoring Author: Rihards Olups Zabbix Network Monitoring book is an indispensable resource for networking professionals seeking to enhance their network visibility and improve network performance monitoring. This comprehensive guide offers an approach to effectively monitor network devices and applications using Zabbix 3.0. One of the network monitoring books, Zabbix Network Monitoring covers essential topics such as data collection, native Zabbix agents, and SNMP devices. It also delves into monitoring Java application servers, VMware, notifications, permission management, system maintenance, and troubleshooting. It empowers readers to build a robust network monitoring solution to gather data from various systems. By exploring the intricacies of Zabbix, this book ensures that network monitoring becomes an efficient and effortless task, ultimately enhancing network visibility and performance for all stakeholders. 2 The Practice of Network Security Monitoring Author: Richard Bejtlich An essential book for networking professionals, The Practice of Network Security Monitoring: Understanding Incident Detection and Response, helps to enhance network visibility and strengthen network security. The book's author, Richard, guides readers through implementing network security monitoring (NSM) as a proactive defense strategy. The book emphasizes integrating NSM into security measures to effectively detect and respond to intrusions. It also provides practical insights on deploying, building and operating an NSM operation using open-source software and vendor-neutral tools. With a focus on proactive incident response, this book equips readers with the knowledge and techniques to establish a robust security net that detects, contains and controls attacks. By implementing the practices outlined in this book, organizations can better safeguard their networks and prevent the loss of sensitive data. 3 Internet and Network Architecture Author: Sang Hinch Internet and Network Architecture: Analyzing Performance with Network Monitoring Tools is a must-read for professionals in the networking industry seeking to enhance network visibility and optimize network performance monitoring. This comprehensive guide offers a thorough introduction to TCP/IP, FTP, IP addresses, ports, and web page retrieval, providing a solid foundation in internet and network architecture. The book explores the complex workings of routers, data transmission, network configuration, and architecture, enabling readers to build efficient and secure networks. Focusing on practicality, it emphasizes using network monitoring tools to analyze performance and troubleshoot issues effectively. By mastering the fundamentals presented in this book, readers will gain the knowledge and confidence to navigate the World Wide Web, understand network protocols, and make informed decisions for network optimization. 4 Zabbix 4 Network Monitoring Author: Patrik Uytterhoeven & Rihards Olups Zabbix 4 Network Monitoring: Monitor the performance of your network devices and applications using the all-new Zabbix 4.0, 3rd Edition is a comprehensive and highly valuable resource for professionals in the networking industry. This book serves as an essential guide to effectively monitor the performance of network devices and applications using Zabbix 4.0. Written for both beginners and experienced users, the book offers a step-by-step approach to help readers quickly grasp the installation process and explore the new features of network monitoring. From understanding native Zabbix agents and SNMP devices to harnessing Zabbix's integrated functionality for monitoring Java application servers and VMware, readers will gain comprehensive knowledge. With insights into optimizing performance, automating configurations, and troubleshooting network issues, it will develop advanced skills to ensure a healthy and efficient network. 5 Applied Network Security Monitoring Author: Chris Sanders & Jason Smith An indispensable book for professionals in the networking industry Applied Network Security Monitoring: Collection, Detection, and Analysis offers a comprehensive guide to become a proficient NSM analyst. Focusing on NSM's collection, detection, and analysis stages, this book equips readers with essential concepts through real-world examples and practical scenarios. Recognizing that prevention is not foolproof, the book emphasizes the critical role of detection and response in minimizing the impact of network intrusions. With insights from experienced NSM professionals and access to sample data, readers gain valuable knowledge to analyze network security incidents effectively. From data collection methods to in-depth coverage of tools like Snort, Suricata, Bro-IDS, SiLK, and Argus, this monitoring book provides hands-on experience and practical examples using real PCAP files. By leveraging Security Onion for lab examples, readers can develop and enhance their analytic techniques. 6 Practical Network Security Monitoring: Using Free Software Author: Elizabeth Graham Practical Network Security Monitoring: Using Free Software offers guidance on utilizing free software to collect, monitor, and analyze network traffic, thereby detecting and identifying potential threats. With a focus on providing practical exercises, this book equips beginner to intermediate users with the necessary knowledge to detect and defend cyber threats. Step-by-step instructions enable readers to install, configure, and effectively use free tools, allowing hands-on experience in analyzing network traffic and identifying malicious activity. This book edition covers Security Onion, introducing significant changes to the platform. The updated content includes new intrusions, malware, PCAP examples, and an introduction to web-based PCAP analysis tools. A bonus chapter challenges readers to test their knowledge through self-assessment. 7 Efficient Body Sensor Networks for Patient Monitoring Author: Jawaid Iqbal Efficient Body Sensor Networks for Patient Monitoring is a book for professionals in the networking and healthcare industry, focusing on the challenges, Body Sensor Networks (BSNs) face in continuously monitoring patient vital signs. BSNs operate in constrained environments and encounter issues such as patient information privacy, secure data transmission over public networks, high overhead, and energy constraints. Being one of the prominent network monitoring books, it presents five efficient and secure attribute-based schemes designed explicitly for BSNs. These schemes address the mentioned challenges comprehensively, providing practical solutions to enhance network monitoring performance in patient monitoring scenarios. By proposing novel approaches, this book contributes to the advancement of efficient and secure patient monitoring within BSNs. 8 Mastering Python Networking Author: Eric Chou A comprehensive guide created for professionals in the networking industry seeking to leverage Python for network automation, monitoring, and management, Mastering Python Networking: Utilize Python packages and frameworks for network automation, monitoring, cloud, and management, focuses on the latest Python libraries and frameworks and equips readers with the necessary skills to tackle common & complex network challenges effectively. From interacting with network devices to implementing advanced features using Python 3, the book covers a wide range of topics, including Docker containers, network data analysis, cloud networking, and DevOps practices. With practical examples and insights into tools like GitLab & ELK, network engineers, developers, and SREs will gain valuable knowledge to enhance their network performance monitoring and visibility. 9 AWS Security Cookbook Author: Heartin Kanikathottu Focusing on securing Amazon Web Services (AWS) infrastructure, AWS Security Cookbook: Practical solutions for managing security policies, monitoring, auditing, and compliance with AWS is written. Being one of the network monitoring books that provide professionals with valuable insights related to network visibility and network performance management in the networking industry, this book offers practical solutions to address common security challenges, including permission policies, key management, network security, and cloud security best practices. Industry professionals can explore various AWS services and features that enhance security, including IAM, S3, CloudWatch, CloudTrail, Config, GuardDuty, and Macie. In addition, the book also covers compliance requirements and demonstrates how to maintain security and compliance using AWS security services. 10 The Best of TaoSecurity Blog, Volume 2 Author: Richard Bejtlich The Best of TaoSecurity Blog, Volume 2: Network Security Monitoring, Technical Notes, Research, and China and the Advanced Persistent Threat, guides professionals in the networking industry, particularly those interested in network security monitoring. Written by Richard Bejtlich, a renowned cybersecurity expert, he curates the best entries from his 17 years of writing on the TaoSecurity Blog. The book explores various intervention detection and response aspects, leveraging threat intelligence sources, network data, application and infrastructure data, and endpoint data. Additionally, it provides insights into Chinese hacking activities over the past two decades, offering a unique perspective from a defender on the front lines. With new analysis accompanying each post, readers can gain valuable knowledge on the evolution of the security industry, defensive methodologies, and strategies for enhancing national security. Conclusion In conclusion, the recommended books discussed in this article provide valuable insights and guidance for networking experts in the B2B sector. These resources cover various aspects of monitoring network performance, enhancing network visibility, and addressing security concerns. By delving into these monitoring books, professionals can gain a deeper understanding of effective network performance monitoring techniques, ensuring optimal visibility across their infrastructure. With the ever-evolving networking landscape, staying up-to-date with the latest trends and best practices, it is crucial for maintaining a high-performing network. These books offer industry-relevant knowledge and empower networking experts to make informed decisions, ultimately leading to a robust and efficient network infrastructure.

Article | August 31, 2021

Network security today is losing the battle and a lot of it is blamed upon the traditional security devices. Imagine running next-gen IT Infrastructure secured by security tools made to secure legacy IT.Data breaches have increased substantially and IT professionals are continuously looking at new ways to improve their network security. In this scenario, SD-WAN emerges as one formidable option to implementthat will bolster your network security. Table of Contents: - What is SD-WAN? - How does SD-WAN work? - What are the main benefits of SD_WAN to network security? - What are the other advantages of SD-WAN? . Let’s dig into it. What is SD-WAN? SD-WAN stands for software-defined wide area network (or networking). A WAN is a connection between local area networks (LANs) separated by a substantial distance—anything from a few miles to thousands of miles. The term software-defined implies the WAN is programmatically configured and managed. So, it can be easily adapted quickly to meet changing needs. How does SD-WAN work? An SD-WAN connects end users to virtually any application, hosted at any location (e.g., in the public cloud or a company data center), via the best available or most feasible transport service, whether that’s an MPLS (Multiprotocol Label Switching), broadband, cellular or even satellite internet link. To deliver this level of flexibility and performance to users in digital workspaces, an SD-WAN utilizes a control function that continuously analyzes traffic flows across the WAN and intelligently directs traffic in accordance with current policies. Centralized control The primary means of control in an SD-WAN is centralized. It often resides in a SaaS application running on a public cloud. Control is decoupled from the hardware to simplify network management and improve the delivery of services. SD-WAN appliances (and virtual appliances) follow operational rules passed down from the central controller. This greatly reduces or eliminates the need to manage gateways and routers on an individual basis. Multi-connection, multi-transport SD-WAN gateways support hybrid WAN, which implies that each gateway can have multiple connections using different transports—MPLS, broadband Internet, LTE, etc. A virtual private network (VPN) is typically set up across each WAN connection for security. Consequently, the SD-WAN can be an overlay spanning a diverse communications infrastructure. Dynamic path selection Another feature of SD-WAN is dynamic path selection—the ability to automatically and selectively route traffic onto one WAN link or another depending on network conditions or traffic characteristics. Packets may be steered onto a particular link because another link is down or not working very well, or to balance network traffic across all available links. SD-WAN can also identify packets by application, user, source/destination, etc. and send them down one path or another based on those characteristics. Policy-based management Policy is what determines where dynamic path selection will steer traffic and what level of priority (quality of service, or QoS) it is given. Business intentions can be implemented as policies via the central management console. New and updated policies are translated into operational rules and downloaded to all SD-WAN gateways and routers under control. For example, to ensure the best performance for VoIP and interactive web conferences, a policy may be created by giving their packets transmission priority and routing them onto low-latency paths. Cost savings can be realized by sending file back-ups across a broadband Internet connection. WAN traffic that requires a high level of security can be restricted to private connections (e.g., MPLS) between sites and required to pass through a robust security stack when entering the enterprise. Service chaining SD-WAN has the ability chain itself together with other network services. WAN optimization (acceleration) is often combined with SD-WAN to improve network and application performance. Internet traffic leaving and entering a branch office may be routed across a VPN to a cloud-base security service to strike a balance between performance, security, and cost. Read more: GET THE MOST OUT OF YOUR SD-WAN: FEATURES YOU NEED TO START USING TODAY What are the main benefits of SD_WAN to network security? Eliminate VPN concerns One of the first areas in which SD-WAN impacts security is when a company uses the internet as a method of transport. Before SD-WAN came along and companies were using internet as a backup or even a primary transport method, they would build a VPN or a DMVPN to ensure secure transport of their traffic. This introduces a couple of issues, the first of which is this proliferation of VPNs that has to be managed. The company must have firewalls sitting at their data center, along with a VPN device or firewall sitting in the remote locations to be able to do these VPNs. Every site is dependent on the effort to be up on the network. - Hamza Seqqat, Director of Solutions Architecture, Apcela Failover is an issue with this VPN approach, he said. Companies can’t seamlessly failover from a fiber-based type of transport without having to strike some keys in between. It's hard and expensive to do seamless failover. “Now you don't have to have firewalls for VPNs. You don't have to worry about building your own VPNs or encrypting your traffic,” Seqqat said. “Every SD-WAN product comes with a controller that takes care of things seamlessly. That means there is this smart software-defined engine that builds all these IPsec tunnels between all the locations as soon as you plug the device in. You're not actually having to build a VPN—the controller does it automatically for you, so all you have to do is give the device an IP address or enable DHCP and let it pick an IP address from the DHCP server. Suddenly it's on the network and its building tunnels to all the sites.” He added that the SD-WAN controller builds a full mesh, so it can talk to every one of the sites without having to go back to the data center. This feature alone can reduce a company’s security footprint significantly because the site-to-site traffic becomes secure, easy, and seamless. Reduce traffic going through security A second significant benefit of SD-WAN that impacts security strategy is that it reduces the amount of traffic that needs to go through security parameters because all site-to-site traffic is encrypted. This makes security a bit easier to manage.“For a lot of companies, when they do VPNs for site-to-site traffic, they have to go through firewalls or some kind of encryption mechanism, and that increases their security footprint. It increases the complexity and the cost of security,” Seqqat said. “SD-WAN changes how traffic is routed through security.” Seqqat gave an example of a site that has a gig worth of bandwidth, and out of that gig of bandwidth, some traffic goes to the internet and some goes to site-to-site. “Without SD-WAN, generally you would have to run that whole gig through a firewall, and the firewall will split the traffic into what goes to the data center and what goes to the internet,” he said. “When you do SD-WAN, you don't have to do that. You can separate the traffic at the SD-WAN with a split tunnel, so you take half of the traffic and push it through the firewall to go to the internet and the other half goes straight site-to-site without having to go through a security parameter. Now you have a firewall to handle 500 megs as opposed to a gig, and that makes a huge difference because most security products are based on throughput and utilization. So, that can bring some cost benefits and ease management as well.” Security inherent to SD-WAN A third area where SD-WAN changes security strategy is the fact that certain security features can be implemented directly through the SD-WAN platform, which reduces costs and complexity in the actual security platform. “This depends on what aspects of security you're talking about,” Seqqat said. “For example, security is included in the Silverpeak SD-WAN product, so the Silverpeak devices really do most of the security for you. You don't have to deploy another firewall on top of that. With Versa’s SD-WAN, you can virtualize the firewall, so there’s no need to deploy physical firewalls.” For sites that simply need very basic security, SD-WAN has some inherent security capabilities. It can do things such as allow and deny certain sites and limit traffic that goes to certain sites. When you look at most SD-WAN products, you can usually kind of steer toward one or another based on your security requirements. Deploying SD-WAN in itself can really eliminate the need for security at several locations or extend the security you have been using. - Hamza Seqqat, Director of Solutions Architecture, Apcela Simplify use of security platforms In his final point, Seqqat said SD-WAN providers are making a lot of progress in partnering with both cloud security providers and cloud service providers. By making traffic encrypted and secure via SD-WAN, security platforms will only have to deal with public internet traffic. “SD-WAN providers are really working towards partnering and certifying different security products,” he said. “Consider Zscaler as an example. Some SD-WAN products automatically route all your traffic through Zscalar, which does a cloud-based security parameter before it goes out to the internet or to cloud service providers.” Seqqat said the most important part comes in the fact that Zscalar is distributed across 35 or 40 data centers that are all security parameters. “Making that routing decision as to what data center your traffic goes through before it goes out to the Internet is extremely important to performance,” he said. “If your Office 365 instance is hosted in Seattle and your users in Europe are trying to reach that, which Zscalar data center the traffic is going to go through before it goes through the Seattle instance of O365 makes all the difference in what latency is going to be at round trip. “SD-WAN provides somewhat of an automation and optimization of how traffic goes through Zscalar data centers based on performance metrics. SD-WAN can pull latency and jitter and packet loss and all that kind of stuff, so there is some intelligence that happens when a routing decision is being made as to where user traffic is going to go for security scrubbing or security features before it goes out to the cloud provider or to the Internet. That’s a huge feature that comes into play whenever you deploy SD-WAN.” Read more: FOR SERVICE PROVIDERS SD-WAN IS A MIXED BLESSING What are the other advantages of SD-WAN? SD-WAN has many advantages when implemented well: More predictable and reliable application performance, which helps support users in any digital workspace, across all connections. Superior connection security for cloud applications, without the performance tradeoffs of MPLS backhauling. Congestion reduction due to lack of bandwidth or brownouts with aggregation of bandwidth via multiple bonded and disparate or redundant links. More reliable access to apps and fewer slowdowns due to congestion. Resiliency and redundancy with fast failover when outages impact WAN connections. Quality of service for prioritizing business-critical application traffic. Fast deployments that fuel business agility when bringing applications online at a branch office, or simply changing the configurations. Zero-touch provisioning allows fast set up of sites in minutes with local staff instead of hours or days. Reduced network transport costs and more flexibility through the use of MPLS-alternatives like broadband and cellular. Quick procurement of bandwidth from multiple transport services, contrast to the long lead times needed with legacy WAN carrier-based technologies. Simplified administration with a centralized console eliminates the complexity of configuring edge devices in the field. Deep SD-WAN analytics to monitor links for performance characteristics. Analytics benefit administrators who can use them when troubleshooting problems across the WAN. Simpler branch office infrastructure that doesn’t require management of as many single-function devices Intelligent traffic steering and dynamic path selection Integrated security with leading 3rd-party solutions, including those for SaaS security Conclusion Interest in SD-WAN among organizations is on the rise, and we hope to see a tremendous rise in its adoption in network security strategies over the next few years. Vendor selection will be one of the factor for successful implementation of SD-WAN, as many are quickly developing new and effective software-defined platforms. An ideal vendor would be the one who effectively addresses your specific pain points and is able to meet your current as well as future requirements. Read more: SD-WAN SECURITY: THE IMPACT OF ORCHESTRATED SERVICES MULTIPLICITY