SD-WAN 隧道技术与组网模式  

SD-WAN tunnel technology and network constuction

作　　者：牛佳 颜永明[1] 林志华 NIU Jia;YAN Yongming;LIN Zhihua(Shanghai Branch of China Telecom Co.,Ltd.,Shanghai 200085,China)

机构地区：[1]中国电信股份有限公司上海分公司,上海200085

出　　处：《电信科学》2021年第1期137-146,共10页Telecommunications Science

摘　　要：介绍了SD-WAN技术现状,比较了SD-WAN相对传统专线的优势,描述了SD-WAN的基本技术特征,对SD-WAN的软件定义网络控制器、安全加密与租户隔离、SD-WAN业界标准进行了说明。通过分析与SD-WAN主流厂商相关的技术,对SD-WAN所用的隧道技术进行比较,对不同厂商选用的私有IPSec隧道、VxLAN over IPSec、NvGRE over IPSec、SSL隧道等组网方案做了分析比较,给出了优选的隧道技术方案。并进一步针对如何应用隧道技术实现组网,结合运营商组建SD-WAN的优势,提出优化意见,给出了POP点组网和点对点组网方案。最后对SD-WAN未来标准的制定、运营商与SD-WAN厂商的未来发展趋势进行了展望。The status of SD-WAN technology was introduced,the SD-WAN advantages with traditional line were compared.The basic technical features of SD-WAN,the software definition network controllers of SD-WAN,security encryption and tenant isolation,the SD-WAN industry standards were described.The relevant technologies of SD-WAN main manufacturers were also analyzed,the tunnel technology used by SD-WAN was compared.And private IPSec tunnel,VxLAN over IPSec,NvGRE over IPSec,SSL tunnel network project used by the different companys was compared and analyzed,the optimized tunnel technology project was given,and optimizational suggestions on how to use tunnel technology to complete networking project were further put forwarded,combined with the advantages of Internet service product in establishing SD-WAN,the POP network and peer-to-peer networking solutions were given.Finally,it make future development prospect for SD-WAN standards,Internet service product and SD-WAN manufacturers trends.

关 键 词：SD-WAN VxLAN IPSEC NvGRE 

分 类 号：TN915.41[电子电信—通信与信息系统]