Layer 02 · Network · Project or subscription
SD-WAN: Branches and Cloud on One Network
SD-WAN (software-defined wide area networking) is how STP connects a head office to branches across Armenia, and the head-office data centre to AWS, Google Cloud and Azure: one centrally managed overlay that uses the links each site has, sends each application over the path that suits it, and keeps branch traffic segmented and encrypted.
Overview
A branch network built from separate links and per-site configuration works until it has to change. Every new branch is another router configured by hand, every outage is diagnosed site by site, and traffic to the cloud travels through head office because nothing else was designed.
SD-WAN puts every site under one policy. Branches across Armenia join the same overlay as the head office, each using the links it has, such as fibre, a second provider or mobile, and traffic is steered per application: business systems and voice on the best path, bulk transfers on the cheapest, with automatic failover when a link degrades.
The same overlay reaches the hyperscalers. The head-office data centre connects to AWS, Google Cloud and Azure over dedicated interconnects or encrypted tunnels, with routes exchanged by BGP, so hybrid workloads reach the cloud on a designed path and the cloud becomes another site on the map.
It is designed with the rest of the network: segmentation carries across every site, the same monitoring watches every link, and the WAN is documented like the LAN.
What is included
- Site and link survey for the head office and every branch
- SD-WAN design: overlay, topology and application policies
- Branch onboarding on a standard configuration per site
- Multiple links per site, such as fibre, a second provider or mobile
- Application-aware path selection and automatic failover
- Encrypted overlay with segmentation carried end to end
- Head-office data centre connectivity to AWS, Google Cloud and Azure
- BGP routing between sites and cloud regions
- Central monitoring of every link and site
- Delivered as a project or within Network-as-a-Service
What you get out of it
- A new branch connected on a standard pattern, not a one-off
- Business traffic kept on the best path when a link degrades
- Cloud workloads reached on a designed path, not by accident
Technologies we deliver it with
Named to describe what we work in. Not a claim of partnership, endorsement or certification.
Questions
- What is SD-WAN?
- Software-defined wide area networking: a layer that joins all of an organisation's sites over whatever links they have and manages them centrally, choosing the path for each application and failing over automatically when a link degrades.
- Can SD-WAN connect our data centre to AWS, Google Cloud and Azure?
- Yes. The head-office data centre is connected to the cloud regions you use over dedicated interconnects or encrypted tunnels, with routing exchanged by BGP, so the cloud joins the same network as your sites.
- Do we have to replace our branch internet links?
- Usually not. SD-WAN uses the links each site already has and adds a second one where resilience requires it. We survey the sites first and tell you which links to keep.
Standards and references
Talk to an engineer about SD-WAN: Branches and Cloud on One Network
A live engineer calls you back within 1 hour.