Tips and Tricks: (Part 1) Build Permanent Overlay Tunnels to 2 (or 3) Data Centers

 

 In a recent course when we spoke about Cloud-VPN and how to build permanent tunnels to a Data Center, students asked the very valid question:

"How can we build permanent tunnels if we have 2 Data Centers ?"

As normally only one DC will have permanent tunnels established

When defining 2 different Hubs only the preferred Hub (Order 1) will get a permanent Overlay tunnel established


But there is a second  possibility to select Hubs with a different order

When we choose Branch to Branch VPN via Hub and reverse the order of our 2 Hub locations

Now we have permanent tunnels to both DCs (DC1-Cluster and BR-3)


Alternative we can set Cloud-VPN up also in this way:

Again the branches will set up permant tunnel to both DCs (DC1-Cluster and BR-3)

The caveat here is, that we should have either cluster or high availaibilty chosen for the Hub selected aa Backhaul, as we do not have a second one for backup.

And by combining both setups we can even establish permanent tunnels to 3 DCs


 Now we have permanent tunnels to 3 DCs possible.

The only additional caveat is, that for the initial E2E traffic the 3rd DC will be used

In that way we achieve the goal of setting up permanent overlay tunnels to 2 or even 3 Data Centers

Comments

Post a Comment

Popular posts from this blog

Deep Dive on DMPO and its Performance Features (available and missing) Part 1

Image
 In the last year I got quite deep insight into ther vendors SD-WAN implementation and also have seen what various vendors are critizising about the VMware DMPO features. Also there are a lot of misconceptions on the market around some of these features. So let´s try and evaluate and look a little bit deeper into typical performance features and the VMware implementation of them Features discussed in this Blog (Part 1) Per Packet Load Balancing Forward Error Correction (FEC) Packet Replication Latency Remediation The following Features will be discussed in Part 2 of my blog TCP Optimization Techniques Dejitter Buffering SAAS Application Monitoring   Per Packet Load Balancing  Unfortunately this term can be quite easily misinterpreted, when you Google for the term and get the following result:  This behaviour (often criticized by other vendors about VMware) as described above would only work quite well when you have very similar or equal connections. If for example 2 ...
Read more

Deep Dive on DMPO and its Performance Features (available and missing) Part 2

Image
  The following Features will be discussed in this second part of my blog TCP Optimization Techniques Dejitter Buffering SAAS Application Monitoring   Before diving into the mechanism here an important basic fact:     Remediation is never done for applications classified as LOW priority     TCP optimization TCP has some embedded traffic management capabilities for reliable traffic delivery  (window.size, slow-start, RTT handling,...)  But there are a bunch of factors which can negatively influence the performance, like Latency TCP-slow-start Last Mile network problems Out of Sequence packets Busty losses end host TCP limitations (missing fatures like SACK, windows scaling or timestamp options)  Typically TCP optimization helps on the transmission side and improve the download time for large data transfers over latency-high and lossy WAN links. But it can also be used for improving perfomance when on the receiver side the amount ...
Read more

Secure Edge CLI Access: Addditional Useful Commands and Parameter

Image
 additionally to the possible commands and paramteres described in the docu Secure Edge CLI: Output Examples V5.2 there are a lot of useful commands and procedures you can use  Here some of the commands which does not have a direct representation in the Remote Diagnostics debug --dec  <shows the actual detailed status and QOE for each path RX and TX>   debug --peer_stats all <shows packet counts and peer-is for all peers> the peer-id is needed for a detailed dump of peer statistics per peer diag PATHS_DUMP --peer <peer-id> <shows counter and QOE parameters for all paths to a specific peer> for a nice display you need a terminal window of 350 chars/line if you have priviledged shell access you can also use cd /opt/vc/bin in this directory you find a lot of internal but useful prgrams, phyton or shell scripts like...  ./dispcnt here an example for usage:   ./dispcnt -s  bgp -t 15 -z   shows all non-zero bgp counter updated e...
Read more