Subject: [OPSAWG] solicit feedback to a new type of private network: like SD-WAN, but different in a way that many key properties of private network can be guaranteed ...

From: Linda Dunbar <[email-masked]>
Date: Tue, 8 Nov 2016 16:44:25 +0000

Dear Ops-area experts,

Many of you probably have heard of SD-WAN lately. Not sure if people are aware that without proper interaction with the underlay network, some key properties of private network can't be guaranteed.
https://datatracker.ietf.org/doc/draft-dunbar-opsawg-private-networks-over-thin-cpe/ describes a new types of private network service, which
- is like SD-WAN in the way that IP tunnels are automatically established from a thin-CPE at customer site,
- but different from SD-WAN because there are interactions with the underlay network (even though the interaction to underlay network is transparent to users), and  there are gateways (for private networks) instantiated in the underlay network to establish secure connections between Thin-CPEs and the gateways, and guaranteed QoS from the underlay networks.

The draft describes a private network laid over multiple Thin CPEs   (or Overlay VPN for easy of description).
"Overlay VPN" is a type of private networks that interconnect thin CPEs at multiple client sites by IP tunnels, or more specifically, lay over multiple client sites' Thin CPEs via IP tunnels. Those private overlay networks not only interconnect those sites by secure IP tunnels but can also enforce the client specified policies to govern how applications or hosts within those sites communicate and how to access public internet.

We are looking for feedback for the operation aspects described in the draft, and suggestions on potenial work listed in the draft.

Thank you very much.

Linda Dunbar