People working from home have exploded in 2020 and will continue well into 2021, perhaps definitively changing way business is conducted for the next few years. Keeping organizations’ data safe in the turbulent sea of the wider internet is the highest priority. Many organizations have only just begun to allow data stored and processed outside of their own directly controlled hardware. Enabling more functions powered by the power of cloud is the next logical step.

There are multiple proposed SASE network appliance model from thin to heavy. Thin model utilize the bare minimum cloud based functions, such as SD-WAN and firewall. A heavy SASE stack may include things like DLP, VPN, router, UTM, and more through the usage of virtual appliances. Many solutions provider already provide virtualized and cloud native appliances that could be integrated into a SASE stack.

To optimize the user experience, these services are not hosted by some far-away datacenter but on the edge. The closer proximity compared to the cloud will reduce the perception of latencies introduced. Capacities are infinitely scalable via offloading to the cloud on-demand. This simplifies hardware infrastructure planning due to not having to balance typical workloads versus peak loading.

SASE is an interesting model. However, due to it’s nature, it requires a large overhaul of an organization’s infrastructure. The biggest hurdle is that SASE compatible portfolio is incomplete and may take years to mature. It remains to be seen whether or not organizations will take on the SASE model piece-meal, or will wait until the market matured and transition in whole. Another issue is whether or not organizations are ready to entrust the cloud for critical network security services. Perhaps SASE can be a prime candidate for hybrid cloud use where it is a happy median between control over private data and boundless power of the cloud.

Palo Alto, one of the leading network security solutions provider, has graciously provided the full Gartner report here (registration required): https://start.paloaltonetworks.com/sase-the-future-of-network-security.html

Read more：
AEWIN keep your network appliance safe.
Secure and reliable network appliance.

這篇文章 SASE Network Appliance－Secure Access Service Edge 最早出現於 AEWIN。

DPDK is an integral part for fast network package forwarding platform.

Dataplane Development Kit is a set of libraries and drivers that enables low overhead processing of data plane applications. It works in bare-metal or VNF on NVFI to bypass the kernel network stack to enable higher throughputs. AEWIN’s extensive networking expertise has enabled us to fine-tune and contribute our optimizations. If your applications have specific needs or having troubles optimizing DPDK, let our engineers help you optimize DPDK performance on your favorite AEWIN platform.

這篇文章 DPDK tuning expertise 最早出現於 AEWIN。

It sits between the client and various application servers to efficiently direct network traffic to servers and offer various services on top of load balancing, such as caching, compression, and hardware accelerated SSL offloading to ensure the server remains responsive and not overloaded. ADC transparently adds a layer separating the server from direct exposure to potentially hazardous network traffic, as well as able to redirect client traffic to the redundant servers in case of outage or excessive latency to specific servers. These devices are offered as appliances and of course virtual appliances that can integrated into AEWIN’s NFVI optimized platforms.

這篇文章 Application Delivery Controller (ADC) is the load balancer of the future 最早出現於 AEWIN。

Read more：
The secure and reliable network appliance.
Network Appliance R671＆R672 powered by Intel E810 controller！

這篇文章 AEWIN keep your network appliance safe 最早出現於 AEWIN。

A wealth of security options have evolved with the constantly changing landscape of cybersecurity threats. A network appliance acting as the basis to host a full suite of security appliances is becoming an attractive options to augment or replace the legacy networking devices to mitigate the new generation of attacks. These appliances may include New Generation Firewall (NGFW), Deep Pack Inspection (DPI), Intrusion Detection System (IDS), Intrusion Prevention System (IPS), and more.

Consolidating all the security tools can ease the burden of administering differing hardware. Newest software solutions allows the network administrator to access and manage all these advanced functions through a single interface. This allows the real time generation of meaningful reporting on active situations, allowing the administrator to take proactive approach for containment. Also leaving detailed report, allowing the tracing of incidents to understand the severity and if data were compromised. This will facilitate to keep the business’ lifeline to the internet open, ensuring business continuity and minimal disturbance during security incidents.

Hardware solution also have special needs to keep the network up and running efficiently. Server class components to ensure the highest reliability, and smart implementations such as by-pass function, to allow packets to flow through on to a redundant system in the case of failure or compromised system. Additional thoughts have been put into how to process and move network packets effectively.

Moving network from 1 GbE up to 100 GbE brings a tremendous amount of traffic that needs to be processed. New NICs and additional accelerators can be used to offload compute intensive tasks from the CPU, reducing the bottlenecks in the system. Advanced PCIe fabrics design brings flexibility of Ethernet ports configuration and system performance. Implementing DPDK framework is also important, bypassing interrupt based kernel space driver with polling mode user space process, to achieve low overhead packets transmission and higher throughput.

Read more：
AEWIN keep your network appliance safe.
SASE Network Appliance－Secure Access Service Edge.

這篇文章 Secure and reliable network appliance. 最早出現於 AEWIN。