A data policy allows network administrators to influence the traffic flow in the data plane of the SD-WAN network. That’s why it is also called a Traffic policy.
A centralized data policy matches traffic using common header fields like source and destination IP, protocol, source and destination ports, and DSCP. Then it applies a set of actions that override the forwarding decision that would normally occur for the matched traffic. Here are some examples of the types of actions that it can do on a VPN-scale:
- It can steer traffic over specific transport or TLOC. For example, send voice and video over MPLS and backups over Internet.
- It can do service chaining. For example, force branch-to-branch traffic to go through a firewall at the data center.
- It can filter traffic. For example, block certain subnets, apps, or ports between sites.
- It can do NAT. For example, translate traffic when it exits toward a shared services zone.
- It can do QoS marking.
Digital Book Access
For now, the digital version of this book is available only to active subscribers and readers who own a paperback copy.
The ability to buy the digital copy directly is coming soon.
- Subscribers can access the full digital version as part of their membership.
- Paperback owners can access the digital version using the instructions provided in the book.