We worry so you don't have to.
Welcome to the No-Worry Network
We know what keeps CIOs up at night. Compliance worries. Security worries. Network downtime worries. Performance worries. Even cost worries.
Welcome to the No-Worry Network
We know what keeps CIOs up at night. Compliance worries. Security worries. Network downtime worries. Performance worries. Even cost worries.
SD-WAN brought control to the edge of the Enterprise network, and it helped, but sleepless nights persisted. Why?
Before I answer that, let me remind you about two things that have been keeping me up at night...
First, don't miss our upcoming webinar, featuring Searl Tate, Recent CIO, and Managing Director Paul Hastings, an AMLAW 100 Law Firm with strict SD-WAN performance, security, and compliance requirements. The topic: Securing The Enterprise with your SD-WAN + Mode SD-CORE.
Featuring: Searl Tate, Recent CIO and Managing Director, Paul Hastings LLC;
When: Thursday, January 31st, 10:00 a.m. (PDT)
As I was saying... SD-WAN brought control to the edge of the Enterprise network, and it helped, but sleepless nights persisted. Why?
The core. I could say something about "rotten" but that's so predictable. But what isn't predictable is that ever-present Internet Core wedged between your SD-WANs. It's unreliable. Uncontrollable. Insecure. It's a big ball of worry.
We've talked about bringing the kind of control SD-WAN gives you at the network edge, and extending it to the long-haul core. We've reviewed the various core control approaches — Optimized Internet Core and Private Core. For high-security WANs relied upon by compliance-oriented organizations in need of high performance and high availability, a Private Core is the best practice.
But here’s the secret: if you do it right, your SD-WAN and the right core control will give you a No-Worry Network. OK, maybe a Worry-Less Network, but let's be honest — that just doesn't sound as good.
Our friends at Talari Networks, now part of Oracle, call it Failsafe SD-WAN. That's pretty cool. We can't call it the same thing, but we're talking about the same thing, and working together to make it so. Your CIO: less worry, more sleep.
That's exactly why we built Mode — to make your task of delivering an affordable, high-performance, secure, reliable WAN — that simplifies achieving compliance — much less stressful.
End-to-End vs. POP-to-POP
No-Worry Networks require high performance and high security to live up to their name.
It's Mode's position that you can't achieve either if your performance gains happen at the POP. Today's Cloud MPLS providers, for example, rely on POP-to-POP, and that's simply not worry-free. Here's why:
First of all, if your performance techniques — let's say WAN Optimization — happen at the POP, data decryption outside the Enterprise is implied. That requires the Enterprise to share their keys. And that's a no-no for ultimate security and facilitated compliance. Zero trust, remember?
Secondly, if the magic happens at the POP, your performance gains are going to be limited to POP-to-POP, instead of end-to-end. That can make a huge difference with large file transfers, and frankly any high-performance applications like video and voice. You want to worry less? You need end-to-end performance.
At Mode, we believe all optimizations, encryptions, and security policies should take place on the Enterprise premises. We work with our SD-WAN CPE partners to do just that. None of our amazing performance gains require decryption, and all of those gains are realized end-to-end across the Mode SD-CORE Private Global Network as a Service. And not just WAN optimization, but Perfect Network ControlTM, with global control changes at every node on the network, every 150 milliseconds — for untouchable, guaranteed WAN performance and availability.
End-to-end vs POP-to-POP preserves the highest standards of security, AND delivers the ultimate levels of performance. And that makes Mode and Your SD-WAN a true No-Worry Network, by design.
Now, you'll have forgive me, but I've got to go worry about our upcoming CIO dinner, two shows, this and next-month's webinars, and a Basecamp task list that is growing scarily large. If anyone happens to know of a No-Worry Marketing solution, please let me know so I can sleep as well as our CIO customers ;)
No, seriously. Please?
Want to talk? MODE will listen. Contact us today to get started.
I have pretty eclectic music taste. These days, I'm into Buddy Guy. I can swing from Duke to Zeppelin to Shostakovich in a single sitting. But you won't catch me listening to the top 40. No how, no way.
Except at the gym.
There you'd find me working out to Ariana Grande or something equally shameful (she and I went to the same high school), so if you're reading this Ariana, I'm sorry).
Point is, different music works for different moods or settings. Embarrassingly true.
Turns out, it's the same for SD-WAN. Sometimes, the internet fits the bill. Sometimes you need something completely different. But there's no need to be embarrassed — unless you make the wrong choice.
2019 is an inflection year for SD-WAN. The market is beginning to fill with different SD-WAN connectivity options. The good news is, there is now something for everyone.
Before we launch into this blog, I wanted to announce a fantastic upcoming webinar, featuring Searl Tate, Recent CIO, and Managing Director Paul Hastings, an AMLAW 100 Law Firm with strict SD-WAN performance, security, and compliance requirements. The topic: Securing The Enterprise with your SD-WAN + Mode SD-CORE. If you're responsible for delivering always-on connectivity with high performance, security, and compliance requirements, you don't want to miss this event.
Featuring: Searl Tate, Recent CIO and Managing Director, Paul Hastings LLC;
When: Thursday, January 31st, 10:00 a.m. (PDT)
First things first: Mode is NOT for everyone. Yes, they pay me (at least until they read this blog). But the point of these blogs isn't propaganda or marketing schlock. It's about delivering real information and a unique perspective, so you can make informed decisions. And that starts with a trustworthy source. And that source is telling you that Mode is not for every use case or every business. And that's ok because there are a ton of use cases where Mode is the best connectivity solution for your SD-WAN.
We've told you before that SD-WAN gets its benefits by bringing control to the network edge. Typically, it's connected to the basic Internet. Today, a new category of connectivity for SD-WAN has emerged. It gets its benefits by bringing software-based control to the network core. We call this category SD-CORE. And there are two variants of SD-CORE: Optimized Internet Cores and Private Cores.
Nearly all of these options use the last-mile Internet for initial connectivity to an SD-WAN. That's OK because extensive studies have shown that last-mile connectivity is capable of supporting the performance and security requirements of the most stringent business use cases, especially when coupled with the last-mile redundancy features of SD-WAN. What happens once data leaves the local last mile and travels over distances is a completely different story.
So when is the Internet best for your SD-WAN? Who needs Optimized Internet? And when is a Private Core the best SD-WAN solution? Read on, my friend.
Basic Internet Core
Basic Internet is the ideal solution when low cost is the primary goal. Period.
It's not acceptable for applications and data that require high levels of guaranteed performance. Experience, and lots of studies have shown the Internet Core to have high levels of latency variation and jitter, dropped packets, and daily localized outages — all severely impacting predictable performance particularly for long routes.
If your business deals with sensitive information and compliance burdens, using a public IP backbone for associated applications — even with data encryption — is not best practice. A high attack surface and rampant BGP hijacks and misdirects (see China's Maxim – Leave No Access Point Unexploited: The Hidden Story of China Telecom's BGP Hijacking and Google goes down after major BGP mishap routes traffic through China) will eventually put your company, and your job, at risk. Just a matter of time.
Beyond price, another advantage of the basic Internet is that is works with any SD-WAN, and doesn't lock you into any single provider, so it's very flexible.
Optimized Internet Core
An Optimized Internet Core is ideal for your SD-WAN when better-than-internet performance (but not SLA-backed MPLS-level performance) is required.
Optimized Internet is as it sounds. At its core, it uses the same public IP backbone as the basic Internet. Similar to CDNs, various WAN optimization techniques are used to improve performance. Because the underlying network is not visible or controllable at the node and link level, the performance of these solutions cannot approach true MPLS performance, despite claims to the contrary. Ever.
For the very same reasons, MPLS SLAs are not possible (SLAs covering not only uptime but also packet loss, latency, and jitter, etc.). Public IP simply cannot be guaranteed, or certainly shouldn't be.
Optimized Internet Core solutions use a public Internet core for transport, so they share similar security and compliance profiles — meaning they aren't best practice for companies seeking ultimate enterprise-class end-to-end security or tasked with satisfying compliance hurdles.
In addition, many Optimized Internet Core providers require decryption of corporate data to achieve their performance gains, necessitating a level of vendor trust that is incompatible with a Zero Trust security goal, and further complicating compliance.
In general, Optimized Internet Core solutions are slightly more expensive than basic Internet, but not nearly as costly as traditional private networks like MPLS.
Finally, some Optimized Internet Cores are designed to work with any SD-WAN, while others require you to use the provider's SD-WAN. Read the fine print.
When MPLS-level, ultimate performance — guaranteed by a true MPLS SLA — is necessary, you need a Private Core for your SD-WAN. Applications requiring high-performance over long distances, like voice and video, typically fall squarely into this category.
All Private Core vendors see and control every node and link in their network, enabling a predictable level of performance not possible from basic Internet or any CDN-like optimization of the Internet.
What differentiates Private Core vendors are their approach to performance, and the downstream impact to cost, security/compliance, and network flexibility.
MPLS is the granddaddy of Private Cores. It's expensive. It's not an "as a service" offering, so it takes a while to set up and its pricing and usage are fairly rigid. Historically, most enterprises assumed a private network with a low attack surface was enough for security, so data was sent unencrypted. Meaning you have to trust the operator and their virtualization, which most CIOs know to be far from perfect. MPLS does not have a built-in encryption capability, so work must be done to use it in a compliance-sensitive environment with Zero Trust security aspirations. MPLS can be used with any SD-WAN, which is a good thing if you can afford it.
Another Private Core variant can be labeled "cloud MPLS." It takes a carrier MPLS core and makes it POP-accessible, dramatically increasing the flexibility of this solution vs. traditional MPLS. But this approach makes the cost of these solutions essentially the same as MPLS. Furthermore, the only vendor offering this type of Private Core requires data decryption and key sharing with the enterprise — big no-no's in a Zero Trust environment with rigorous compliance requirements. This same vendor requires you to use their SD-WAN with their Private Core, so flexibility is limited.
Mode SD-CORE is a Private Core based on a high-performance private underlay from Ericsson and nearly 100 major operators with superglobal POP coverage. Mode has complete visibility into, and control over, this underlay. Mode exclusively uses our version of software-based core control — Perfect Network ControlTM — to drive the global network to perfection every 150ms.
Perfect Network ControlTM is based on the Mode HALO algorithm developed at Cornell and has been proven in tests by the NSF and AT&T to dramatically outperform other core control methods. In the AT&T test, Mode optimized a massive network in 30 seconds, while the second-place core control algorithm took nearly 24 hours. I'm not allowed to tell you who that was, because that would be embarrassing. Perfect Network ControlTM makes for a vastly more efficient Private Core and allows Mode SD-CORE to deliver real-world MPLS performance at a price point competitive with business Internet or Optimized Internet Cores.
Mode SD-CORE is a Zero Trust Network. It features full end-to-end encryption. Security keys and policies are under the exclusive domain of the enterprise and never shared with Mode. We achieve our SLA-backed MPLS-level performance (MPLS-level uptime, dropped packets, latency, and jitter, worldwide) without compromising security. This makes it easier to satisfy strict compliance requirements.
Finally, Mode SD-CORE works with ANY SD-WAN. Your SD-WAN — now with an affordable, high-performance private global network in under 60 seconds.
Mode SD-CORE is the ideal SD-WAN connectivity option when flexible, SLA-backed MPLS performance and ultimate enterprise security and compliance matter the most — all while keeping costs far lower than other Private Core options.
Mode SD-CORE is the No-Worry Network for Any SD-WAN.
Which begs the question: what is Perfect Network ControlTM and how does it achieve this amazing mix of affordable performance and security?
That, my friends, is for another blog, and another day. See you soon!
Another holiday, another cultural controversy. Are we having fun yet?
Still, as tempting as it might be to wade into these particularly murky musical waters, we should probably focus on something we can ALL agree on...
... the euphonious hum of an always-on business, powered by a hybrid cloud-enhancing network that energizes your SD-WAN and never lets you down.
But now, our first great news of (almost) 2019: Business Insider has named Mode as one of 44 enterprise startups to bet your career on in 2019! That's a pretty strong endorsement. Question: will this be enough to stop my dad from asking me to stop playing in technology and return to medicine? Answer: probably not. That said, we are really thankful for the recognition. Without a doubt it's going to help keep our business always-on. We will gladly pay this benefit forward to our SMB and enterprise customers who have been living on borrowed time by trusting the Internet Core for mission-critical connectivity. And if you're super-talented and in the SF Bay Area, check out our careers page.
Now, back to (always-on) business:
In our last installment, network control was front and center in our discussion of how to enhance SD-WAN. It was our intention to segue into the vital topic of security, and we will. But we'll do it next time.
Our last blog generated a ton of requests to enumerate the differences between two common approaches to Internet Core alternatives for SD-WAN: Optimized Internet vs. Software-defined Private Networks.
To recap: if you're using the best-efforts Internet to connect your SD-WAN CPE, you're leaving your network open to the outages, performance irregularities, and security risks of public IP. If it hasn't caught up with you yet, it will. Instead of popping Maalox waiting for the other shoe to drop, we humbly suggest getting instant peace of mind by pairing your SD-WAN with a more reliable backbone. But how do you choose?
"An Optimized Internet core and a Software-defined Private Network core (like Mode SD-CORE) are not the same thing, and the differences can have a significant impact on your ability to run an always-on business with your SD-WAN."
First, a point of clarification. Many Optimized Internet providers position their network as "their" network, and imply it's "software-controlled." Not trying to be mean — but this is highly misleading. Their POPs are, indeed, theirs, but everything in between them — the vast majority of infrastructure and distance across which your critical business data will travel — is nothing more than best-practices internet, decidedly not "theirs." As for software control: yes, they control their POPs, but they have no direct visibility or discrete control of the massive, global internet hairball stuffed between those POPs.
With that out of the way, let's consider the four meaningful differentiators of Optimized Internet vs. a true SD-CORE for SD-WAN: measurement, control, security, and service-level guarantees.
Perfect control comes from realtime, global knowledge of granular network performance. Every node. Every segment. Every 150ms.
Optimized internet approaches use a series of POPs distributed around the world to probe the behavior of the Internet. In between these POPs is a massive collection of various providers' nodes and segments, all of which are completely invisible to this class of provider. To the Optimized Internet provider, the core network is a black box. They can measure the performance among their POPs, a time-consuming attempt to guess what's going on inside. It's less granular knowing and more ballpark guessing. And their rate of observation is often far lower than the actual rate of global network change, so you're left chasing your own tail.
An ideal software-defined private network like Mode SD-CORE sees each node and every segment of the underlying global network — in real time, every 150 ms. That's because the underlay network is made available to us, and guaranteed by partners like Ericsson and nearly 100 service providers around the globe. In fact, Mode SD-CORE grows more capable and comprehensive with each new operator underlay added to its pure, software-control fabric. The ability to continuously know real-time network performance — at a granular level, globally — enables Mode SD-CORE to react instantly to rapid network changes. Perfect Network ControlTM begins with perfect knowledge of the network.
Once Optimized Internet providers identify an "optimal path" from their POP approximation of "black box" Internet performance, they move traffic onto that path. After some time, when a new "optimal path" is identified, traffic is switched from the old path to the new. Typically, this "path switching" is far slower than actual dynamic network changes, often with significant time (hours) between switches.
In the language of control systems, this is known as "bang-bang" control, and in the world of packet networks, it is chock full of performance problems. If one were to examine bang-bang control between two possible paths, you'd see a saw-tooth pattern of segment throughput for each path, with 180 degrees of shift. The end result is a severe underutilization of the underlying capacity of both paths over time. The story with latency is just as bad. Bang-bang control systems experience wild latency swings (and jitter), and an average latency that's far from the ideal physical limit. Combine this with the inherent (and uncontrollable) latency and performance variation of the Internet Core, and you have real problems.
A few years ago, a group of researchers at Cornell did something previously considered impossible by computer scientists: define packet networks as control systems. Their math-based control solution, Mode HALO, went on to wow the academic world and dominate NSF and AT&T software-defined networking competitive evaluations. It also served as the foundation for Mode, and Perfect Network ControlTM.
We know what you're thinking. Perfect is pretty cocky. But in this case, it's not marketing exaggeration, it's truth. As we monitor real-time changes for every nook and cranny on our global private network as a service, every node in our network computes the perfect control solution for every packet, based on math — instantly, and in parallel. This allows Mode SD-CORE to drive the network towards utilization, throughout, and latency perfection in the face of dynamic changes that would crush any other network. And it allows Mode, and Mode alone, to offer a unique mix of carrier-grade performance and affordability.
So while Optimized Internet providers may have fancy names for their magical measurement and control techniques (some of them use Artificial Intelligence!) nothing beats perfect, math-based autonomy for keeping your network always-on.
There is a best-practices approach to business security called Zero Trust Architecture. You can read more about it here. The basic premise is an IT design where your business security is not predicated trusting ANY third-party vendor used in the design. That's revolutionary.
So why would you spend the time to create a Zero Trust business architecture, and then connect those business branches and multi-clouds with a network that REQUIRES you to trust the network provider, or worse, the Internet?
Many Optimized Internet providers require you to decrypt your network traffic in order to achieve their performance or functional benefits. You have to trust them with your security keys and security policy. Not good.
In addition, since the majority of their transport infrastructure is Internet (e.g. not under their supervision, control, or liability), it is subject to redirection errors or flat-out BGP hijacking — both of which are happening ALL the time. (See China's Maxim – Leave No Access Point Unexploited: The Hidden Story of China Telecom's BGP Hijacking and Google goes down after major BGP mishap routes traffic through China). All of this impacts performance, but are also major security vulnerabilities. Sure, your data is encrypted. But when this same, sensitive data is hijacked to a malevolent state entity with virtually unlimited resources, are you willing to bet your business on it?
That's the idea with a Zero Trust NetworkTM — your data is safe precisely because you don't have to trust the provider, or anyone else. Mode SD-CORE is a Zero Trust NetworkTM. We achieve our tremendous performance levels without decrypting your data. All security keys and security policies remain under the exclusive control of your business. And we are a private network, with the lowest of attack surfaces (especially vs. Public IP) — meaning we are hijack-immune. If you've implemented or are considering a Zero Trust architecture for your business, it only makes sense to pair it with a network that preserves your security investments.
All of these factors contribute to the most-important of bottoms lines — the kind of guarantees your network provider offers.
The gold-standard from traditional enterprise networks like MPLS is a carrier-grade SLA. It covers uptime, and discrete performance metrics like packet loss, jitter, and latency variation. They can offer these guarantees because the network is theirs, and under their control.
Not so with Optimized Internet providers. They can offer "uptime guarantees" that cover the uptime of their POPs. They can't guarantee the uptime of the Internet, after all. Nor can they control (or guarantee) its performance.
Mode SD-CORE, like MPLS, offers a carrier-grade SLA. Uptime, jitter, latency variation, and packet loss, worldwide. The essential elements of giving you an always-on business that hums. But unlike MPLS, with Mode SD-CORE you can spin up a global network that supports hybrid and multi-cloud businesses with remote workforces in under 60 seconds. Really.
It's a New Year. 2019. And in this year of explosive SD-WAN growth, there is nothing better you can do for your business network than to pair your SD-WAN with the right SD-CORE, Mode SD-CORE. Getting and maintaining a reliable WAN was never this easy or affordable.
This month we are very pleased to host a webinar featuring the Managing Director, IT of one of the world's largest law firms. He worries about keeping his business secure and always-on, all the time. If that sounds like you, you owe it to yourself to listen in. Dates and info coming in our next blog.
It's that time of year. 2018 is on its way out the door. We're winding things down, and we're making plans.
And in 2019, the single most important thing you can do to enhance your SD-WAN is to connect it to an SD-CORE.
That's the way you keep your business always-on. In fact, it's the best present you can give to your CIO or VP Net Ops this holiday season: peace of mind. Nothing beats a reliable WAN that is easy to start and maintain, and that won't drive you to insolvency.
But which SD-CORE do you choose? Rather than give you a huge list of 10 or more categories, I thought we'd stay true to our roots, and simplify. When it's all said and done, every meaningful distinction among SD-COREs comes down to differences in control and security.
There are a million different companies with an equal number of claims of magical routing or WAN optimization techniques. The names and claims are really impressive, but give you no real information. And that's a shame, because HOW the SD-CORE is controlled matters a LOT.
Here's the reason — the better the control, the more efficient the SD-CORE. And the more efficient the SD-CORE, the lower the cost for a given level of performance.
That's a pretty convenient litmus test. Forget the fancy names. Look at the SLA. If there isn't an SLA, move on. And if there is one, look at the numbers. They're usually pretty similar among vendors. And then look at the price. Higher pricing means less capable control.
There are a few other signs if you're looking closely. By far, the best level of control is at the individual packet level. If a vendor doesn't own the backbone network or have a direct relationship with the backbone provider, they can't control each and every packet. So you can toss out SD-COREs that rely on public IP backbones because they can't see packets end-to-end, never mind control them every step of the way.
But let's say the SD-CORE provider offers packet-level control of their own backbone. Let's say you're Google or something like that. You're using advanced AI techniques to analyze the network, then compute a centralized solution, and then push that solution across your network. That's pretty good, except for the fact that it takes time to do this analysis and push it out, and in that time everything has probably changed. After all, AI is figuring out the best solution in the face of insufficient information. Turns out, when it comes to packet-switched networks, you have all the information you need for an autonomous solution. And autonomy is not only better, it's best.
Autonomy trumps AI because, ironically, it doesn't require any intelligence. Every node on the network can independently calculate its own perfect control solution, in parallel. Whether the network has 10, 10 thousand, or 10 million nodes — the speed of the control is only limited by the time it takes to measure the network. And that, for a ball the size of the earth, is only 150 milliseconds. Tops.
That's Perfect Network ControlTM, and only Mode has it. We start with world-class private underlays from providers like Ericsson and other major service providers. They've kindly allowed us total control of every packet on the network, end-to-end. We seamlessly stitch them together for superglobal coverage, and the result is an SD-CORE unlike any other: Mode SD-CORE. And while we can never claim Mode SD-CORE is perfect, the solution that every node on our network uses is nothing less. Perfect Network ControlTM continuously drives Mode SD-CORE towards a perfect network — in the face of ANY external changes — every 150ms.
The result is unmatched efficiency, typically 300% better the state-of-the-art. It's that efficiency that lets Mode SD-CORE deliver worldwide high-availability SD-CORE performance for a price no one else can touch.
And come back to this blog next week when we'll tell you about the second most-important consideration in choosing the right SD-CORE to enhance your SD-WAN: security.
You've got to hand it to Amazon. They have their fingers in a LOT of pies. Makes you think – if they had known they'd get this pervasive at the beginning, maybe they'd have chosen a different name. I mean, the jungle is pretty big, but it's not a global phenomenon.
Global Accelerator from Amazon is, as its name implies, truly global. No, it's not a startup incubator (sure sounds like one, ahem). It's Amazon's SD-CORE for AWS. It's hot off the presses for those of you attending AWS re:Invent in Las Vegas. It takes its place side-by-side with Azure Virtual WAN and Edge Gravity by Ericsson as the latest SD-CORE from a major cloud provider. And, if you think about it, it validates four major realities facing cloud-era businesses, many of whom have adopted SD-WAN.
OK, Amazon does the same thing we do when we talk about the Internet – treat it with care. Because, really, we love the public Internet. It does amazingly well as a best-efforts system. But here's the rub: Amazon would not have built Global Accelerator if AWS customers weren't having performance and availability issues using the Internet Core. According to Peter DeSantis, AWS VP Global Infrastructure, Amazon wants to improve the performance and availability of applications running across AWS regions by bypassing the public Internet and transporting data on the AWS Global Network. In particular, he calls out applications like voice, video, interactive experiences, and those requiring long-haul traffic. Sounds pretty ubiquitous.
Like any SD-CORE, AWS Global Accelerator relies on last-mile Internet Access. We've cited many studies that have shown that Internet Access is very capable of being a part of a reliable software-defined WAN solution (SD-CORE QoS Without MPLS from SD-WAN Experts, and Addressing SD-Core: Boosting SD-WAN performance without MPLS from Cisco), and Amazon clearly agrees with this assessment.
As cool as this is for AWS customers, there is a lot more to keeping a business always-on than just AWS. Businesses need an affordable, reliable, SD-WAN compatible solution that covers the broadest set of enterprise use cases: branch and data center connectivity, all IaaS and PaaS clouds, and the gamut of SaaS applications. An unreliable, unpredictable, and often unsecure Internet Core (see Google goes down after major BGP mishap routes traffic through China, Suspicious event hijacks Amazon traffic for 2 hours, steals cryptocurrency, and Strange snafu misroutes domestic US Internet traffic through China Telecom from ArsTechnica) makes always-on unobtainable at worst, or difficult at best for IT and NetOps. Given that Global Accelerator may very well diminish traffic on Service Provider backbones, this is a major opportunity for SPs to step up and offer an SD-CORE that doesn't just serve Amazon's needs. Hint.
Truth is, there is an Internet Core alternative out there already – MPLS. It's the traditional approach, but it's got two major knocks against it: it's expensive, and it's decidedly inflexible, in a few significant ways. These downsides have been the major impetus for SD-CORE alternatives, so it would be ironic if these same alternatives priced themselves out of widespread adoption. Here's the rub: it costs a lot to run a highly available private IP backbone using today's industry standards. Even if you're Amazon, unless you change the fundamentals of network control, a private HA solution is going to cost. The CSP model is also a problem for always-on businesses. It's predicated on making it very inexpensive to get data in, but very expensive to get that same data out. That makes sense when your strategy is to keep customers on your cloud, but it's antithetical to the needs of cloud-era businesses who really need multi-cloud, affordable, HA, secure bi-directional data transport in ever-increasing amounts. That's why we are so excited about Perfect Network ControlTM. When you re:Invent network control, and you triple effective network utilization, you deliver an otherwise unobtainable mix of flexibility, reliability, AND affordability.
An SD-CORE that costs the same as business Internet, but with QoS and SLA guarantees, that supports multi-cloud, hybrid-cloud, every SD-WAN, and pretty much every other enterprise WAN use case? Now THAT'S re:Invention. And that, my friends, is Mode SD-CORE: table stakes for keeping your business always-on.
"Mode stands out as a unique option that offers all facets of reliability, security, flexibility, and value in a software-defined private enterprise WAN — today. Mode understands the importance of an affordable high-availability 'middle mile' and Mode SD-CORE delivers."
Speaking of always-on: enterprise security plays a big role in giving IT and NetOps peace of mind. It's a hot topic, as is Zero Trust architecture. So what's the role of SD-CORE in all this? re:Inventing end-to-end security in the cloud era, of course. Come back next time to find out how.
Read more about AWS Global Accelerator SD-CORE here.
One of the benefits of being in a startup is that you have a lot more freedom to completely go off the reservation, on occasion. Once you get to a certain size, everyone gets a lot more serious. And then this kind of editorialized fun comes to a dead stop. You know what I mean. So let's enjoy it while we can, shall we?
Welcome to the millennial edition of the Mode blog, and the third part in our analysis of Steve Garson's (CEO and Founder, SD-WAN Experts) ONUG presentation "Measuring Internet Core Variability" aka "Is the Internet Core a Safe Space for Packets" aka "Is Your SD-WAN Relying on a Turkey of a WAN."
But first... Let's talk about perfect. At Mode, we are lucky to have something at our disposal called Perfect Network ControlTM. What is it, you ask? Well, it's pretty rare in technology to have something that's truly perfect. And that's why this is so very cool. We will cover this more in a future blog, but Perfect Network ControlTM isn't an exaggeration at all. It's how Mode controls networks and continuously drives them to perfect efficiency, every 150ms. And we all know, nothing beats perfect.
The point is, most things aren't perfect. For example, the platform we use to host our webinars (it's ok, we know perfect is hard). Turns out, it wasn't cooperating at the scheduled 10 AM November 14 time and date. So — for those of you who couldn't make Steve Garson's presentation on "Three Must-Do's to Get Peak SD-WAN Performance" — this is your chance to not get left behind, and learn about three common-sense steps to get more from your SD-WAN.
Even better, you get to eat turkey first.
Featuring: Nithin Michael, Founder & CTO, Mode;
and Steve Garson, Founder, SD-WAN Experts
When: Wednesday, November 28th, 10:00 a.m. (PDT)
OK. Back to A Safe Space for Packets. I hate to break it to you, but it's time to hand out the blankets, coloring pads, and crayons, because we've already learned that the Internet Core isn't safe at all. Scary.
In fact, its unpredictability is orthogonal to keeping businesses always-on. We'll get into the concept of "always-on" in a future blog, but for now, think technology always doing what you need it to do, when you need it done, to get work accomplished. The network, the technology, just recedes into the background and you totally take it for granted. That's the dream. And all too often, the Internet Core turns it into a support nightmare.
In the third part of Steve's ONUG presentation, he considered a very interesting question — can optimized paths or backbones make a difference vs. Internet Core for long-haul traffic. For example, AWS to AWS optimized paths.
He turned to our friends at Catchpoint to measure AWS-to-AWS performance among the same origins and endpoints of his previous two tests. And the results were quite illuminating.
As you can see, in most cases, having an optimized path between points not only reduced point-to-point latency, but also latency variance and jitter. The takeaway point — if your business a) needs to be always-on, and b) relies on long-haul data transport, you can benefit dramatically from an "optimized path."
Steve's conclusions are similar:
So, you want to be always-on. You need to be always-on. And all you want for Christmas this year is flexible, reliable, affordable WAN. Do you pick MPLS? Do you choose SD-CORE with SD-WAN? And are all SD-CORE's the same? Is all network control — with all those fancy names for different kinds of routing or optimization — really the same?
No doubt, these are all great questions. And we look forward to discussing them more in the future.
In the meantime, our friends at Cisco had a LOT of news this week. And mixed in among that news were some very interesting comments on SD-CORE and SD-WAN. Want to know more? Come back next week and find out!
As I sit here sipping my fourth Coke Zero of the day (true), next to a former starting outside linebacker for the 49ers (also true, and a much longer story), I am reflecting on how to break some very exciting news to you.
And the topic ... it's Gold, Jerry! P-u-r-e Gold!
Could it have to do with your SD-WAN? Well, yeah. Does it talk about MPLS costs and inflexibility? Maybe. End-to-end encryption, and enterprise control of security policy? Very possibly. Extending edge control to the network core? Definitely.
Featuring: Nithin Michael, Founder & CTO, Mode;
and Steve Garson, Founder, SD-WAN Experts
When: Wednesday, November 28th, 10:00 a.m. (PDT)
Now that that's out of the way, we can resume our walkthrough of Mr. Garson's excellent keynote presentation at the ONUG Fall event in NYC. If you recall, his talk offered three experiments relating to Internet Core performance. Last week we covered the first, in which Internet Core response time was extrapolated from measurements of long-haul response vs. last-mile response.
In the second stage of the presentation, he used Catchpoint to directly measure Internet Core response time among the same collection of endpoints, comparing them to the first data set.
The goal was to validate the original data by using two distinct measurement methodologies, and hopefully get similar results.
And it worked! Let's look at the following raw data table:
It's pretty clear that the measurements from Part I (last week) and Part II (this week, direct Internet Core measurement) are practically identical (within the margin of error). Both the median and the standard deviation.
With one exception — the route between Melbourne and San Jose AWS. It's likely that Telstra (the backbone provider) is doing something special in moving data back and forth with San Jose AWS. This would account for this path's resistance to latency variance (when compared to generic Cedexis data obtained across a collection of providers, as used in Part I tests).
This leaves us with two takeaways:
Next week, come back to Mode.net for analysis of Part III of Steve Garson's research project and presentation. But for now Save the Date, November 28, 2018, as we host Mr. Garson for a not-to-be-missed Webinar, live from Silicon Valley and the Mile High City.
So exert some control — over your schedule — and pencil us in. Your SD-WAN can't afford to miss it.
The cloud era has been anything but simple for businesses. In fact, a lot of the challenges they face may be attributed to how hard it is for network operations teams to consistently provide reliable connectivity among their employees, assets, applications, and services.
So the opportunity is to simplify end-to-end reliable WAN for businesses, large and small. That's why we were at ONUG in NYC (ok, were there for the bagels also). We saw an amazing presentation by Steve Garson of SD-WAN Experts, titled "Measuring Internet Core Variability."
We've been blogging about the Internet, how it's generally great, but perhaps problematic when it's used as part of an SD-WAN solution for mission-critical business applications.
We've told you about the "good parts" version of the Internet — separating Access from Core. And we've implicated the Core as the primary cause of unpredictability.
We are always amazed when others produce corroborative evidence. At ONUG, others = Steve Garson of SD-WAN Experts.
Let's take a look at the first part of Steve's presentation.
Steve chose response time (i.e. send + wait) as the ideal methodology, because it excludes one-time events like DNS and connect, and it's a better measure of real Internet response than ping.
In his first series of tests, Steve calculated Core performance by subtracting access performance from a long-haul performance. Of course, performance varies over time. I'm no mathematician, but I seem to remember that in cases of two parts of a series with variability, the variance of the whole (variance = standard deviation, squared) is equal to the sum of the variance of each part, plus two times the covariance (the correlation of variance in part one with part two).
I think it's a safe assumption that, in general, performance variance of the last-mile is wholly independent of core variance, meaning covariance = 0. Steve makes this assumption, which means the long-haul variance = core variance + access variance. Whew. We are done with the math.
Steve collected data from servers originating in San Jose, London, Tokyo, Sydney, and Virginia. He looked at the performance to end users in Bangalore, Washington D.C., Tokyo, London, Melbourne, and San Francisco. Here is a table of the raw data:
The results are pretty clear. For long hauls, the vast majority of response variance occurred in the Internet Core, not the last-mile. In fact, 99.5% of response variance happened in the Internet Core. That means that your business traffic, over long hauls, is experiencing the vast majority of dropped packets, jitter, etc., as a result of the Internet Core. Even with the lovely software-defined benefits of SD-WAN at your corporate edge.
99.5% of long haul Variance happens in the Internet Core. Why?
It's largely an issue of economics. Internet Access networks receive 300% to 1000% the investment of the Internet Core, most of it coming from customers. The Core is based on least-cost peering and routing.
Steve went on to provide additional tests of Internet Core performance, and we will cover them in upcoming blogs.
But for now, we know one thing for sure. If you want to simplify reliable end-to-end WAN so your businesses can hum, you can't stop at SD-WAN. You need to replace the Internet Core with something far more reliable. You could use something overpriced and rigid like MPLS. But you really want something that's SD-WAN friendly, flexible, and affordable. You may not know it yet, but your want a software-defined core (SD-CORE).
Jennifer English at TechTarget has done a nice job reviewing Steve's presentation. Her conclusion — you may not be able to rely on SD-WAN + Internet, but you no longer have to pay for expensive solutions like MPLS. SD-CORE might be just the thing for simplifying the reliability of your SD-WAN.
Who doesn't love The Princess Bride? I got my first copy at the Dartmouth bookstore outside of summer camp (for those who've been reading this blog, you'll recognize the tie-in to the very first Mode post). No, the movie isn't nearly as good.
It was a tight book. A real page-turner. In fact, this masterpiece by William Goldman was an abridged version of the hideously plotted, unedited, and unreadable original version, penned by S. Morgenstern. Or so Goldman claimed. In fact, it was a clever, but bogus, literary device. Now I digress.
So what do R.O.U.S. and "as you wish" have to do with this next part in our blog series of "Is the Internet good enough for mission-critical business?" Quite a bit, actually. Or at least one bit.
In our last blog, we showed evidence that the Internet was too unpredictable to support mission-critical business applications (or other applications like streaming gaming, and a whole host of next-generation devices, applications, protocols, and services — from IoT to blockchain to 5G).
We must ask: do we dismiss the entire Internet on this basis? Or is there a "good parts version" of the Internet that we can carefully separate, and use with confidence as part of an end-to-end cloud connectivity solution? (I know you were waiting for that tie-in, and yes, you're welcome).
It's common practice to divide the Internet into two parts — the on and off ramps we call Access. The center, we call Core. Access has different names like last mile (or first mile), and Core is sometimes called backbone or middle mile. So can we attribute the unpredictability of end-to-end Internet entirely to either Access or Core? Is it really that easy?
It turns out that we can, for the most part. Internet Access outages are exceedingly rare. Physical network distances at the last-mile are relatively short, and global, long-distance studies show that Access contributions to latency and jitter are relatively insignificant vs. end-to-end values. Solutions like SD-WAN offer additional Access resiliency via redundancy. Additional studies of last-mile U.S. operators reinforce this truth: Internet Access is predictable, can be trusted, and is getting better all the time.
This makes sense when you consider how well-capitalized and well-marketed Access solutions are. It's a highly competitive marketplace, and poor performance is a deal-breaker.
The Internet Core is an entirely different story. It's not nearly as visible, not heavily marketing, and is composed of complex peering arrangements that shift continually. Its "shortest path" priorities are often economy, not performance. Third-party tests show that the vast majority of latency variation (jitter) happens in the Internet Core, as do daily globally-dispersed Core outages that have not gotten better over time.
This leaves us with a remarkable conclusion, one our SD-WAN partners have known for some time: the "good parts version" of the Internet is Internet Access. It is the Internet Core than requires a more predictable, higher-performance alternative.
SD-WAN has led the way by bringing software-based control the edge of the enterprise WAN. What if we adopted this approach, and brought software control to the Core? That would be remarkable. But how?
This isn't a Princess Bride-style "battle of wits." We know the answer, and we'll happily tell you in our next blog installment.
We aren't alone in our search for an Internet Core alternative that's SD-WAN-centric. Steve Garson @ SD-WAN Experts just published an article detailing various ways to take the goodness of SD-WAN and extend it end-to-end across the WAN core. You can read Steve's article here.
There was no Bogart. No tearful goodbyes. But the Mode team left Paris with something better — confidence.
Not just our confidence, but yours. You, the CIO, the VP Network Operations. For some time, you've feared the transition to the cloud.
You've woken up at night in a sweat. And that fear has made you cling to the past. To rigid, expensive, and decidedly cloud-unfriendly connectivity solutions like MPLS.
We left Paris, and we gave you the confidence to let go. The confidence that the cloud could deliver both where MPLS succeeds (reliability and QoS), and where it falls short (flexibility and economy).
We didn't start the ball rolling. That was SD-WAN. It gave you confidence in the edge of your network, with visibility, and the flexibility to chose among different networks. It made site-to-site connectivity a snap. And it did it without breaking the bank.
Still, you knew that at its core, it was still using the Internet. And that made you nervous. And for good reason. The Internet Core is anything but reliable. At least SD-WAN let you pick and choose, and that's exactly what you did, using MPLS like the preciously expensive resource that it is.
SD-CORE sounds a lot like SD-WAN, and that's not an accident. Where SD-WAN brings software-defined control to the edge of the enterprise WAN, SD-CORE takes it end-to-end, across the world's highest-performing private global network as a service.
The need for an SD-CORE has never been greater, and in Paris we learned we are not alone. We saw SD-CORE like projects from Cisco (NGENA) and VMWare. All driven by the need for a better middle mile and the increasing reliability and performance of Internet access. But only Mode offers a network operating at the theoretical limit of packet-switched efficiency. Translation: an untouchable combination of performance and economy.
Mode has replaced that pesky Internet Core with the world's highest-performing SD-CORE, and it works with any SD-WAN with the turn of a key. Still, it was Paris, and you know what those arrondissements can do to star-crossed technology companies. In fact, rumor has it that Mode and Versa Networks were seen holding hands at the Tuileries (read the press release here).
We also saw lots of traditional vendors piling into the SD-WAN space, each trying to differentiate via a better end-to-end experience at a reasonable price. Enter Mode, and our SD-WAN + SD-CORE partner program.
Paris is now a memory. But now you're more confident in the cloud than ever. You know that the combination of SD-WAN and SD-CORE gives you MPLS-level QoS and reliability AND cloud flexibility, and it does it at a business internet price point.
Bonne nuit et beaux reves!