Increasing Speed and Reliability for Site-to-Site VPN Network
A site-to-site virtual private network (VPN) is a connection between two or more networks, such as a corporate headend and a branch network. Many organizations use site-to-site VPNs as an alternative to using private MPLS circuits. For multi-location enterprises, VPN connectivity with enough bandwidth and high reliability is a key to business success as critical enterprise applications including as VoIP and video conferencing are frequently transmitted across business locations through a site-to-site VPN network.
Site-to-Site VPN
However, VPN network is established based on a single internet circuit; should the circuit fails, there is no way to keep the connectivity. Besides, when bandwidth demand grows, adding more bandwidth is technically difficult to achieve in reality. This could lead to a complicated network change for legacy WAN infrastructure.
Site-to-Site VPN Bonding & Failover
> Automated VPN Tunnel Failover and Failback
Once VPN failover are properly configured on Q-Balancer appliances at both ends, they will constantly keep the VPN connectivity up and running. The appliances will automatically divert VPN traffic down the remaining active paths in the event of a WAN outage, and send VPN traffic through the primary internet connection again once the failed path restores from outage.
> Site-to-Site VPN Bonding
VPN Bonding has the ability to chop a single VPN session into packets and spread the packets across multiple internet connections for faster transmission. VPN Bonding provides a faster, more reliable and secure connectivity for all online activities from browsing, video streaming, and large file transferring.
Faster and Easier Branch Network Deployment
We all know that manual configuration is slow and error-prone, and sending engineers on site is increasing more expensive. However, enterprises are becoming increasingly distributed across the globe. As the number of branch offices are growing massively, the ability to automate branch network provisioning and configuration is essential for WAN solutions.
> Auto-Provisioning VPN Bonding
Q-Balancer enables enterprise networks to be provisioned and configured automatically. VPN bonding is done through an inbuilt technology of XBond (a bandwidth bonding technology of Q-Balancer). The setting of XBond is auto-provisioned, and so can be configured automatically in a minimal effort. Adding a new branch network to an enterprise network will take only few minutes, not hours or even days because the technology significantly reduces time and manual overhead for installation.
The enterprise overlay was traditionally established in multiple step process, and yet it now can be established in few simple clicks on the branch appliance through its auto-provisioning configuration and intuitive web interface. When a branch appliance boots up, it initiates to connect central hub to build overlay tunnels and complete the rest of necessary configuration. The configuration including IP configuration, encryption, authentication, policy-based routing (PBR) rules, and bandwidth bonding are now all handled with little manual intervention, and hence branch network deployments can be implemented without the reliance on expensive experts or sending IT engineers on site.
- Branch device is connected to the internet.
- Branch device initiates to connect headend device to build XBond tunnels.
- Headend device receives & checks the message, and then confirms.
- Headend device replies branch device with the message, which says XBond tunnels have been built successfully. Once the tunnels are established, the routing policies are then automatically built as well.
Auto-Provisioning VPN Bonding
Once a branch appliance is successfully installed, Q-Balancer automates the follow-up steps including firmware update and security patch, etc. Network administrators can also use the Q-Balancer manager (QBM), which is a central management system, to centrally manage the branch Q-Balancer devices. This greatly reduces operation cost because IT team can centrally send and apply settings to branch devices without any local actions taken as long as the device is connected to the enterprise network.
Top Benefits
> Increased application performance
> Automated VPN Tunnel Failover & Fallback
> Fully meshed resiliency
> Service provider independence
> Support static IP, dynamic IP, and private IP
> Mitigated the possibility of human errors
> Simplified the device installation, management, and upgrades
> Saved time and expense on the trip between office and customer premises
