Wan Optimization Support

Technical => Deployment => : clusterxl July 13, 2015, 01:58:14 PM

: Internet and Data Optimazation
: clusterxl July 13, 2015, 01:58:14 PM

We have a customer with HQ having local ISP for internet access and 6 Remote Sites connected to the internet via satellite and then to HQ via IPsec VPN tunnel. The connection to the internet for HQ is 20/20Mbps and for each Remote Site is 1MbpsDown/512KbpsUP. The customer is interested for WAN Optimization for both data and internet traffic. The internet/data traffic to the remote sites is through the VPN IPsec Tunnel (via the HQ).



My Questions:
1. Using this scenario both internet and data traffic will be optimized?
2. Is it ok to use the WANOS200 for both HQ and Remote Sites?

: Re: Internet and Data Optimazation
: ahenning July 13, 2015, 02:21:44 PM

1) It depends on the flow of the internet traffic. Two devices are needed: optimization and de-optimization. It seems from the description that the internet traffic flows directly over the satellite link. In this case two devices is not possible unless the ISP allows a hosted solution.
Alternatively if the Internet traffic flowed via the HQ site it would have worked but I suspect this would be very inefficient and worse off, because Internet traffic would need to traverse two satellite links. This is the same for any wanop vendor.

The ipsec traffic would be no problem since optimization at both end points are possible.

2) The 200 would be a bit weak at 20/20, the 400 would be more than sufficient for the HQ. If only the ipsec traffic is optimized and this traffic from HQ outbound is in the 6 Mbps range the 200 will be sufficient for the ipsec traffic.
: Re: Internet and Data Optimazation
: clusterxl July 13, 2015, 07:25:46 PM
Thanks for your prompt reply.

The HQ internet is via local ISP (using 20/20 land line) NOT via satelite. In practice the remote site cross only one satelite link and then access the internet via the VPN  tunnel from the HQ land line ISP.


: Re: Internet and Data Optimazation
: ahenning July 13, 2015, 07:32:30 PM
Ok, then it seems doable.

If the same device terminates both the IPsec and Internet links, one minor traffic engineering challenge will be to route/channel the Internet traffic to the optimization device before being sent over the ipsec tunnel.