Software-defined WAN. A vendor's overlay connects branches over more than one transport and chooses paths centrally; in Virtual WAN, the tunnels end on an SD-WAN NVA inside the hub instead of Microsoft's own VPN or ExpressRoute gateways.
Also called software-defined WAN.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains SD-WAN in context, with comparison tables and the common traps.
Terms in this definition
- OVER
Gives a T-SQL window function its window: PARTITION BY, ORDER BY and, if wanted, a ROWS or RANGE frame. Rankings and running totals can then be worked out while every row is kept.
- Virtual WAN
A networking service built around hubs that Microsoft manages. The Basic type handles only site-to-site VPN; Standard brings in ExpressRoute, point-to-site and full transit.
- SD-WAN NVA
NVA deployed inside a Virtual WAN hub as integrated connectivity. Branch CPE devices build their vendor SD-WAN tunnels to it, and it peers with the hub router over BGP to share routes.
- Virtual hub
Inside a Virtual WAN, a VNet managed by Microsoft that contains the hub router plus the VPN, ExpressRoute and User VPN gateways. Typically there is one per region, but several hubs can share a region.
- VPN
Traffic sent through an encrypted tunnel across a public network, as in a site-to-site connection to a VPN gateway in an Azure GatewaySubnet.
- ExpressRoute
A dedicated private link between on-premises networks and Azure, using Microsoft peering or private peering.
Related terms
- CPE
The equipment at a branch, typically an SD-WAN appliance or router, through which that site connects into a Virtual WAN hub; stands for customer premises equipment.
- NVA in the hub
A partner appliance, whether SD-WAN, NGFW or both, placed straight into a Virtual WAN hub where it runs BGP with the hub router. Each hub can hold only one.