Direct Internet access
The simplest SD-WAN deployment is a single-edge site consisting of one router, one LAN subnet, and one WAN connection.
In this topology, Internet traffic is sent directly from the site to the Internet through the local WAN connection. This approach is commonly referred to as a local Internet breakout and provides users with a direct path to Internet resources without transiting through another site or data center.
The SD-WAN router enforces security and traffic management functions locally. Standard SD-WAN capabilities include:
Firewall services to control and protect Internet-bound traffic.
Quality of Service (QoS) mechanisms to prioritize business-critical traffic over the WAN connection.
SD-WAN policies to optimize traffic forwarding decisions.
These capabilities are embedded in the router and are available with the Secure Connect license.
To enable direct Internet access, an internet overlay (local access) must be created and associated with the sites that require a local Internet breakout.
The following design illustrates a direct Internet access topology.
 |