SD-WAN is Critical for IoT

物联网（物联网）无处不在，它的使用迅速。地方政府使用物联网来建立智能城市并创建智能业务。行业分析师估计，到2025年将在全球范围内连接超过300亿个IoT设备，这是从2021年的138亿台上急剧上升。

Manufacturing companies have the highest IoT spend to date of industries while the health care market continues to experience the highest IoT growth. The promise of analytical data insights to yield greater efficiencies and enhanced customer satisfaction fuels IoT growth. The top use cases driving IoT growth are self-optimizing production, predictive maintenance, and automated inventory management.

From a high-level view, IoT includes sensors that collect and transmit data (i.e., temperature, speed, humidity, video feed, pressure, IR, proximity) from "things" like cars, trucks, machines, etc., connected over the internet. Data collected is then analyzed, translating raw data into actionable information. Businesses can then act on this information. And at more advanced levels, machine learning and AI algorithms learn and adapt to this data and automatically respond at a system level.

大量的物联网数据继续推动网络基础架构的流量呈指数增加，需要巨大的可扩展性。大量数据需要巨大的处理能力来挖掘并将其转变为可行的智能。同时，由于潜在地进入网络，因此需要采取更健壮的安全措施。最后，整体基础架构的管理需要更好地编排政策和简化正在进行的运营的手段。

SD-WAN使物联网如何business initiatives?

There are three key elements that anSD-WAN平台必须包括：

1. 能见度：对网络的实时可见性至关重要。它从快速的问题解决方案中进行了猜测，使组织能够通过加速故障排除和采用预防措施来更有效地运行。此外，CIO可以提取指标，并看到任何物联网应用程序消耗的带宽。
2. Security: IoT traffic must be isolated from other application traffic. IT must prevent the possible attack surface exposed to IoT device traffic. Also, enterprises must embrace Role-Based Access Control (RBAC) to augment application intelligence with the user and device identity and role information for stronger security policy enforcement.
3. Agility：随着连接的设备，应用程序和用户的数量增加，一种全面，智能和集中的编排方法不断适应为企业和用户提供最佳体验，这对于成功至关重要。

关键的Aruba EdgeConnect SD-WAN物联网功能

1. Aruba has an embedded real-time visibility engine allowing IT to gain complete observability into the performance attributes of the network and applications in real-time. The ArubaEdgeConnect SD-WANappliances deployed in branch offices send information to the centralizedAruba Orchestrator. Orchestrator collects the data and presents it in a comprehensive management dashboard via customizable widgets. These widgets provide a wealth of operational data, including a health heatmap for every SD-WAN appliance deployed, flow counts, active tunnels, logical topologies, top talkers, alarms, bandwidth consumed by each application and location, latency, and jitter, and much more. Furthermore, the platform maintains weeks' worth of data with context, allowing IT to playback and see what has transpired at a specific time and location, like a DVR.
2. The second set of critical capabilities center around security and centrally orchestrated end-to-end segmentation. ArubaClearPass与Aruba EdgeConnect SD-WAN EDGE平台集成，并通过用户和设备身份和角色信息增加应用程序智能。基于其他身份的上下文可以实现细粒度的细分和一致的安全策略执行，可以从边缘到云进行网络范围内强制执行，同时还可以加速故障排除和解决问题。通过Aruba Clearpass和EdgeConnect的组合，客户可以在网络边缘分段设备流量并将其与网络中的其他流量隔离。这种新的上下文层可实现细粒度的细分，而无需管理多个VLAN的复杂性。例如，细粒度的细分策略可以防止物联网安全摄像机访问信用卡交易或HVAC系统。E2E细分可帮助企业按设备类型，角色和应用来隔离潜在的安全威胁，同时协助他们满足行业合规要求，例如PCI，HIPAA和SOX。
3. Aruba EdgeConnect employs machine learning at the global level where with internet sensors and third-party sensors feed into the cloud portal software. The software tracks the geolocation of all IP addresses and IP reputation, distributing signals down to the Aruba Orchestrator running in each individual customer’s enterprise. In turn, it is speaking to the edge devices sitting in the branch offices. There, distributed learning is done by looking at the first packet, making an inference based on the first packet what the application is. So, if seeing that 100 times now, every time packets come from that IP address and turns out to be an IoT, we can make an inference that IP belongs to IoT application. In parallel, we’re using a mix of traditional techniques to validate the identification of the application. All this combined other multi-level intelligence enables simple and automated policy orchestration across many devices and applications.

SD-WAN plays a foundational role as businesses continue to embrace IoT. However, choosing the right SD-WAN platform is even more critical to optimize companies' operations fully.

* Source:Statista

Related Resources:

1. 零信任，UTM和最好的Sase - 没有折衷！
2. 集中精心策划的端到端分段
3. Not all SD-WANs are created equal