Comprehensive Strategies for Enhancing SD-WAN: Integrating Security, Dynamic Routing and Quality of Service Management

IF 1.3 Q3 COMPUTER SCIENCE, INFORMATION SYSTEMS
IET Networks Pub Date : 2025-06-09 DOI:10.1049/ntw2.70007
Raied Ibrahim, Ibrahim Khider, Salaheldin Edam, Twasul Mukhtar
{"title":"Comprehensive Strategies for Enhancing SD-WAN: Integrating Security, Dynamic Routing and Quality of Service Management","authors":"Raied Ibrahim,&nbsp;Ibrahim Khider,&nbsp;Salaheldin Edam,&nbsp;Twasul Mukhtar","doi":"10.1049/ntw2.70007","DOIUrl":null,"url":null,"abstract":"<p>Software-defined wide area networks (SD-WAN) change how networks are operated to be more flexible, cost-conscious and efficient than traditional VPNs. However, significant challenges face the successful deployment of SD-WAN because of vulnerabilities in security, consistent quality of service (QoS) compliance and seamless connectivity for hybrid and multi-cloud environments. This paper discusses the most important ones: approaches to implementing IPsec encryption and zero trust framework security for the protection of SD-WAN networks. It further mentions connectivity solutions through other sophisticated routing mechanisms, such as segment routing (SR) and path computation element (PCE), with more emphasis on latency and scalability issues. QoS issues are addressed, notably jitter management, packet loss and latency reduction through dynamic path selection and traffic optimisation. The findings advocate the ability of SD-WAN to change the parent enterprise networks while consolidating continuous monitoring, optimisation and update with recent technology. Future work is set to explore the techniques within the deep learning community applicable in better resource allocation and scalability in SD-WAN implementations.</p>","PeriodicalId":46240,"journal":{"name":"IET Networks","volume":"14 1","pages":""},"PeriodicalIF":1.3000,"publicationDate":"2025-06-09","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://onlinelibrary.wiley.com/doi/epdf/10.1049/ntw2.70007","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"IET Networks","FirstCategoryId":"1085","ListUrlMain":"https://onlinelibrary.wiley.com/doi/10.1049/ntw2.70007","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q3","JCRName":"COMPUTER SCIENCE, INFORMATION SYSTEMS","Score":null,"Total":0}
引用次数: 0

Abstract

Software-defined wide area networks (SD-WAN) change how networks are operated to be more flexible, cost-conscious and efficient than traditional VPNs. However, significant challenges face the successful deployment of SD-WAN because of vulnerabilities in security, consistent quality of service (QoS) compliance and seamless connectivity for hybrid and multi-cloud environments. This paper discusses the most important ones: approaches to implementing IPsec encryption and zero trust framework security for the protection of SD-WAN networks. It further mentions connectivity solutions through other sophisticated routing mechanisms, such as segment routing (SR) and path computation element (PCE), with more emphasis on latency and scalability issues. QoS issues are addressed, notably jitter management, packet loss and latency reduction through dynamic path selection and traffic optimisation. The findings advocate the ability of SD-WAN to change the parent enterprise networks while consolidating continuous monitoring, optimisation and update with recent technology. Future work is set to explore the techniques within the deep learning community applicable in better resource allocation and scalability in SD-WAN implementations.

增强SD-WAN的综合策略:集成安全性、动态路由和服务质量管理
软件定义广域网(SD-WAN)改变了网络的运行方式,使其比传统的vpn更灵活、更节约成本、更高效。然而,SD-WAN的成功部署面临着重大挑战,因为在安全性、一致的服务质量(QoS)合规性以及混合和多云环境的无缝连接方面存在漏洞。本文讨论了其中最重要的:实现IPsec加密和零信任框架安全的方法,以保护SD-WAN网络。它进一步提到了通过其他复杂路由机制(如段路由(SR)和路径计算元素(PCE))的连接解决方案,并更加强调延迟和可伸缩性问题。解决了QoS问题,特别是通过动态路径选择和流量优化减少抖动管理、数据包丢失和延迟。研究结果表明,SD-WAN能够改变母企业网络,同时利用最新技术巩固持续监测、优化和更新。未来的工作将是探索深度学习社区内的技术,这些技术适用于SD-WAN实现中更好的资源分配和可扩展性。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
求助全文
约1分钟内获得全文 求助全文
来源期刊
IET Networks
IET Networks COMPUTER SCIENCE, INFORMATION SYSTEMS-
CiteScore
5.00
自引率
0.00%
发文量
41
审稿时长
33 weeks
期刊介绍: IET Networks covers the fundamental developments and advancing methodologies to achieve higher performance, optimized and dependable future networks. IET Networks is particularly interested in new ideas and superior solutions to the known and arising technological development bottlenecks at all levels of networking such as topologies, protocols, routing, relaying and resource-allocation for more efficient and more reliable provision of network services. Topics include, but are not limited to: Network Architecture, Design and Planning, Network Protocol, Software, Analysis, Simulation and Experiment, Network Technologies, Applications and Services, Network Security, Operation and Management.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
copy
已复制链接
快去分享给好友吧!
我知道了
右上角分享
点击右上角分享
0
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:604180095
Book学术官方微信