SD-WAN over MPLS: A Comprehensive Performance Analysis and Security with Insights into the Future of SD-WAN

TL;DR

This paper evaluates SD-WAN over MPLS in a financial institution, demonstrating its performance, security benefits, and exploring future trends like SASE and AI/ML integration.

Contribution

It provides a comprehensive analysis of SD-WAN over MPLS, including deployment, performance comparison, security measures, and future insights in a real-world banking environment.

Findings

SD-WAN over MPLS improves network performance and security.

Compared to traditional MPLS, SD-WAN offers better bandwidth, lower latency, and enhanced QoS.

Future trends include SASE, AI/ML, and new transport methods.

Abstract

Software-defined wide area network (SD-WAN) enhances network traffic management, while Multiprotocol Label Switching (MPLS) offers efficient data transmission. This paper analyzes SD-WAN over MPLS in the Housing Bank, a major Algerian financial institution. We deploy FortiGate for the SD-WAN solution, comparing it to traditional MPLS and direct internet access across metrics like bandwidth, latency, jitter, packet loss, throughput, and quality of service (QoS). Security measures include encryption, firewall, intrusion prevention, web filtering, antivirus, and addressing threats like spoofing, DoS attacks, and unauthorized access. We explore future trends such as SASE architecture, AI/ML integration, and emerging transport methods. SD-WAN over MPLS proves advantageous, offering enhanced performance, security, and flexibility. Recommendations include ongoing performance monitoring and research.