What is new with the VeloCloud Software Release 3.3.2
VMware/VeloCloud SD-WAN Release 3.3.2 provides several new feature enhancements for Windstream.
New Hardware Platforms
The following new hardware devices are also being released:
Fortinet ® Fortigate™ Virtual Appliances can now be deployed as Firewall VNF's on VMware SD-WAN Edge hardware. Only the 520v and 840 devices are currently supported.
Internally the VNF service is designed as shown in the figure below. The VNF sits between the LAN interfaces and SD-WAN software. Traffic coming from the LAN going to the WAN is sent to the VNF first. The VNF inspects the traffic and then forwards it to the SD-WAN software on the box.
Traffic can be forwarded to the VNF selectively. In the figure below VLAN1 traffic is forwarded through the VNF, whereas VLAN2 traffic is sent directly to the SDWAN software.
The LAN-Side NAT feature allows for source or destination NAT rules to be applied to traffic before route and Business Policy lookups occur on the Edge. As a result, certain use cases such as branches with overlapping subnets can now be natively supported without a readdressing effort or the deployment of an external layer 3 device.
Last Known Good Device Settings
When an Edge successfully establishes a Management Channel, as in connects to an Orchestrator, it saves a copy of its working configuration as its "Last-Known-Good Device Settings".
If it was to lose connectivity to the Orchestrator as a result of certain configuration changes, it will automatically revert to its previous working configuration to reconnect to the Orchestrator. It will also log a critical event indicating that the last configuration change took down the Management channel.
The following changes could cause an Edge to lose its Management channel:
- Adding an invalid static route
- Configuring an incorrect IP address or next hop
- Configuring an incorrect VLAN tag
High Availability (HA) Split-brain Detection and Prevention
The following HA enhancements were added to minimize the risk of Split-Brain condition:
- In Standard HA (with a WAN switch present), heartbeats are sent via the WAN-side switch using ethertype 0x9999 in addition to the HA cable to maintain HA connectivity and prevent a split-brain scenario
Cluster LAN-side failure detection
In a clustered topology with dynamic routing enabled, if a Hub in the cluster loses all dynamic routes on the LAN and the other Hubs in the cluster do not, then the Gateway will rebalance or migrate the Edges from the Hub that has lost its dynamic routes.
DISCLAIMER: There may be features listed here that do not get immediately implemented and may be added based on customer demand in the future.
The Windstream Enterprise Community is a community of real people who collaborate on answers, solutions, and ideas about the Windstream Enterprise products and services they use. We invite you to become a member, but we do have a few rules. For everyone's sake, we are committed to enforcing these guidelines, as well as our community vendor's Terms of Service.
People will respect you more, engage with you more often, and treat you like a real person if you use your actual identity here. While not mandatory, it does help us identify accounts when we try to provide answers to specific questions.
We are into transparency, honesty, and truth. Do not misrepresent yourself or lie about your identity, affiliations, or age. Our community is based on the contributions of real people who put their reputations on the line. Be one of them.
Have (Good, Clean) Fun
We encourage the spirit of fun, so long as it does not hurt other people. Please do not use jokes, words or images that come at the expense of others. Be sensitive to other users around you, and do not post profane, sexual, or violent material.
Be Constructive with Your Criticism
The idea here is to foster healthy conversation and debate without ever attacking anyone personally. We take all questions, suggestions, and feedback seriously and will respond accordingly and so should you.
Spread the Wealth
Make our community a richer place by sharing your experience and insight. You may have the perfect answer to someone else's burning question. This is the substance of the Windstream Enterprise Community.
It is okay to talk up the products or services you love (or sell), but only if it is relevant to the conversation. If you are here to plant a ton of links to your Web site without doing much else, your posts are likely to be removed by a moderator.
Do Not Wrongfully Post Content
Make sure you have the right to publish any content you post to the Windstream Enterprise Community, and do not violate the privacy of others.
Be Fruitful, but Do Not Multiply
Do not create multiple accounts to violate these guidelines, game the system, or harass and deceive other users.
Trolls are users whose primary goal is to disrupt the community, attack other users, antagonize community managers, and are never interested in a productive outcome. If you engage in troll behavior, we will ask you to leave the Windstream Enterprise Community.
We are Here to Help
If you have questions or issues, we are always available to help you. Please call us at 1-888-600-5050.