Table of Contents
- Cloud Networking Primer
- Report Methodology
- Decision Criteria Analysis
- Evaluation Metrics
- Architecture Models
- Key Criteria: Impact Analysis
- Analyst’s Take
- About Andrew Green
Cloud networking software enables data transmission within and between clouds by deploying and orchestrating virtual network functions (VNFs). Cloud networking is entirely software driven. Each virtual appliance plays a role in defining how the cloud entities communicate among themselves at a logical level, while also enabling connectivity across different data centers and cloud providers.
The virtualized nature of cloud environments, by which infrastructure is delivered as a service, does not allow cloud tenants the possibility of deploying hardware appliances like they do at on-premises data centers. Therefore, to enable networking in the cloud, providers have offered the virtual equivalent of appliances such as routers, firewalls, and load balancers. Within a cloud environment’s availability zones, these native tools allow users to logically define their virtual infrastructure estate and create policies that enable applications to communicate with each other without traversing the public internet.
While these cloud-native tools work fairly well within one provider’s environment, communicating across multiple availability zones, public clouds, private clouds, colocation environments, on-premises devices, and edge locations is difficult and hard to secure. Cloud networking providers enhance the capabilities of these native tools with better visibility, multicloud awareness, service insertion, granular controls, enhanced security, and third-party integrations. The cloud networking software we will be evaluating can be deployed in any one environment and can also enable communication among multiple environments.
Whether native or not, cloud networking software is, in essence, the software version of a traditionally physical appliance. It is a collection of VNFs. However, it must offer additional features as well, beyond network function virtualization (NFV), that make it suitable for cloud workloads. Such features include:
- Cloud awareness: The solution has visibility and control over the cloud provider’s data centers, regions, or availability zones.
- DevOps suitable: To enhance DevOps practices, cloud networking must leverage infrastructure as code (IaC) tools, which can help to include networking as part of the continuous integration and continuous delivery/deployment (CI/CD) methodology.
- Application performance: The solution is designed to ensure application performance (and quality of experience) by operating at Layer 7.
- Autoscaling: The solution can allocate and retract networking resources dynamically according to demand.
Additionally, modern solutions provide a centralized management platform that offers control over all of the customer’s cloud environments and on-premises data centers. The solution can either be interacted with via a graphical user interface (GUI), command-line interface (CLI), or application programming interface (API), or it can be integrated with IaC tools. The management solution can help as well with topological views, troubleshooting, performance monitoring, access controls, and compliance.
Security for cloud networking involves two facets: traffic filtering and secure access. For traffic filtering, we can employ VNFs such as firewalls, either as standalone devices or as part of transit gateways, to create segments and microsegments that isolate applications or databases. For secure access, we use access control lists, zero-trust network access (ZTNA), and multifactor authentication (MFA).
This GigaOm Key Criteria report details the capabilities (table stakes, key criteria, and emerging technologies) and evaluation metrics (non-functional purchase drivers) for selecting an effective cloud networking solution. The companion GigaOm Radar report identifies vendors and products that excel in those capabilities and metrics. Together, these reports provide an overview of the category and its underlying technology, identify leading cloud networking offerings, and help decision-makers evaluate these solutions so they can make a more informed investment decision.
How to Read this Report
This GigaOm report is one of a series of documents that helps IT organizations assess competing solutions in the context of well-defined features and criteria. For a fuller understanding, consider reviewing the following reports:
Key Criteria report: A detailed market sector analysis that assesses the impact that key product features and criteria have on top-line solution characteristics—such as scalability, performance, and TCO—that drive purchase decisions.
GigaOm Radar report: A forward-looking analysis that plots the relative value and progression of vendor solutions along multiple axes based on strategy and execution. The Radar report includes a breakdown of each vendor’s offering in the sector.
Solution Profile: An in-depth vendor analysis that builds on the framework developed in the Key Criteria and Radar reports to assess a company’s engagement within a technology sector. This analysis includes forward-looking guidance around both strategy and product.