Hello everyone,
Ive been working on a basic “SDWAN” solution for our company. Instead of going with a vendor who has it all figured out, we are looking into creating something of our own. For the beginning, i need a basic hub and spoke set up. Hub sits in our MPLS, spokes connect back over IPSEC (and probably an IP/GRE tunnel as well to do routing) over whatever kind of connection they want to get, likely some type of broadband. I agree thats hardly SD WAN, but the idea is to make that work for cheap and ultimately write our own code to control config changes, measure statistics and change routing when a link starts to become bad, and whatnot.
Does anyone have any suggestions on cheap devices that could work here? As a start I need something that can get decent throughput with IPSEC. Id expect any where from 6mbps DSL to 300mb cable connections. I also need it to have some sort of API so I can control the device remotely from a home grown application.
We have been using mikrotik CCR for the past couple months and no matter what we try the performance is just awful. Looking past the bugginess of the software (literally stuff just randomly stops working until you reboot it), throughput was unsuable when IPSEC was turned on. on a 300mb broadband circuit, I was lucky to get 50mbps out of it with ipsec on. With just a plain IPIP tunnel, i got near the 300. the CCR model we have supposedly has a built in encryption module, and i used encryption settings that were compatible but it just wasnt working out. Tried several different MTUs and MSS settings, and whatever else i could think of. Just couldn’t get it to work.
