宣布 Magic WAN Connector 正式发布:快速启动网络 SASE 转换的最简单方法
2023-10-03
我们宣布 Magic WAN Connector 正式发布,它是您现有网络硬件和 Cloudflare 网络之间的粘合剂...
继续阅读 »
\n \n
从开箱到看到您的网络流量自动路由到最近的 Cloudflare 位置只需几分钟时间,在那里,流量先流经全栈 Zero Trust 安全控制,然后通过加速路径到达目的地,无论目的地是您专用网络上的另一个位置、SaaS 应用程序还是开放互联网上的任何应用程序。
自从我们在今年早些时候宣布公测以来,世界各地的组织已经部署了 Magic WAN Connector 来连接和保护他们的网络位置。我们很高兴 Magic WAN Connector 能够正式发布,以加速 SASE 的大规模转型。
当客户向我们讲述他们接受 SASE 的历程时,我们最常听到的故事之一是:
我们从远程工作人员入手,部署了现代化的解决方案,以确保对内部应用程序和互联网资源的访问安全。但现在,我们看到的是企业网络连接和安全的更广阔前景,这令人生畏。我们希望将所有基础设施都转变为以云和互联网为中心的模式,但却苦于不知如何着手。
Magic WAN Connector 就是为了解决这个问题而诞生的。
\nCloudflare One 使任何规模的企业都能通过我们的全球连通云提供的统一平台,连接并保护其所有用户、设备、应用程序、网络和数据。Magic WAN 是 Cloudflare One 的网络连接“粘合剂”,使我们的客户能够摆脱传统的专用线路,将我们的网络作为其自身网络的扩展。
以前,客户通过在其边缘网络设备(通常是现有的路由器或防火墙)上配置的Anycast GRE 或 IPsec 隧道将其分支机构连接到 Magic WAN,或者直接插入我们的 CNI。但在过去几年里,我们听到数百位客户要求以零接触方式连接他们的分支机构:我们只需要一个可以插入并打开的设备,其余的都让这个设备来处理。
Magic WAN Connector 就是这样的设备。客户收到的是经过 Cloudflare 认证的硬件,上面预装了我们的软件,一切都通过 Cloudflare 仪表板进行控制。过去耗时的复杂流程现在只需几分钟就能为所有流量提供强大的 Zero Trust 保护。
除了自动配置隧道和路由策略以将您的网络流量导向 Cloudflare 之外,Magic WAN Connector 还将处理流量转向、整形和故障转移,以确保您的数据包始终以最佳路径到达最近的 Cloudflare 网络位置,而且可能只需要几毫秒的时间。您还将在分析和日志中获得对所有流量的更高可见性,为您的分支机构和通过 Cloudflare 网络的流量提供统一的可观察性体验。
\n一旦将 Magic WAN Connector 部署到您的网络位置,您就可以自动访问,以在公共和专用流量中执行 Zero Trust 安全策略。
将网络位置连接到 Cloudflare 后,改善组织安全态势的第一步是创建安全 Web 网关策略,以抵御勒索软件、网络钓鱼和其他威胁,从而实现更快、更安全的互联网浏览。默认情况下,来自安装了 Magic WAN Connector 的位置的所有互联网流量都将通过 Cloudflare Gateway 路由,为来自物理位置和远程员工的流量提供统一的管理平面。
Magic WAN Connector 还可以在您的网络位置之间路由专用流量,并实施多层网络和 Zero Trust 安全控制。传统的网络架构需要部署和管理一系列安全硬件,并通过中央位置回传分支流量以进行过滤,而 SASE 架构则不同,它提供内置的专用流量过滤和控制:在分布式网络中执行,但通过单个仪表板界面或 API 进行管理。
Cloudflare One 可根据位置类型,通过简易入口实现任何物理或云网络的连接。Magic WAN Connector 可为分支机构提供轻松的连接,还可自动连接其他网络,包括使用云原生结构(如 VPN 网关)或直接云连接(通过云 CNI)连接的 VPC。通过跨物理和云基础设施的统一连接和控制平面,IT 和安全团队可以减少管理多云和混合云网络的开销和成本。
\n随着 Magic WAN Connector 正式发布,我们已经完成了提供统一 SASE 平台的最后一步,从头开始开发并全面集成。通过单一供应商部署和管理 SASE 的所有组件,相比将不同的网络和安全解决方案拼凑起来,可以降低复杂性和潜在的集成挑战,显著简化部署和管理。许多销售完整 SASE 解决方案的供应商实际上已经通过收购将不同的产品拼凑在一起,从而获得了与部署和管理多个不同供应商类似的非集成体验。相比之下,Cloudflare One(现在配备了用于简化分支功能的 Magic WAN Connector)使组织能够实现 SASE 的真正承诺:获得一个简化、高效和高度安全的网络和安全基础设施,从而降低您的总拥有成本,并适应现代数字环境中不断变化的需求。
\nCloudflare One 解决了组织在部署 SD-WAN 时遇到的许多难题,帮助简化了网络运行。SD-WAN 可提供协调功能,帮助在一个位置管理设备和配置,还可提供最后一英里流量管理功能,根据比传统路由器更复杂的逻辑引导和规划流量。但是,SD-WAN 设备通常不具备嵌入式安全控制功能,因此团队只能将硬件、虚拟化和基于云的工具拼凑在一起,以确保网络安全。他们可以决定从客户分支机构发送流量的最佳方式,但却无法影响最后一英里和流量目的地之间的流量跳转。虽然一些 SD-WAN 提供商已经推出了可在云环境中部署的虚拟化设备版本,但它们并不支持本地云连接,可能会使向云的过渡变得复杂而不是轻松。
Cloudflare One 代表着企业网络的下一个发展阶段,其架构与传统网络或 SD-WAN 都有着本质区别。它基于“轻分支、重云端”原则:在物理位置(或虚拟网络中的虚拟硬件,如云 VPC)内部署所需的最低硬件,并使用低成本互联网连接到达最近的“服务边缘”位置。在这些位置,流量可以通过安全控制流向目的地,无论目的地是客户专用网络内的另一个位置,还是公共互联网上的应用程序,流量都能得到优化。这种架构还能实现远程用户访问连接的网络。
这种转变——将大部分“智能”从分支机构转移到分布式全球网络边缘,只将绝对需要本地存在的功能留在分支机构,由 Magic WAN Connector 提供——解决了我们客户当前的问题,并使他们能够在连接和攻击环境不断变化的情况下,更轻松地进行管理并采取更有力的安全措施。
Aspect | Example | MPLS/VPN Service | SD-WAN | SASE with Cloudflare One |
Configuration | New site setup, configuration and management | By MSP through service request | Simplified orchestration and | Automated orchestration via SaaS portal Single Dashboard |
Last mile traffic control | Traffic balancing, QoS, and failover | Covered by MPLS SLAs | Best Path selection available | Minimal on-prem deployment to control local decision making |
Middle mile traffic control | Traffic steering around middle mile congestion | Covered by MPLS SLAs | “Tunnel Spaghetti” and still no control over the middle mile | Integrated traffic management & private backbone controls in a unified dashboard |
Cloud integration | Connectivity for cloud migration | Centralized breakout | Decentralized breakout | Native connectivity with Cloud Network Interconnect |
Security | Filter in & outbound Internet traffic for malware | Patchwork of hardware controls | Patchwork of hardware | Native integration with user, data, application & network security tools |
Cost | Maximize ROI for network investments | High cost for hardware and connectivity | Optimized connectivity costs at the expense of increased hardware and software costs | Decreased hardware and connectivity costs for maximized ROI |
方面
示例
MPLS/VPN 服务
SD-WAN
SASE
Cloudflare One
配置
新站点设立、配置和管理
服务请求由 MSP 提供
通过集中控制器 简化编排和管理
(具有通过 SaaS 门户自动编排功能)
单一仪表板
最后一公里
流量控制
流量平衡、QoS 和故障转移
由 MPLS SLA 覆盖
SD-WAN 设备中提供的最佳路径选择
最小化本地部署以控制本地决策
中间一公里
流量控制
绕过中间一公里拥堵的流量引导
由 MPLS SLA 覆盖
“隧道错综复杂”,但依然未能控制中间一英里
统一仪表板中的集成流量管理和专用骨干网控制
云集成
适用于云迁移的连接
集中访问
非集中访问
使用 Cloud Network Interconnect 的原生连接
安全
过滤进出互联网流量以防恶意软件
拼凑的硬件控制
拼凑的硬件和/或软件控制
原生集成用户、数据、应用和网络安全工具
费用
最大化网络投资的 ROI
硬件和连接的高成本
优化连接成本以
增加硬件和软件成本为代价
降低硬件和连接成本以最大化 ROI
传统架构、基于 SD-WAN 的架构和 SASE 架构注意事项总结
喜欢并希望保留当前的 SD-WAN 供应商?没问题,您仍然可以使用任何支持 IPsec 或 GRE 的设备作为 Cloudflare One 的入口。
\n您可以在我们的开发文档中了解有关 Magic WAN Connector 的更多信息,包括设备规格、具体功能信息、引进过程详情等,或者联系我们立即开始使用。
"],"published_at":[0,"2023-10-03T13:55:34.000+01:00"],"updated_at":[0,"2024-11-22T17:40:08.915Z"],"feature_image":[0,"https://cf-assets.www.cloudflare.com/zkvhlag99gkb/69EmEc30BYiVjb4sQVT4oX/f8e12b47ef7735774a4c299b347c6a22/magic-wan-connector-general-availability.png"],"tags":[1,[[0,{"id":[0,"6QktrXeEFcl4e2dZUTZVGl"],"name":[0,"产品新闻"],"slug":[0,"product-news"]}],[0,{"id":[0,"6Mp7ouACN2rT3YjL1xaXJx"],"name":[0,"安全"],"slug":[0,"security"]}],[0,{"id":[0,"7r0zxUQ3XCgTw2blCdlw55"],"name":[0,"Magic WAN"],"slug":[0,"magic-wan"]}],[0,{"id":[0,"4yp4kTLKcP1odooi6ADoJY"],"name":[0,"Magic WAN Connector"],"slug":[0,"magic-wan-connector"]}],[0,{"id":[0,"2UI24t7uddD0CIIUJCu1f4"],"name":[0,"SASE"],"slug":[0,"sase"]}],[0,{"id":[0,"J61Eszqn98amrYHq4IhTx"],"name":[0,"Zero Trust"],"slug":[0,"zero-trust"]}],[0,{"id":[0,"5OywGP63AdM9Umyvaku8OP"],"name":[0,"Connectivity Cloud"],"slug":[0,"connectivity-cloud"]}]]],"relatedTags":[0],"authors":[1,[[0,{"name":[0,"Annika Garbers"],"slug":[0,"annika"],"bio":[0,null],"profile_image":[0,"https://cf-assets.www.cloudflare.com/zkvhlag99gkb/6SY53ZloWPZ3xlkvdwhfNZ/ac5d40ee46780432e16dd7fc74c1e698/annika.png"],"location":[0,null],"website":[0,null],"twitter":[0,"@annikagarbers"],"facebook":[0,null]}]]],"meta_description":[0,"We’re announcing the general availability of the Magic WAN Connector, which serves as the glue between your existing network hardware and Cloudflare’s networ"],"primary_author":[0,{}],"localeList":[0,{"name":[0,"Announcing General Availability for the Magic WAN Connector: the easiest way to jumpstart SASE transformation for your network Config"],"enUS":[0,"English for Locale"],"zhCN":[0,"Translated for Locale"],"zhHansCN":[0,"No Page for Locale"],"zhTW":[0,"Translated for Locale"],"frFR":[0,"No Page for Locale"],"deDE":[0,"No Page for Locale"],"itIT":[0,"No Page for Locale"],"jaJP":[0,"Translated for Locale"],"koKR":[0,"Translated for Locale"],"ptBR":[0,"No Page for Locale"],"esLA":[0,"No Page for Locale"],"esES":[0,"No Page for Locale"],"enAU":[0,"No Page for Locale"],"enCA":[0,"No Page for Locale"],"enIN":[0,"No Page for Locale"],"enGB":[0,"No Page for Locale"],"idID":[0,"No Page for Locale"],"ruRU":[0,"No Page for Locale"],"svSE":[0,"No Page for Locale"],"viVN":[0,"No Page for Locale"],"plPL":[0,"No Page for Locale"],"arAR":[0,"No Page for Locale"],"nlNL":[0,"No Page for Locale"],"thTH":[0,"No Page for Locale"],"trTR":[0,"No Page for Locale"],"heIL":[0,"No Page for Locale"],"lvLV":[0,"No Page for Locale"],"etEE":[0,"No Page for Locale"],"ltLT":[0,"No Page for Locale"]}],"url":[0,"https://blog.cloudflare.com/magic-wan-connector-general-availability"],"metadata":[0,{"title":[0,"宣布 Magic WAN Connector 正式发布:快速启动网络 SASE 转换的最简单方法"],"description":[0,"We’re announcing the general availability of the Magic WAN Connector, which serves as the glue between your existing network hardware and Cloudflare’s networ"],"imgPreview":[0,"https://cf-assets.www.cloudflare.com/zkvhlag99gkb/26MS3QDTmXoYHjwy9PmimO/0d4235864e1e64076e447a4c898b390f/magic-wan-connector-general-availability-YKM1ry.png"]}]}],"locale":[0,"zh-cn"],"translations":[0,{"posts.by":[0,"作者"],"footer.gdpr":[0,"GDPR"],"lang_blurb1":[0,"这篇博文也有 {lang1} 版本。"],"lang_blurb2":[0,"这篇博文也有 {lang1} 和{lang2}版本。"],"lang_blurb3":[0,"这篇博文也有 {lang1}、{lang2} 和{lang3}版本。"],"footer.press":[0,"新闻"],"header.title":[0,"Cloudflare 博客"],"search.clear":[0,"清除"],"search.filter":[0,"过滤"],"search.source":[0,"来源"],"footer.careers":[0,"招聘"],"footer.company":[0,"公司"],"footer.support":[0,"支持"],"footer.the_net":[0,"theNet"],"search.filters":[0,"过滤器"],"footer.our_team":[0,"我们的团队"],"footer.webinars":[0,"网络研讨会"],"page.more_posts":[0,"更多帖子"],"posts.time_read":[0,"{time} 分钟阅读时间"],"search.language":[0,"语言"],"footer.community":[0,"社区"],"footer.resources":[0,"资源"],"footer.solutions":[0,"解决方案"],"footer.trademark":[0,"商标"],"header.subscribe":[0,"订阅"],"footer.compliance":[0,"合规性"],"footer.free_plans":[0,"Free 计划"],"footer.impact_ESG":[0,"影响/ESG"],"posts.follow_on_X":[0,"在 X 上关注"],"footer.help_center":[0,"帮助中心"],"footer.network_map":[0,"网络地图"],"header.please_wait":[0,"请稍候"],"page.related_posts":[0,"相关帖子"],"search.result_stat":[0,"针对 {search_keyword} 的第 {search_range} 个搜索结果(共 {search_total} 个结果)"],"footer.case_studies":[0,"案例研究"],"footer.connect_2024":[0,"Connect 2024"],"footer.terms_of_use":[0,"服务条款"],"footer.white_papers":[0,"白皮书"],"footer.cloudflare_tv":[0,"Cloudflare TV"],"footer.community_hub":[0,"社区中心"],"footer.compare_plans":[0,"比较各项计划"],"footer.contact_sales":[0,"联系销售"],"header.contact_sales":[0,"联系销售团队"],"header.email_address":[0,"电子邮件地址"],"page.error.not_found":[0,"未找到页面"],"footer.developer_docs":[0,"开发人员文档"],"footer.privacy_policy":[0,"隐私政策"],"footer.request_a_demo":[0,"请求演示"],"page.continue_reading":[0,"继续阅读"],"footer.analysts_report":[0,"分析报告"],"footer.for_enterprises":[0,"企业级服务"],"footer.getting_started":[0,"开始使用"],"footer.learning_center":[0,"学习中心"],"footer.project_galileo":[0,"Project Galileo"],"pagination.newer_posts":[0,"较新的帖子"],"pagination.older_posts":[0,"较旧的帖子"],"posts.social_buttons.x":[0,"在 X 上讨论"],"search.icon_aria_label":[0,"搜索"],"search.source_location":[0,"来源/位置"],"footer.about_cloudflare":[0,"关于 Cloudflare"],"footer.athenian_project":[0,"Athenian Project"],"footer.become_a_partner":[0,"成为合作伙伴"],"footer.cloudflare_radar":[0,"Cloudflare Radar"],"footer.network_services":[0,"网络服务"],"footer.trust_and_safety":[0,"信任与安全"],"header.get_started_free":[0,"免费开始使用"],"page.search.placeholder":[0,"搜索 Cloudflare"],"footer.cloudflare_status":[0,"Cloudflare 状态"],"footer.cookie_preference":[0,"Cookie 首选项"],"header.valid_email_error":[0,"必须是有效的电子邮件地址。"],"search.result_stat_empty":[0,"显示第 {search_range} 个结果(共 {search_total} 个结果)"],"footer.connectivity_cloud":[0,"全球连通云"],"footer.developer_services":[0,"开发人员服务"],"footer.investor_relations":[0,"投资者关系"],"page.not_found.error_code":[0,"错误代码:404"],"search.autocomplete_title":[0,"请输入查询内容。按回车键发送"],"footer.logos_and_press_kit":[0,"标识与媒体资料包"],"footer.application_services":[0,"应用程序服务"],"footer.get_a_recommendation":[0,"获得推荐"],"posts.social_buttons.reddit":[0,"在 Reddit 上讨论"],"footer.sse_and_sase_services":[0,"SSE 和 SASE 服务"],"page.not_found.outdated_link":[0,"您可能使用了过期的链接,或者输入了错误的地址。"],"footer.report_security_issues":[0,"报告安全问题"],"page.error.error_message_page":[0,"抱歉,我们找不到您要打开的页面。"],"header.subscribe_notifications":[0,"订阅以接收新文章的通知:"],"footer.cloudflare_for_campaigns":[0,"Cloudflare for Campaigns"],"header.subscription_confimation":[0,"订阅已确认。感谢订阅!"],"posts.social_buttons.hackernews":[0,"在 Hacker News 上讨论"],"footer.diversity_equity_inclusion":[0,"多元、公平与包容"],"footer.critical_infrastructure_defense_project":[0,"关键基础设施防护项目"]}]}" ssr="" client="load" opts="{"name":"PostCard","value":true}" await-children="">2023-10-03
我们宣布 Magic WAN Connector 正式发布,它是您现有网络硬件和 Cloudflare 网络之间的粘合剂...
继续阅读 »2023-01-10
凭借 Magic WAN 连接器,Cloudflare 让网络连接更简便:因为您可以在任何物理网络或云网络中安装这个轻量级软件包,用于自动连接、引导和调整 IP 流量...