Citrix SD-WAN

Backhaul Internet

March 12, 2021

Contributed by:

The Citrix SD-WAN solution can backhaul Internet traffic to the MCN site or other branch sites. Backhaul indicates that the traffic destined for the Internet is sent back through another predefined site that can access the Internet. It is useful for networks that do not allow Internet access directly because of security concerns or the underlay networks topology. An example would be a remote site that lacks an external firewall where the on-board SD-WAN firewall does not meet the security requirements for that site. For some environments, backhauling all remote site internet traffic through the hardened DMZ at the Data Center might be the best approach to providing Internet access to users at remote offices. This approach does however have its limitations to be aware of following and the underlay WAN links size appropriately.

Backhaul of internet traffic adds latency to internet connectivity and is variable depending on the distance of the branch site for the data center.
Backhaul of internet traffic consumes bandwidth on the Virtual Path and is accounted for in sizing of WAN links.
Backhaul of internet traffic might over-subscribe the Internet WAN link at the Data Center.

Backhaul DC MCN

All Citrix SD-WAN devices can terminate up to eight distinct Internet WAN links into a single device. Licensed throughput capabilities for the aggregated WAN links are listed per respective appliance on the Citrix SD-WAN data sheet.

The Citrix SD-WAN solution supports the backhaul of internet traffic with the following configuration.

Enable Internet Service at the MCN site node, or any other site note where Internet Service is desired.

Note

Enable Internet Service and Export routes if all other sites are in the WAN to WAN forwarding group.
On the branch nodes where internet traffic is backhauled, manually add a 0.0.0.0/0 route to direct all default traffic to the Virtual Path Service. The next hop is denoted as the MCN, or intermediary site.
Verify that the route table of the branch site does not have any other lower cost routes that would steer traffic other than the desired backhaul route.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

Backhaul Internet

March 12, 2021

Contributed by:

March 12, 2021

Contributed by:

Backhaul Internet

In this article