Managing resources of the organization

For management purposes, the resources of your organization are logically grouped into so-called data centers. Data centers are combined into more abstract logical groups called domains. You can move data centers between domains.

Kaspersky SD-WAN uses the terms data center and domain in an unconventional way. The term 'data center' refers to a group of resources instead of a place where computer systems, servers, and equipment are located and maintained. The term 'domain' refers to a group of data centers instead of a group of computers, servers, or resources on the Internet.

The following resources are placed in data centers:

• SD-WAN and SDN Controllers.
• Virtual infrastructure managers (VIM).

  Manages computational, networking, and storage resources within the NFV infrastructure. Serves to connect network functions with virtual links, subnets, and ports.

  Can be deployed in the data center or on a uCPE device. Deploying the VIM in the data center implies centralized management of the VNF lifecycle, while a VIM deployed on a uCPE device allows delivering VNFs to remote locations and managing these VNFs locally. The deployed VIM must be added in the orchestrator web interface.

  The OpenStack cloud platform is used as the VIM.

• Zabbix proxy servers.
• Virtual Network Function Managers (VNFM).

  Manages the lifecycle of virtual network functions using SSH, Ansible playbooks, scripts, and Cloud-init attributes.

• CPE device and virtual network function management subnets.

In each data center, you must create at least one management subnet to assign IP addresses to CPE devices and virtual network functions (VNFs). You can also specify DNS servers and static routes for virtual network functions.

The figure below shows four logical groups of an organization's resources (Site 1, Site 2, Site 3, and Site 4) combined into two general groups (Domain 1 and Domain 2).

Data centers and domains