Routing
SD-WAN per-Policy Steering
Steer traffic per application, category, user, or geography — with service-level-aware failover between WAN endpoints.
Testmulti-WAN
HOW IT WORKS
Walk through a single flow
- 1Policies can carry an egress directive that selects a specific WAN endpoint or leaves the choice to the auto-selector.
- 2A strategy-pattern transmit layer resolves the physical egress — direct interface, kernel routing table, or translated.
- 3An agent probes each candidate endpoint on a sub-second cadence for latency, loss, and jitter.
- 4Failover is atomic and hysteresis-aware, so borderline endpoints do not cause flap.
UNDER THE HOOD
Technical notes
Structured health surface
Health data is exposed in a machine-readable format for dashboards and third-party observability systems. Nothing is hidden; everything is inspectable.
RELATED
Other capabilities that plug in here
Routing
Sub-10s SASE Failover
ICMP / HTTP / DNS probes, composite health score, atomic peer swap. Hysteresis-aware.
Routing
Encrypted Overlay on the Fast Path
Kernel driver patched so encrypted overlay peers can join the same fast path. Opt-in on bare-metal deployments; standard SASE still defaults to the kernel socket path.