SD-WAN Explained: What Is SD-WAN and How Does It Work?
Trusted Advisor for IT & Telecommunications Sourcing
SD-WAN: flexibility and efficiency for your company network
How software-defined networks are shaping the future of connectivity
In a networked business world with globally distributed locations, traditional WAN structures quickly reach their limits. SD-WAN offers the solution here: an intelligent, software-based network architecture that reduces costs, improves performance and simplifies management, ideal for companies with high demands on flexibility and security.
In a nutshell:
- Cost efficiency: Use of low-cost Internet connections with consistent performance.
- High reliability: Automatic rerouting of data traffic in the event of line problems.
- Optimized application performance: Intelligent routing ensures stable performance.
- Easy scalability: New locations can be integrated quickly.
- Central management: Transparent management and control of all connections.
The solution: SD-WAN bundles multiple lines into an intelligently steered network, reduces costs compared to traditional WAN models and can be managed centrally.
What this article covers: what SD-WAN is, why companies adopt it, how it works technically, how it compares to MPLS and which advantages it offers. The key question: is your corporate network already as flexible as your business requirements?
In a networked world, companies need to provide business-critical IT at multiple locations. Software-defined Wide Area Network, or SD-WAN for short, is an optimal solution for this. Flexibility and cost efficiency compared to conventional network infrastructure solutions make SD WAN attractive. How does it work and what advantages does it have over other network solutions?
1. SD-WAN explained
SD-WAN is an automated overlay technology that uses encrypted, application-specific dynamic tunnels to provide the best user and application experience with the network infrastructure over which it runs.
This technology enables companies to supplement or replace conventional WAN traffic services such as Multiprotocol Label Switching (MPLS, see MPLS vs. SD-WAN). It often uses lower-cost Internet access services to cost-effectively extend WAN connectivity with Quality of Service (QoS) to small sites. SD-WAN also allows organizations to decouple the user and application experience from the technology and provider of last mile network connectivity. This creates the impression of a unified network, regardless of the technologies used.
2. Why SD-WAN?
In the past, companies had to build their own private network or rely on traditional WAN services from providers. These solutions were not always flexible enough to adapt to changing requirements, such as the introduction of a hybrid cloud. These customer networks are more difficult to manage at scale and slower to deploy. Older solutions also offer less visibility and no customized application-level traffic handling.
But it’s not just the problems and shortcomings of traditional WAN models that have driven the adoption of SD-WAN. It is also the frustration with the procurement process in telecoms that has driven the adoption of SD-WAN. Customers want to separate the purchase of connectivity from the provision of networks. SD-WAN makes this possible by freeing them from the telco buying process and giving them more flexibility.
3. How does SD-WAN work?
Essentially, SD-WAN separates the control layer from the data layer. The SD-WAN controller, which houses the control plane, acts as the central brain of the solution. It provides the instructions and rules that edge devices need to forward packets effectively.
The controller also collects real-time feedback from the SD-WAN appliances about the traffic coming from the connected LANs and the performance of the connected lines. This allows the controller to direct traffic in real time to shape the applications to achieve better performance results. The data plane resides in the SD-WAN edge appliances located at each customer site. These appliances are connected to the customer’s LANs and network access lines. While the control plane is the brain, so to speak, the data plane executes the actions specified by the controller.
This architecture enables faster, more informed and more effective data transfer, resulting in a better and more consistent overall experience for the end user.
4. SD-WAN vs. MPLS
Although SD-WAN and MPLS are often seen as alternatives to each other, they are not mutually exclusive. There are some important differences between the two.
| Criterion | SD-WAN | MPLS |
|---|---|---|
| Architecture | Virtual, software-based overlay, independent of the transport medium | Pre-installed shared-services private network architecture from the carrier |
| Transport medium | Any IP access can be combined (internet, fibre, LTE/5G, even MPLS) | Dedicated carrier network, limited access technologies |
| Cost | Lower, thanks to low-cost internet connections | Higher, due to dedicated lines |
| Quality of Service | Application-aware routing, selects the best available connection | Guaranteed bandwidth and quality for defined traffic |
| Resilience | Automatic rerouting across multiple active lines | Depends on separately booked redundancy |
| Site connectivity | Mobile-only, pop-up or remote sites integrate easily | Tied to the availability of carrier infrastructure |
| Management | Central control and visibility through one portal | Control largely with the carrier |
MPLS WAN solutions from carriers are operated via a pre-installed shared services private network architecture. SD-WAN, on the other hand, is a virtual, software-based solution that is independent of the underlying transport architecture. For this reason, it is often associated with the Internet, the most favorable transmission medium. This is an important difference, because with a traditional MPLS WAN you are limited by the access technologies you can use. With SD-WAN, on the other hand, you can mix and match IP access solutions from different providers, including MPLS, with SD-WAN technology bringing them together into a manageable network.
For example, SD-WAN can enable a customized level of resilience and bandwidth, resulting in a tailored, cost-effective solution. This also means that SD-WAN can include sites with mobile broadband access only if required. For example, pop-up sites or remote sites without staff can also be included.
As mentioned above, SD-WAN enables multiple transport options, including MPLS. MPLS is considered the best transport network solution because it can guarantee bandwidth and quality for a given amount of traffic. SD-WAN, on the other hand, can shape the traffic and select the best performing connection to meet the quality of service parameters. However, it cannot make the Internet faster. This is where MPLS comes into play. A high-performance, high-speed MPLS connection to critical locations can ensure that traffic makes short, reliable hops from source to destination via a manageable number of peering points.
5. SD-WAN advantages
Now that you know how SD-WAN works and why you should use it, here are some other benefits of an SD-WAN solution:
- Cost-effective network: SD-WAN gives organizations the flexibility to use a variety of transport options for resiliency and scale bandwidth as needed based on location.
- Any location can be connected: Organizations can use any provider to cost-effectively connect any desired location to the network.
- Increased site uptime: If there is more than one access line at a site, SD-WAN automatically prioritizes and reroutes applications when network issues are detected.
- WAN optimization: Application-aware routing improves performance, and targeted forward error correction eliminates traditional packet loss degradation.
- Network security over the public Internet: Encrypted tunnels enable secure use of the low-cost public Internet transport.
- Short lead times for new sites: A pre-configured SD-WAN appliance can use any internet connection to bring a site online quickly.
- Increased Quality of Experience: Applications get their own performance requirements, and automated error correction and prioritization deliver optimal experience.
- Centralized control and visibility: The centralized control plane enables end-to-end performance management via a customer portal.
How SAVECALL supports your SD-WAN
SAVECALL advises vendor-neutral on the selection, design and procurement of your SD-WAN solution. Based on more than 80 carrier partnerships, we compare providers such as Cisco, Fortinet, Cato Networks or VMware, procure the right underlay and support the implementation end-to-end. This lets you decouple the purchase of connectivity from network provisioning and keep full flexibility.
Conclusion: SD-WAN as a flexible network foundation
SD-WAN separates network control from the line, making the corporate network flexible, resilient and centrally manageable. It does not necessarily replace MPLS but combines the strengths of both worlds into a tailored, cost-effective solution. Anyone with multiple sites and growing cloud usage gains noticeable speed and control with SD-WAN.

Written by
Frank Frommknecht
Key Account Consultant, SAVECALL
Has supported companies for over 20 years in selecting and optimizing their connectivity solutions. His focus: making complex telecommunications understandable from the customer’s perspective and finding the right solution strategically.
Why
Telecom & IT sourcing. Worldwide. Carrier-independent.
Selection & operation of worldwide connectivity & cloud infrastructure. Without vendor risk & unnecessary costs.
- 80+ carriers worldwide
- One point of contact
- One SLA
- One portal: mySAVECALL
- Min. 20% savings
25+
years of experience
40+
Employees
80+
Partner
1400+ Clients
Sources
- Gartner: Magic Quadrant and definitions for SD-WAN and SASE
- MEF Forum: standards and terminology for SD-WAN services (MEF 70)
- SAVECALL: SD-WAN solutions for companies
Frequently asked questions
SD-WAN stands for Software-Defined Wide Area Network. Instead of using expensive dedicated lines, SD-WAN bundles multiple cheaper internet connections such as fibre, DSL, LTE or 5G into an intelligent network. A central software decides in real time which line to use for which application: video conferencing gets the fastest line, email runs on the cheapest. Businesses gain more bandwidth at lower cost and can manage their network centrally from the cloud, without being tied to a single carrier.
At each business site, an SD-WAN appliance is installed that bundles all available internet connections. The appliance continuously measures latency, packet loss and bandwidth of all lines and automatically routes traffic accordingly. Microsoft Teams calls run over the lowest-latency connection, large file downloads over the broadband line, critical ERP data over the most reliable one. All appliances at all sites are configured and monitored centrally through a cloud console, without needing an on-site technician. If a line fails, SD-WAN switches to the next one within seconds automatically
A VPN (Virtual Private Network) encrypts traffic between two points over the public internet, but offers no intelligent line steering, no application-aware routing and no central management. SD-WAN includes VPN encryption as a component but goes far beyond it: it bundles multiple lines, measures line quality in real time, automatically prioritises applications and scales to hundreds of sites through a central console. VPN is a point-to-point security solution, SD-WAN is a complete WAN architecture for businesses with multiple sites.
SD-WAN is particularly suited to businesses with two or more sites using cloud applications such as Microsoft 365, SAP or Salesforce. Mid-sized companies with 5 to 500 sites benefit most, as SD-WAN enables central management without local IT resources. Companies wanting to move from expensive MPLS lines to cheaper internet connections, or those with international sites in countries with poor MPLS infrastructure such as China, are also typical SD-WAN customers. For single-site businesses without WAN requirements, SD-WAN is overdimensioned.
SD-WAN typically costs between 50 and 200 euros per site monthly for the software licence, plus underlay costs for the internet connections (100 to 600 euros depending on bandwidth and technology). A complete SD-WAN site with dual internet and managed service ranges from 250 to 600 euros monthly. That is 30 to 60 percent cheaper than comparable MPLS connections. Through the SAVECALL procurement pool, underlay and licence costs are further reduced by 15 to 35 percent. Concrete pricing for your specific setup in the initial conversation.
For SD-WAN, each site needs an SD-WAN appliance (hardware box or virtual instance), at least one internet connection (two from different carriers recommended for resilience) and an SD-WAN service contract with a provider such as Cisco, Fortinet, Cato Networks or VMware. The central management console runs in the cloud without dedicated servers. In the managed SD-WAN model, a managed service provider supplies the appliance, sets everything up and monitors operations 24/7. SAVECALL supports provider selection, underlay procurement across 80 carrier partners and implementation end-to-end.


