Digital Transformation with SaaS/Cloud


Traditionally most business applications were running on private servers in a company's Head Quarters, and MPLS that routes all traffic to the center site made this model quite efficient.

However, with adopting more and more SaaS and private/public cloud applications, we need new technologies that can efficiently and dynamically route different types of traffic, either to the center site, or to the cloud directly.

SD-WAN is the solution to make the complex routing schemes simple and intuitive.

Based on traditional load balancing and failover functions, SD-WAN further improves user experience by focusing on interface and application quality.

Interface Quality At a Glance

Interface MOS

Wired WAN, Wireless WAN (including wireless 2.4G/5G WAN, LTE WAN, and USB WAN), and VPN quality are monitored 24/7.

With “Average” MOS, Network Admin will be able to understand the stability of quality over past period.

“Active” Interface Quality, on the other hand, shows the interface quality right at the moment.

MOS Compliance

This percentage number shows the reliability of the connections. Ideally the connections should always be higher than the target MOS threshold.

Interface Quality - From Macro to Micro

For every Interface on every CPE

From the Dashboard, any suspicious Interface quality results can be easily spotted, Network Administrators can easily dive into the details.

For each Interface on each CPE; Data usage, latency, Jitter, and Packet Loss are recorded.

Auto VPN

DrayTek's SD-WAN solution provides the easiest way to setup VPN tunnels from scratch.


1. Select the Hub device

2. Done! VigorACS will automatically create one IPSec tunnel from each Spoke to the Hub.

Full Mesh

1. Done! VigorACS will automatically design and create one IPSec tunnel between each router.

Intelligent VoIP Optimisation

From the start of each VoIP call to the end, SD-WAN provides intelligent VoIP optimisation.


Based on the Interface quality, SD-WAN intelligently assigns the best-quality WAN for VoIP calls. So whenever making a new call, SD-WAN makes sure you are calling via the best WAN.

VoIP Live Failover

Although already sending via best-quality WAN, SD-WAN will continue to monitor the quality of each live call, and can failover to a secondary VoIP WAN if call quality is poor.

Every call is logged with MOS score and sent Interface for Network Admin’s reference.

SD-WAN - Voice over IP Quality Monitoring

Application Visibility

Gain insights into the data usage across the entire network.

Usage Ranking

In-depth application insights with ranking by application and user ranking.

Full Traffic Control with SD-WAN Route Policy

Application/Domain Route Policy

SD-WAN provides complete routing control by allowing Network Administrators to specify the preferred route for selected applications/domains, to ensure their specific routing scenarios can be achieved.


Failover to another interface when original interface offline, and failback when possible.

Application Route Policy

Full Control of NAT and Routing

Sessions matching the criteria can be NATed or Routed, all under your control. It's especially useful if you have a mix of private/MPLS WAN (requires routing) and direct Internet access (required NATting) at the same time.

In the following scenario, by creating 2 policies to different destinations, VoIP (SIP/RTP) from the same IP phone in a branch office can be routed via MPLS WAN when calling an IP phone in the company HQ, and NATed via 2nd WAN to the Internet directly for all other calls.

Components and Topology

Edge Routers Providing Edge Computing

  • Edge routers are physical routers installed in HQ and Branches.
  • There are a range of DrayTek Vigor Router models to suit different WAN types, including DSL and LTE.
  • Establishing VPN tunnels (IPSec by default) from branches to HQ to form Hub-n-Spoke or Mesh topology.
  • Receiving SD-WAN configurations from VigorACS 3, performing edge computing according to SD-WAN policies, and uploading data to VigorACS3 for monitoring.

VigorACS 3 Server as Orchestrator

  • VigorACS 3 is the central software where network administrators perform configurations, provisioning, and monitoring activity.
  • Multitenant capability makes xSP services easy.

Edge Router Models

For VDSL, ADSL, Cable, LTE and Fibre For G.fast, VDSL, ADSL, LTE and Fibre For Cable, LTE and Fibre

Vigor 2865 series

An ADSL/VDSL router with integrated DSL modem, Gigabit performance and up to 32 VPN tunnels with secondary Ethernet WAN. Flexible connectivity for use in any environment.

The Vigor 2865Lac adds an LTE modem with Dual-SIM for a third WAN interface.

Vigor 2866 series

An G.fast/ADSL/VDSL router with integrated G.fast / DSL modem, Gigabit performance and up to 32 VPN tunnels with secondary Ethernet WAN. Flexible connectivity for use in any environment.

The Vigor 2866Lac adds an LTE modem with Dual-SIM for a third WAN interface.

Vigor 2927 series

A Dual-Ethernet WAN router with Gigabit performance and up to 50 VPN tunnels.

The Vigor 2927Lac adds an LTE modem with Dual-SIM for a third WAN interface.

Vigor 2865 series, 2866ac model is shown here Vigor 2866 series, 2866Lac model is shown here Vigor 2927 series, 2927ac model is shown here

Firmware for SD-WAN: DrayOS 4.2.0 or later - available now.