Abstract

Proposed herein is a framework to enable adaptive, compliance-aware secure service edge (SSE) secure gateway selection and autonomous tunnel rehoming for enterprise software-defined wide area network (SD-WAN) edges in both steady-state and disaster conditions. The proposed framework uniquely combines no-mutation controller-side shadow probing, hard policy-equivalence gating, and transactional canary/staged rollout with deterministic rollback before production cutover. The result is safer failovers and better application performance while preserving compliance boundaries and reducing outage blast radius.

Creative Commons License

Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 License.

Share

COinS