MetricSplit › SD-WAN monitoring

SD-WAN monitoring: how full each circuit really runs

An SD-WAN steers traffic across several circuits, so a site can look fine overall while one circuit is full and the other is nearly idle. MetricSplit monitors each SD-WAN circuit on its own, per direction, from the flow data your SD-WAN already exports, and tells you whether to rebalance, restrict, right-size or upgrade it.

What SD-WAN monitoring needs to show

• Each circuit, not just the site. Two circuits of the same speed can run at very different levels. MetricSplit shows both, and which one sets the site's state.
• Each direction. Download and upload are judged separately, so you know which way the bottleneck runs.
• The busiest business-hours moments. The 95th percentile of 5-minute readings in the site's own business hours over 7 days, so an average can't hide the busy afternoon.
• What would happen if one circuit failed. For every site with two circuits, MetricSplit checks whether the remaining circuit could carry the whole site: resilient, tight, or it would lose service.
• What the traffic is. Business, neutral (updates, backups, sign-in) or non-business, by application, from the application IDs in the flow data.

Cisco Catalyst SD-WAN

Supported today. One cflowd policy in SD-WAN Manager sends IPFIX from every router to MetricSplit. The step-by-step guide marks every step as tested or not tested by us.

Other SD-WAN and firewall vendors that export NetFlow v9 or IPFIX are being rolled out; see the setup guides and ask us about what you run.

From utilization to a decision

A utilization graph shows that a circuit was busy. MetricSplit checks the cheapest fix first: move traffic onto the other circuit at the same site if it has room, limit non-business applications if that frees enough, and recommend an upgrade only when neither can bring the circuit under 85%. Each decision comes with its evidence, and with the cost once you've entered your circuit prices.