Guides deploying and optimizing Data Redundancy Elimination across supported platforms, covering integration, profiles, hardware recommendations, and constraints. Details configuration by interface and command line, centralized policies for Secure Sockets Layer decryption and Transmission Control Protocol optimization, deployment on Cisco Unified Computing System E-Series and Cisco Catalyst 8000V, and monitoring.
Explains data redundancy elimination (DRE), a WAN compression technology that removes redundant information, uses a shared cache between peers, and replaces repeated data with short references to compress traffic over the overlay and reconstruct the original data at the destination.
Feature history for DRE-based traffic optimization
Provides a feature history for DRE-based traffic optimization and AppQoE capabilities, listing features, descriptions, and Cisco IOS XE Catalyst SD-WAN and vManage release references, including profiles, SSL proxy TLS 1.3 support, configuration groups, and Cisco Secure Routers support.
Data redundancy elimination
Explains data redundancy elimination (DRE), a WAN compression technology that removes redundant information, uses a shared cache between peers, and replaces repeated data with short references to compress traffic over the overlay and reconstruct the original data at the destination.
DRE profiles
Describes DRE profiles that allocate DRE service resources based on branch size and connection requirements, and identifies the supported profile sizes for capacity planning.
UCS E-Series server support for Cisco Catalyst 8000V
Explains support for configuring instances as external service nodes on UCS E-Series server modules in Cisco 4000 Series ISR and Cisco Catalyst 8000 Series Edge Platforms, enabling hybrid clusters and allowing AppQoE services requiring higher CPU to run on constrained routers.
SSL proxies
Describes the SSL proxy feature in AppQoE, which optimizes SSL traffic by decrypting, processing, and re-encrypting it, and outlines TLS protocol usage, default TLS 1.3 support, and fallback to TLS 1.2.
DRE optimization with configuration groups
Describes DRE optimization with configuration groups to improve network efficiency by optimizing traffic based on sites and applications, and notes minimum supported releases for the components.
Supported devices for DRE
Provides a list of devices and minimum Cisco IOS XE releases supported for DRE, grouped as integrated service nodes, service controllers, and external service nodes, with references to product data sheets and UCS E-Series support topics.
Disk recommendations for DRE
Outlines disk recommendations for DRE and AppQoE, including using SSDs, configuring Cisco IMC RAID and caching settings before hypervisor installation, and choosing Thick Provision Eager Zeroed for virtual machine instances, with references for ESXi and KVM deployments.
Supported DRE profiles
Lists the supported DRE profiles and device-specific defaults, supported UTD profiles, resource recommendations, maximum connections, and FanOut values.
Supported UCS E-Series server modules for Cisco Catalyst 8000V
Provides a table of UCS E-Series server modules and platform models that support Cisco Catalyst 8000V instances, including DRE profile options. It also notes release support for Cisco 4000 Series ISR and Cisco Catalyst 8300 Series Edge platforms.
Restrictions for DRE
Outlines key restrictions for deploying Data Redundancy Elimination (DRE), including dual-side and symmetry requirements, support dependencies, SSL optimization guidance, and constraints when installing the c8000v external service node on UCS E-Series servers.
Configure DRE
Configure app-heavy resource allocation on devices to enable DRE optimization using the vManage CLI Add-on feature template. Configure this prerequisite and reload the device so core allocation changes take effect.
DRE with configuration groups
Describes how to enable DRE optimization in configuration groups by configuring AppQoE under Service Profile, and how to optimize encrypted traffic with TLS/SSL Decryption from policy groups, with device platform support considerations.
Configure DRE with the CLI
Configure DRE with the CLI to install the container package, configure a virtual port group, map and start the service, assign a profile when supported, activate the application, and uninstall the service if required.
Create a security policy for SSL decryption with policy groups
Configure SSL decryption in a policy group by selecting NGFW, enabling Additional Settings, and choosing a TLS/SSL decryption profile. This task maps the decryption policy to target devices and saves the configuration.
Create a centralized policy for TCP and DRE optimization using policy groups
Configure a centralized policy in a policy group to enable TCP optimization and Data Redundancy Elimination (DRE) for application traffic. Configure traffic rules, priorities, match conditions, and AppQoE optimization, associate devices, and deploy the policy group to apply changes across selected sites.
Configure Cisco Catalyst 8000V on UCS-E Series server modules for DRE optimization
Configure Cisco Catalyst 8000V instances on UCS E-Series server modules to enable DRE optimization as external service nodes. This task guides setup, deployment, and AppQoE configuration in Cisco SD-WAN Manager.
Monitor AppQoE DRE data in Cisco SD-WAN Manager
Verify AppQoE DRE optimization metrics and traffic or application monitoring in Cisco SD-WAN Manager by accessing device views and On-Demand Troubleshooting, enabling dashboards, and selecting roles, chart modes, and time ranges to analyze controller or service node performance.
DRE verification, monitoring, and troubleshooting using the CLI
Provides CLI commands and sample output for checking DRE optimization status, auto-bypass, statistics, decryption, peer synchronization, and cache operations.
Reuse a DRE SSD after router chassis replacement
Provides the wrapper topic for reusing a Data Redundancy Elimination solid-state drive after router chassis replacement.
Monitor SSL proxy traffic
Verify SSL Proxy traffic monitoring using On-Demand Troubleshooting. Configure time synchronization and enable SSL Proxy visibility to access device dashboards, apply filters, and view charts or tables for analysis.
Verify SSL proxy support for TLS 1.3 with CLI
Provides sample output and verification details for SSL proxy support for TLS 1.3 using the show SSL proxy statistics command, highlighting TLS flow counters and indicating a count of 8 for TLS 1.3 flows.