Introduces service insertion capabilities for steering network traffic through service chains and provides configuration guidance for implementing traffic policies and service chaining across network infrastructures.
Service insertion enables network administrators to intercept and redirect traffic flows through intermediate service functions such as firewalls, load balancers, intrusion detection systems, or other network appliances without requiring changes to the underlying network topology.
Feature history for service insertion
Lists the features and their release information for service insertion functionality.
Service insertion
Describes placing network or security services into the path of specific data traffic within the Cisco Catalyst SD-WAN overlay fabric.
Restrictions for service insertion
Outlines the configuration limitations and constraints that apply to service insertion implementation.
Use cases for service insertion
Lists common scenarios where service chaining provides network security and compliance benefits.
Service insertion configuration methods
Lists the available methods for configuring service insertion.
Configure service chain actions in a data policy
Configure service chain actions in a data policy to route traffic through a service chain.
Traffic steering to a service chain
Describes how to direct network traffic to a service chain using three methods: control policy, data policy, or interface access control list for traffic steering implementation.
Configure path preference
Configure TLOC preference or affinity preference to choose the preferred path for traffic to a service chain.
How service chains share across user VPNs
Describes how service chain VPNs can be shared across multiple user VPNs and how traffic between different VPNs can be service chained.
How separate interfaces for transmitted and received traffic work
Describes how separate interfaces can be configured for transmitted and received traffic through a service chain, where traffic flows are tracked independently.
Service chaining trusted and untrusted traffic
Describes how the system routes trusted and untrusted traffic through different high availability pairs in service chaining configurations.
How service chains work between two routers
Describes how service chains operate when the transmitting router differs from the receiving router, requiring identical configuration on each device for intra-VPN traffic processing.
Fall back and restrict behavior configuration for service chain traffic
Provides configuration options for fall back or restrict behavior when traffic travels through a service chain.
How service chain interfaces work
Describes the interfaces used for attaching services in a service chain to a router and the attachment methods available.
Service chaining with software defined cloud interconnect bring your own service
Explains how BYOS functionality enables centralized service inspection by connecting service chains to SDCI gateways deployed in the middle mile network.