BUSINESS CHALLENGE: Design and create Software Defined WAN internet gateway that can utilize several WAN links simultaneously. It should be controlled via the cloud dashboard.

SOLUTION MVP was made on top of an Embedded Linux system with wi-fi support. System uses MPTCP protocol to provide simultaneous access via several WAN links. To avoid using poor connection implemented link status monitor which takes care about active connections. The second endpoint for MPTCP connection is a cloud server which is relatively stable because it is located in the data center.

Key features:

• Stable and redundant internet connection. You’ll have internet access until at least one ISP is alive;

• Squeezes maximum bandwidth of your connections. Resulting bandwidth is the almost direct sum of all connections’ bandwidth;

• Manual and automatic traffic prioritization: you can specify priority by traffic type (web, VoIP, p2p) and by specific service (Skype, Salesforce, Gmail or whatever is important in your business);

• Detailed live reports of traffic usage in web dashboard and mobile application;

• Group your gateways in different offices in a cluster and manage them in a batch;

• Initialize point to point encrypted tunnels between gateways in your cluster to organize inter-office VPN.

Technologies used: Linux as a system kernel; Buildroot as a build system; MPTCP for traffic aggregation and balancing over connections; Shadowsocks as gateway-side MPTCP endpoint and proxy, encryption of TCP traffic; OpenVPN as non-TCP traffic carrier and for point to point VPN; DPI for traffic analysis.