Architecting Resilient Network Operations: A Comprehensive Framework for Large-Scale Enterprise SD-WAN and Zero Trust Implementation
DOI:
https://doi.org/10.22399/ijcesen.3960Keywords:
SD-WAN implementation, zero trust architecture, network segmentation, hybrid cloud connectivity, enterprise routing protocolsAbstract
I developed and implemented a revolutionary framework that transforms traditional enterprise network operations through my strategic integration of software-defined wide area networking and zero trust security principles. My architectural blueprint uniquely combines Cisco Viptela SD-WAN and ACI fabric technologies with my proprietary zero trust routing methodology to achieve unprecedented automation and security across extensive multi-site deployments. I engineered a novel multi-protocol optimization system that harmonizes BGP, EIGRP, and OSPF routing mechanisms, delivering superior resilience and sub-second failover capabilities in hybrid network environments. My zero trust routing enforcement provides advanced segmentation for SCADA traffic isolation while implementing my policy-based prioritization system for critical infrastructure control packets. Through my comprehensive framework, I addressed complex cloud-edge integration challenges and optimized ISP peering management across major cloud providers. My implementation demonstrates quantifiable improvements including 0.7-second average failover times, $4.2M in annual operational savings, and 100% security compliance across large-scale enterprise deployments, establishing a new standard for modernized network infrastructure.
References
[1] Rubén E. Mora-Huiracocha, et al., "Implementation of a SD-WAN for the Interconnection of Two Software Defined Data Centers," 2019 IEEE Colombian Conference on Communications and Computing (COLCOM), August 22, 2019, https://ieeexplore.ieee.org/document/8809153/references#references
[2] Ranganai Chaparadza, et al., "Standardization of Resilience & Survivability, and Autonomic Fault-Management in Evolving and Future Networks," 2013 9th International Conference on the Design of Reliable Communication Networks (DRCN), June 13, 2013. https://ieeexplore.ieee.org/document/6529879
[3] NIST Special Publication 800-61 Rev. 2, "Computer Security Incident Handling Guide," August 2012. https://csrc.nist.gov/publications/detail/sp/800-61/rev-2/final
[4] Cisco Systems, "2024 Global Networking Trends Report," February 2024. https://www.cisco.com/c/en/us/solutions/enterprise-networks/networking-report.html
[5] Kamal Shahid, et al., "Optimizing Network Performance: A Comparative Analysis of EIGRP, OSPF, and BGP in IPv6-Based Load-Sharing and Link-Failover Systems," Future Internet, Volume 16, Issue 9, Date Published: September 20, 2024. https://www.mdpi.com/1999-5903/16/9/339
[6] C. G. Dumitrache, et al., "Comparative Study of RIP, OSPF and EIGRP Protocols Using Cisco Packet Tracer," 2017 5th International Symposium on Electrical and Electronics Engineering (ISEEE), Date Added to IEEE Xplore: December 11, 2017. https://ieeexplore.ieee.org/document/8170694
[7] Gregory M. Coates, et al., "A Trust System Architecture for SCADA Network Security," IEEE Transactions on Power Delivery, Volume 25, Issue 1, December 8, 2009. https://ieeexplore.ieee.org/document/5350402
[8] Moussa Ouedraogo, et al., "Towards a Risk-Based Assessment of QoS Degradation for Critical Infrastructure," 2013 International Conference on Availability, Reliability and Security (ARES), November 7, 2013. https://ieeexplore.ieee.org/document/6657287
[9] NIST Special Publication 800-82 Rev. 2, "Guide to Industrial Control Systems (ICS) Security," May 2015. https://csrc.nist.gov/publications/detail/sp/800-82/rev-2/final
[10] Flexera, "2024 State of the Cloud Report," March 2024. https://info.flexera.com/CM-REPORT-State-of-the-Cloud
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2025 International Journal of Computational and Experimental Science and Engineering

This work is licensed under a Creative Commons Attribution 4.0 International License.