The architecture of Barracuda SecureEdge follows a classic hub-and-spoke topology. The hub is referenced as an Edge Service in SecureEdge, and the spokes are referenced either as Site, IoT, or Connector. Barracuda SecureEdge currently allows you to create either an Edge Service that is managed by Barracuda Networks, an Edge Service connected to a virtual WAN hub, or an on-prem Edge Service known as Private Edge that is hosted in the customer's own data center.
You can deploy multiple virtual WANs (e.g., production and testing) with multiple Edge Services and multiple sites connected to each service. You can also integrate the Barracuda CloudGen Firewall with Barracuda SecureEdge. Each site is connected to Barracuda SecureEdge using TINA, the Barracuda VPN protocol. TINA is a proprietary extension of the IPsec protocol developed to improve VPN connectivity and availability over the standard IPsec protocol, and uses AES256 cipher for the VPN encryption. Barracuda SecureEdge uses BGP for routing. On the SecureEdge Manager, you can easily switch between the virtual WANs and display associated Edge Services and connected sites by clicking on the name assigned to the virtual WAN during deployment.
On the SecureEdge Manager, the Infrastructure > Edge Services tab provides an aggregated overview of all deployed and connected Edge Services, and displays information related to each connected Edge Service, such as name, type, upstream, location, size, and status. In addition, you can also see the number of sites your Edge Service is connected to. To access more information, click on the arrow icon next to the selected Edge Service you are interested in.
The following types of Edge Services are available:
- Edge Service (hosted) – For more information, see Barracuda Edge Service.
- Private Edge Service – For more information, see Private Edge Service.
- Edge Service for Virtual WAN – For more information, see Edge Service for Virtual WAN.