About this interactive
Routers have two planes. The data plane is the construction worker: it moves the data. The control plane is the foreman: it decides where the data should go.
In a traditional WAN, each router carries its own control plane, and each one is configured by hand: its routing protocol, its VPN tunnels to the other sites, its access lists. With many sites, that is a lot of work, and every change means visiting routers one by one.
SD-WAN is software-defined networking for the WAN. Software on each router extends the control plane to a central controller. You program what you want, where traffic should flow and what security to apply, and the controller works out the details: it builds the VPNs between sites and puts the ACLs in the right places. It is connection independent, so cable, fiber, cellular and different ISPs are managed as one network, and it can test the links, fail over and balance load. The result is scalable, flexible and easier to manage.
To sort a card, ask whether the work happens on each router or in one central place.
About TechKnowSurge
TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.
Explore free tools and programs →