Nuage Networks VNS is an SD-WAN overlay that provides policy-based networking between branch CPEs (NSGs) and data-center gateways.

Key functions advertised for VNS are (1) a fully-centralized control plane (VSD/VSC), (2) secure data-plane overlays that use per-branch or full-mesh IPsec tunnels, and (3) the ability to ride transparently over any IP underlay, including Internet, LTE, or existing MPLS VPN circuits.

Layer-4/Layer-7 service-chaining (ordered steering of flows through multiple virtual network-functions) is explicitly limited to the Nuage VSP data-center product and is not implemented in VNS. Hence, “Service chaining” is the only option that is not supported by VNS.

B. Centralized control plane – VNS always uses VSD (policy/database) and VSC (SDN controller) for centralized management and route programming.

C. MPLS VPN – VNS CPEs can attach to provider MPLS VPN underlays; BGP integration is documented.

D. IPsec encryption – All VNS site-to-site and hub-and-spoke tunnels are IPsec-encrypted by default to secure the overlay.

1. Nokia, “Nuage Networks VNS R6.0 Product Guide,” Section 3.4 “Key Capabilities,” p. 17–18 – lists centralized control plane and IPsec, omits service chaining.

2. Nokia, “Nuage Networks VSP R6.0 Feature Overview,” §2.3 “Service Chaining,” p. 41 – states service chaining is a VSP feature, not available in VNS.

3. Nokia Solution Brief, “Nuage Networks SD-WAN (VNS),” Doc-ID SB-2019-06, p. 3 – describes IPsec overlay and MPLS/Internet underlay support.

4. IEEE Communications Magazine, vol. 56 no. 7, 2018, “Nuage Networks SD-WAN Architecture,” pp. 125-131, doi:10.1109/MCOM.2018.1701042 – details centralized VSD/VSC and IPsec tunnels, with no mention of service chaining.