top of page

Bumblebee Global Private Link

Updated: 6 days ago

Bumblebee Global Private Link connects applications securely, privately and with cloud scale no matter where they are. Internet connectivity is all you need. It's easy, fast and secure. No network routing involved.



Bumblebee Global Private Link
Bumblebee Global Private Link


1. How does Global Private Link compare to AWS PrivateLink?


Private link, first developed by AWS by the name of AWS PrivateLink, is a new type of connectivity model designed to connecting private applications. It is easy to use because it does connectivity without using routing and VPN gateways. Private link service is in sync with the zero-trust model movement as it is by design a zero-trust solution: application consumers can only reach the designated application and nothing else, no possibility of lateral movement. Private Link Service gained fast adoptions and since then Azure, Google and other cloud providers all have all released their version of private link service.


Bumblebee Global Private Link takes the private link service concept to the next level. It expands the private link functionalities and user experience to cross regions, multi-cloud, on-prem and individual users. It provides packet encryption and cloud scale high performance, unlike the VPN gateway of 2Gbps throughput. In addition, it supports regional failover and bring your own PKI enterprise capabilities.


Below is a table of comparisons to other cloud provider's private link services.


 

Functions

AWS Private Link

Azure  Private Link

Global Private Link

Ease of use 

yes

yes

yes

Request & approval workflow

yes

yes

yes

Same cloud region

yes

yes

yes

Performance

Cloud scale

Cloud scale

Cloud scale

Tenancy

multi-tenants

multi-tenants

multi-tenants

Visibility & troubleshooting

no

no

yes

Cross regions

no

no (not cross tenants)

yes

Multi cloud

no

no

yes

Encryption

no

no

yes

On-prem support

no

no

yes

Region failover

no

no

yes

End user agent

no

no

yes

Protocol

TCP

TCP & UDP

All IP


2. How does Global Private Link compare to cloud gateway based networking?



Dimensions

Key Points

Cloud gateway based solution

Global Private Link

Operations

Managing gateways

yes

no


Additional infra

controller instance

SaaS


Redundancy

active/standby

active/active


Performance

1.5Gbps

Unlimited


Overlapping network address

configure SNAT/DNAT

built-in support

Security

Provider control

no

yes


Tunneling protocol

IPSec

TLS1.3


Public IPs

yes

no


Network segmentation

additional policy

built-in support



3. How does Global Private Link compare to on-prem Site-to-site VPN?


The key difference is ease of use and performance. Standard software based IPSec VPN has a limited throughput of 1.5Gbps. This is because IPSec is a tunneling protocol and as such at the receiving end only one CPU core can be leveraged to process the IPSec tunnel no matter how many cores the CPU has.



Dimensions

Key points

IPSec solution

Global Private Link

Operations

Managing connections

At CLI configuration level, difficult to delete

At partner level, easy to add or delete


Configuration change on one end

Lead to change on the other end

No change on the other end


Vulnerability patching & upgrade

Restart the device

Automatic and hitless


Skills to operate & troubleshoot

Network experts (IPSec, NAT & routing)

Sys Admin level (IP & DNS)


Performance

1.5Gbps

scale to many Gbps


Redundancy

active/standby

active/active


Scalability

single device

cluster of VMs or devices


Automation

difficult

python SDK

Deployment

Co-exists with existing solution

N/A

yes


Potential disruption to networks

Yes (routing effects)

No (not a router)


Onboarding agility

Multi meetings and negotiations

self-service


Overlapping network addresses

configure SNAT and DNAT

built-in support


Form factor

VMs and hardware devices

VMs and hardware devices


Connectivity type

network to network

network to apps


Additional infra

controller or orchestrator

SaaS

Security

Provider control

No

Approval, suspend & resume


Network segmentation

Additional policy configurations

Built-in zero trust policy


Tunneling protocol

IPSec

TLS1.3


Encryption

it depends

AES-256-GCM


Firewall rules

Requires inbound & outbound ports open

Requires outbound ports open


Public IPs

may need public IP

no public IP


 

 


110 views0 comments

Comentários


bottom of page