Juniper Networks acquires Boston-area AI SD-WAN startup 128 Technology for $450M

Today Juniper Networks announced it was acquiring smart wide area networking startup 128 Technology for $450 million.

This marks the second AI-fueled networking company Juniper has acquired in the last year and a half after purchasing Mist Systems in March 2019 for $405 million. With 128 Technology, the company gets more AI SD-WAN technology. SD-WAN is short for software-defined wide area networks, which means networks that cover a wide geographical area such as satellite offices, rather than a network in a defined space.

Today, instead of having simply software-defined networking, the newer systems use artificial intelligence to help automate session and policy details as needed, rather than dealing with static policies, which might not fit every situation perfectly.

Writing in a company blog post announcing the deal, executive vice president and chief product officer Manoj Leelanivas sees 128 Technology adding great flexibility to the portfolio as it tries to transition from legacy networking approaches to modern ones driven by AI, especially in conjunction with the Mist purchase.

“Combining 128 Technology’s groundbreaking software with Juniper SD-WAN, WAN Assurance and Marvis Virtual Network Assistant (driven by Mist AI) gives customers the clearest and quickest path to full AI-driven WAN operations — from initial configuration to ongoing AIOps, including customizable service levels (down to the individual user), simple policy enforcement, proactive anomaly detection, fault isolation with recommended corrective actions, self-driving network operations and AI-driven support,” Leelanivas wrote in the blog post.

128 Technologies was founded in 2014 and raised over $97 million, according to Crunchbase data. Its most recent round was a $30 million Series D investment in September 2019 led by G20 Ventures and The Perkins Fund.

In addition to the $450 million, Juniper has asked 128 Technology to issue retention stock bonuses to encourage the startup’s employees to stay on during the transition to the new owners. Juniper has promised to honor this stock under the terms of the deal. The deal is expected to close in Juniper’s fiscal fourth quarter subject to normal regulatory review.


By Ron Miller

Arrcus snags $30M Series B as it tries to disrupt networking biz

Arrcus has a bold notion to try and take on the biggest names in networking by building a better networking management system. Today it was rewarded with a $30 million Series B investment led by Lightspeed Venture Partners.

Existing investors General Catalyst and Clear Ventures also participated. The company previously raised a seed and Series A totaling $19 million, bringing the total raised to date to $49 million, according to numbers provided by the company.

Founder and CEO Devesh Garg says the company wanted to create a product that would transform the networking industry, which has traditionally been controlled by a few companies. “The idea basically is to give you the best-in-class [networking] software with the most flexible consumption model at the lowest overall total cost of ownership. So you really as an end customer have the choice to choose best-in-class solutions,” Garg told TechCrunch.

This involves building a networking operating system called ArcOS to run the networking environment. For now, that means working with manufacturers of white box solutions and offering some combination of hardware and software, depending on what the customer requires. Garg says that players at the top of the market like Cisco, Arista and Juniper tend to keep their technical specifications to themselves, making it impossible to integrate ArcOS with those companies at this time, but he sees room for a company like Arrcus.

“Fundamentally, this is a very large marketplace that’s controlled by two or three incumbents, And when you have lack of competition you get all of the traditional bad behavior that comes along with that including muted innovation, rigidity in terms of the solutions that are provided, and these legacy procurement models, where there’s not much flexibility with artificially high pricing,” he explained.

The company hopes to fundamentally change the current system with its solutions, taking advantage of unbranded hardware which offers a similar experience, but can run the Arrcus software. “Think of them as white box manufacturers of switches and routers. Oftentimes, they come from Taiwan, where they’re unbranded, but it’s effectively the same components that are used in the same systems that are used by the [incumbents],” he said.

The approach seems to be working as the company has grown to 50 employees since it launched in 2016. Garg says that expects to double that number in the next 6-9 months with the new funding. Currently the company has double-digit paying customers and over 20 in various stages of proofs of concepts, he said.


By Ron Miller

AWS Transit Gateways help customers understand their entire network

Tonight at AWS re:Invent, the company announced a new tool called AWS Transit Gateway designed to help build a network topology inside of AWS that lets you share resources across accounts and bring together on premises and cloud resources in a single network topology.

Amazon already has a popular product called Amazon Virtual Private Cloud (VPC), which helps customers build private instances of their applications. The Transit Gateway is designed to help build connections between VPCs, which up until now has been tricky to do.

As Peter DeSantis, VP of global infrastructure and customer support at AWS speaking at an event Monday night at AWS Re:Invent explained, AWS Transit Gateway gives you a single set of controls that lets you connect to a centrally managed gateway to grow your network easily and quickly.

Diagram: AWS

DeSantis said that this tool also gives you the ability to traverse your AWS and on-premises networks. “A gateway is another way that we’re innovating to enable customers to have secure, easy-to-manage networking across both on premise and their AWS cloud environment,” he explained.

AWS Transit Gateway lets you build connections across a network wherever the resources live in a standard kind of network topology. “Today we are giving you the ability to use the new AWS Transit Gateway to build a hub-and-spoke network topology. You can connect your existing VPCs, data centers, remote offices, and remote gateways to a managed Transit Gateway, with full control over network routing and security, even if your VPCs, Active Directories, shared services, and other resources span multiple AWS accounts,” Amazon’s Jeff Barr wrote in a blog post announcing to the new feature.

For much of its existence, AWS was about getting you to the cloud and managing your cloud resources. This makes sense for a pure cloud company like AWS, but customers tend to have complex configurations with some infrastructure and software still living on premises and some in the cloud. This could help bridge the two worlds.


By Ron Miller

AWS Global Accelerators helps customers manage traffic across zones

Many AWS customers have to run in multiple zones for many reasons including performance requirements, regulatory issues or fail-over management. Whatever the reason, AWS announced a new tool tonight called Global Accelerators designed to help customers route traffic more easily across multiple regions.

Peter DeSantis, VP of global infrastructure and customer support at AWS speaking at an event Monday night at AWS Re:Invent explained that much of AWS customer traffic already flows over their massive network, and customers are using AWS Direct Connect to help applications get consistent performance and low network variability as customers move between AWS regions. He said what has been missing is a way to use the AWS global network to optimize their applications.

“Tonight I’m excited to announce AWS Global Accelerator. AWS Global Accelerator makes it easy for you to improve the performance and availability of your applications by taking advantage of the AWS global network,” he told the AWS re:Invent audience.

Graphic: AWS

“Your customer traffic is routed from your end users to the closest AWS edge location and from there traverses congestion-free redundant, highly available AWS global network. In addition to improving performance AWS Global Accelerator has built-in fault isolation, which instantly reacts to changes in the network health or your applications configuration,” DeSantis explained.

In fact, network administrators can route traffic based on defined policies such as health or geographic requirements and the traffic will move to the designated zone automatically based on those policies.

AWS plans to charge customers based on the number of accelerators they create. “An accelerator is the resource you create to direct traffic to optimal endpoints over the AWS global network. Customers will typically set up one accelerator for each application, but more complex applications may require more than one accelerator,” AWS’s Shaun Ray wrote in a blog post announcing the new feature.

AWS Global Accelerator is available today in several regions in the US, Europe and Asia.


By Ron Miller

Google Cloud expands its networking feature with Cloud NAT

It’s a busy week for news from Google Cloud, which is hosting its Next event in London. Today, the company used the event to launch a number of new networking features. The marquee launch today is Cloud NAT, a new service that makes it easier for developers to build cloud-based services that don’t have public IP addresses and can only be accessed from applications within a company’s virtual private cloud.

As Google notes, building this kind of setup was already possible, but it wasn’t easy. Obviously, this is a pretty common use case, though, so with Cloud NAT, Google now offers a fully managed service that handles all the network address translation (hence the NAT) and provides access to these private instances behind the Cloud NAT gateway.

Cloud NAT supports Google Compute Engine virtual machines as well as Google Kubernetes Engine containers, and offers both a manual mode where developers can specify their IPs and an automatic mode where IPs are automatically allocated.

Also new in today’s release is Firewall Rules Logging, which is now in beta. Using this feature, admins can audit, verify and analyze the effects of their firewall rules. That means when there are repeated connection attempts that the firewall blocked, you can now analyze those and see whether somebody was up to no good or whether somebody misconfigured the firewall. Because the data is only delayed by about five seconds, the service provides near real-time access to this data — and you can obviously tie this in with other services like Stackdriver Logging, Cloud Pub/Sub and BigQuery to create alerts and further analyze the data.

Also new today is managed TLS certificated for HTTPS load balancers. The idea here is to take the hassle out of managing TLS certificates (the kind of certificates that ensure that your user’s browser creates a secure connection to your app) when there is a load balancer in play. This feature, too, is now in beta.


By Frederic Lardinois

Microsoft launches new wide-area networking options for Azure

Microsoft is launching a few new networking features today that will make it easier for businesses to use the company’s Azure cloud to securely connect their own offices and infrastructure using Azure and its global network.

The first of these is the Azure Virtual WAN service, which allows businesses to connect their various branches to and through Azure. This basically works like an airline hub and spoke model, where Azure becomes the central hub through which all data between branches flows. The advantage of this, Microsoft argues, is that it allows admins to manage their wide-area networks from a central dashboard and, of course, that it makes it easy to bind additional Azure services and appliances to the network. And with that, users also get access to all of the security services that Azure has to offer.

One new security service that Microsoft is launching today is the Azure Firewall, a new cloud-native security service that is meant to protect a business’s virtual network resources.

In addition to these two new networking features, Microsoft also today announced that it is expanding to two new regions its Azure Data Box service, which is basically Microsoft’s version of the AWS Snowball appliances for moving data into the cloud by loading it onto a shippable appliance: Europe and the United Kingdom (and let’s not argue about the fact that the U.K. is still part of Europe). There is also now a “Data Box Disk” option for those who don’t need to move petabytes of data. Orders with up to five of those disks can hold up to 40 terabytes of data and are currently in preview.


By Frederic Lardinois

Cisco buys July Systems to bring digital experience to the real world

Customer experience management is about getting to know your customer’s preferences in an online context, but pulling that information into the real world often proves a major challenge for organizations. This results in a huge disconnect when a customer walks into a physical store. This morning, Cisco announced it has bought July Systems, a company that purports to solve that problem.

The companies did not share the acquisition price.

July Systems connects to a building’s WiFi system to understand the customer who just walked in the door, how many times they have shopped at this retailer, their loyalty point score and so forth. This gives the vendor the same kind of understanding about that customer offline as they are used to getting online.

It’s an interesting acquisition for Cisco, taking advantage of some of its strengths as a networking company, given the WiFi component, but also moving in the direction of providing more specific customer experience services.

“Enterprises have an opportunity to take advantage of their in-building Wi-Fi for a broad range of indoor location services. In addition to providing seamless connectivity, Wi-Fi can help enterprises glean deep visitor behavior insights, associate these learnings with their enterprise systems, and drive better customer and employee experiences,” Cisco’s Rob Salvagno wrote in a blog post announcing the acquisition.

As is often the case with these kinds of purchases, the two companies are not strangers. In fact, July Systems lists Cisco as a partner prominently on the company website (along with AWS). Customers include an interesting variety from Hilton Hotels to the New York Yankees baseball team.

Ray Wang, founder and principal analyst at Constellation Research says the acquisition is also about taking advantage of 5G. “July Systems gives Cisco the ability to expand its localization and customer experience management (CXM) capabilities pre-5g and post-5g. The WiFi analytics improve CXM, but more importantly Cisco also gains a robust developer community,” Wang told TechCrunch.

According to reports, the company had over $67 billion in cash as of February. That leaves plenty of money to make investments like this one and the company hasn’t been shy about using their cash horde to buy companies as they try to transform from a pure hardware company to one built on services

In fact, they have made 211 acquisitions over the years, according to data on Crunchbase. In recent years they have made some eye-popping ones like plucking AppDynamics for $3.7 billion just before it was going to IPO in 2017 or grabbing Jasper for $1.4 billion in 2016, but the company has also made a host of smaller ones like today’s announcement.

July Systems was founded back in 2001 and raised almost $60 million from a variety of investors including Sequoia Capital, Intel Capital, CRV and Motorola Solutions. Salvagno indicated the July Systems group will become incorporated into Cisco’s enterprise networking group. The deal is expected to be finalized in the first quarter of fiscal 2019.


By Ron Miller