Branch Offices in Hybrid and Online Environments

In my previous two posts, I’ve covered branch office solutions including the SBA and the alternatives. No discussion on branch offices could be called complete without including hybrid environments.

The hybrid conversation is the same as on-prem when your user is homed on-prem and not online. As soon as your user is homed online, you have two seperate considerations

  1. User connectivity to the Cloud for all functions but PSTN
  2. Cloud connectivity to Cloud Connector Edition (CCE), Direct Routing (DR), or On-Premises Call Handling (OPCH)

For the first point, local Internet is what Microsoft recommends. Recall from earlier posts that you can use your router/firewall to direct O365 traffic out locally, and send all other traffic across a WAN, if that’s what your organization requires. If this Internet connection fails, your options are to route across the WAN, a 2nd Internet connection, mobile clients with LTE, or head elsewhere to work.

For the second point, things can get a bit more complex. The routing and high-availability of CCE, OPCH, and DR varies. Other factors will be centralized PSTN breakout vs a more localized approach – you’re more likely to have a business class or redundant connection for a centralized service than if you have distributed services.

Cloud Branches

One common solution that I see a lot of, is a hybrid scenario with branch office users hosted online, and main office users hosted in the on-prem pools. This eliminates the cost and administrative overhead of running branch office solutions, while keeping some infrastructure around for financial, compliance, interoperability with other services/devices and other reasons. Cloud-homed branches are also a great stepping off point when you’re moving a larger organization to a pure online environment.

Pure Cloud Considerations

At this point it shouldn’t be surprising to you that there really aren’t any new or unique considerations for branch offices when your entire organization is cloud based. From a branch office perspective, there’s no local infrastructure different versus hybrid scenarios.

Edge Cases and Wrap-up

In the past couple of posts, I’ve covered branch office considerations for high-availability. The range from SBAs, redundant WANs, redundant Internet, full pools, and more. While comprehensive, I didn’t cover every use case. When considering the solutions that best apply to you, draw up a simplified map of your environment, get a bunch of copies of it, and have at them with a red pen to indicate failure points. Work through these outages using your most important use cases to establish what works, what’s limited or hobbled, and what’s entirely broken. If a scenario doesn’t work for your use cases, put it aside.

You’ll now have two piles – works for me, and doesn’t work for me. Next, review the scenarios that do work, and establish which one best fits your business needs, including pricing. If the mighty dollar sign knocks all of these scenarios out of contention, you now need to sort through the “doesn’t work” scenarios, and work through them to find “the best of the worst” that does the best job of fitting your business needs and budget.

Branch Office Options

In my earlier post, I covered the SBA and what I feel are some pretty significant downsides given the technology changes in the past 10 or so years. So what are the options?

Redundant WAN

The simplest option, from an SfB point of view, is to have redundant connectivity from your branch office to your main office. How you go about this can vary. You could get a 2nd line from the same carrier, but that doesn’t help you if that carrier suffers an outage. A different carrier would guard against that, though watch out for the 2nd carrier simply using the first carrier for all of part of their services. Even with two different carriers, you could wind up with fibre in the same conduit, and you may suffer the dreaded backhoe fading.

Backup VPN

A backup VPN might make more sense. An Internet connection is less expensive, and there’s a good chance that it’s not sharing much or any infrastructure with the WAN link. The first issue to watch out for with VPNs is that you may not have sufficient upstream bandwidth. The second is that you may not have sufficient bandwidth at all. If you are using a lower capacity link as a backup, you can use the DSCP markings that you applied to your SfB traffic for QoS (you did do QoS, right?) to help you out. Your firewall/VPN device can be set to prioritize voice traffic based on these markings, and potentially block video all together.

Use SfB Server Standard Edition instead of an SBA

If redundant connections aren’t feasible, using a Standard Edition server may be. This moves all of your users functionality to their location, preventing the ugliness of limited functionality mode.  However, you now have to license this server, and you’re no longer dealing with an appliance – though you’ll recall that some SBAs were just servers with PRI cards anyway.

More downsides here are that if a user homed on this server hosts a meeting with a large number of participants from outside their office, all of that traffic is going to hit the WAN. Also, if the users in this office work remotely a lot, all of that traffic transits the WAN to reach the Edge servers at the main office…. unless you deploy an edge in the branch office, and now it seems like we’re boiling the ocean and building rocket ships to guard against a branch office WAN failure.

Get Out of the Office

The last option to deal with a branch office outage would be to get out of the office, either virtually or physically.

SfB has excellent mobile clients. If your users are homed in a central office or a datacentre, they can use the mobile clients to connect to their pool over LTE. There may be some limits here, like not being able to be a member of a Response Group, but as a backup option this one is pretty simple, and your staff may all already have company phones or subsidized company phones.

Lastly, the users can find a different place to work. This could be home, it could be a co-working space, or a coffee shop.

What about Hybrid and Cloud?

Finally, if you’re in a hybrid or cloud deployment, I’ll provide some thoughts on how to handle branch offices in the next two posts.