The most important feature of link aggregation is its ability to enhance or increase network capacity while maintaining a fast transmission speed and eliminating the need to use additional hardware devices, thus reducing cost. Link aggregation brings traffic from separate sources or locations together and forwards the traffic to a single monitoring tool as one stream. Link aggregation can be enhanced further by using traffic replication, which allows the same traffic stream—aggregated traffic in this case—to be sent to more than one monitoring tool.
This can be used to improve visibility of both sides of a link over a single interface. Aggregation is used to accomplish two key tasks. The first is to increase overall bandwidth between two switches or servers where the logical aggregate interface is configured. This can eliminate bottlenecks by allowing data to be transmitted and received over multiple interfaces. The second key reason to use link aggregation is to eliminate any single points of failure between switches. You can lose one or more physical interfaces on a logical aggregate interface, but as long as one physical connection is up and operational, you maintain connectivity. Link aggregation provides fast and transparent recovery in case one of the individual links fails.
Link aggregation also supports network load balancing. Different load balancing algorithms can be set by network engineers or administrators. Furthermore, network speed is increased in small increments, which leads to savings in both resources and cost. Link aggregation can also affect how efficiently connected tools operate. When monitoring tools require great network visibility to perform efficiently, consolidating traffic from many locations and sources is essential to those tools. When link aggregation is combined with traffic replication, copies of the same combined traffic can be forwarded to various analysis tools.
Cubro’s Aggregation TAP series combines traffic from various sources and divides it into two traffic streams, each of which has the aggregated data from the duplex flows, which allows network staff to monitor a full duplex connection with a single monitoring tool.