Why VXLAN ?

About Me
Nama Lengkap : Muhammad Danu Wiyoto
Alamat : Karawaci, Tangerang, Banten
Pendidikan : S.Kom – Binus University, Jakarta ( 2000 – 2005 )
E-mail : [email protected]
[email protected]
Blog : danuwi.wordpress.com
Title : S.Kom, CCNA, CCNP EI, CCDP, CCIE RS #48413, MTCNA, MTCRE, MTA, HCNA RS, H3CNE,H3CSE
ACSA

Ig.me/danu.wiyoto.5 t.me/Danu48413 fb.com/danu.wiyoto.5 linkedin.com/in/mwiyoto

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 Overview

1 Evolution of Data Center Networking and Management

2 Hierarchy Topology
3 Spine & Leaf Topology
4 What is VXLAN?
5 VXLAN Terminologi
6 VXLAN Type
7 Topology Lab

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 1
Evolution of Data Center Networking and
Management
 What A Datacenter Needs To Offer

1. Availability
2. Scalability
3. Flexibility
4. Eficiency
5. Predictability
6. Reliability

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 Evolution DESTROY STP
Type-1
F
H ➢ LAG
R ➢ Bonding Ether
P ➢ LACP
➢ PAgP

Type-2
F
H
R
P

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 Evolution DESTROY STP
Type-1 ➢ M-LAG
➢ Stacking
F
H ➢ VSS
R ➢ VPC
P

Type-2
F
H
R
P

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 Evolution DESTROY STP

1. Underlay Overlay
- Shortest Path Bridging (SPB)
- Transparent Inter-Connection of Lots of Links ( TRILL )
- Fabricpath
- Locator ID Separation Protocol ( LISP )
- VXLAN

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 Traditional Applications
• Many traditional applications in a data center strictly
require Layer 2 connectivity between devices
Switched Network

.1 10.1.1.0/24 10.1.1.0/24 .2
VLAN 100
VLAN 100 L2 Switch L2 Switch VLAN 100
Host A Host B

• What happens when you have traditional applications in

the data center is built around an IP Fabric?
IP Fabric

.1 10.1.1.0/24 172.16.0/24 10.1.1.0/24 .2

VLAN 100 Router Router VLAN 100
Routed Traffic Host B
Host A

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 Possible Solution: A Layer 2 VPN
• Implement TOR routers with Layer 2 VPN capabilities
• Tunnel layer 2 frames inside IP Packets between VPN
gateways
• Routers that can perform encapsulation and decapsulation of VPN data are generally
called gateways
• Preserves original layer 2 frame as it transits the transport network (IP Fabric)
Data Forwarding Direction Encapsulate for
transmission over fabric Decapsulate

ETH IP – DA 10.1.1.2 IP – DA 17.16.0.2 ETH IP – DA 10.1.1.2 ETH IP – DA 10.1.1.2

Original Ethernet
Frame

IP Fabric

.1 10.1.1.0/24 .1 172.16.0/24 .2 10.1.1.0/24 .2

ge-0/0/0 Router Router ge-0/0/0
Host A Host B

TOR Routers
With Layer 2 VPN Capabilities

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 VPN Terminology—Data Plane
• The data plane of a VPN describes the process of encapsulation
and decapsulation performed by the VPN Gateways
• Including the end-to-end routing/MAC table lookups,
packet/frame formatting, and sometimes MAC learning
Data Forwarding Direction Encapsulate for
transmission over fabric Decapsulate

ETH IP – DA 10.1.1.2 IP – DA 17.16.0.2 ETH IP – DA 10.1.1.2 ETH IP – DA 10.1.1.2

Original Ethernet
Frame

IP Fabric

.1 10.1.1.0/24 .1 172.16.0/24 .2 10.1.1.0/24 .2

ge-0/0/0 Router/GW Router/GW ge-0/0/0
Host A Host B

HostA MAC >ge-0/0/0 HostB MAC >ge-0/0/0

HostB MAC > tunnel HostA MAC > tunnel

MAC Table MAC Table

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 VPN Terminology—Control Plane
• The control plane of a VPN describes the process of
learning performed by the VPN Gateways
• Including the IP address of remote VPN gateways, VPN establishment, and
sometimes MAC addresses of remote hosts
• Remote VPN gateways can be statically configured or dynamically
discovered

IP Fabric

.1 10.1.1.0/24 .1 172.16.0/24 .2 10.1.1.0/24 .2

ge-0/0/0 Router/GW Router/GW ge-0/0/0
Remote Host A Host B
MACs are
sometimes HostA MAC >ge-0/0/0 HostB MAC >ge-0/0/0
learned HostB MAC > tunnel HostA MAC > tunnel
from the MAC Table
VPN Signaling MAC Table
signaling
protocol

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 DC Network Evolution #Spanning Tree

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 DC Network Evolution #vPCs

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 DC Network Evolution #FabricPath

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 DC Network Evolution #VXLAN

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 DC Network Evolution #EVPN

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 VXLAN BGP-EVPN
CONTROL PLANE

BGP - EVPN

DATA PLANE

MPLS VXLAN PBB

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 Data Center Topology

There are 2 types of topology that commonly use In Data Center :

• Hierarchy Topology
• Spine and Leaf Topology

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 2
Hierarchy Topology
 Hierarchy Topology

• CORE CORE
• DISTRIBUTION
• ACCESS

DISTRIBUTION

ACCESS

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 3
Spine & Leaf Topology
 Spine & Leaf Topology

SPINE

LEAF

End Node

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 Topologies Evolution

L3 FHRP

L2

• Single Switch • Single Switch • Single Switch

• Single Router • Single Router • Single Router
• High Risk • Medium Risk • Medium Risk
• Low MGMT Effort • Medium MGMT Effort • Low MGMT Effort

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 Topologies Evolution

IGP
( OSPF, EIGRP )
L3 FHRP FHRP

L2

L3

L2 FHRP
FHRP

• Add Redudancy
• 50 % Un-Used • Add Redudancy • Add Redudancy
• Add port-capacity • Add port-capacity
• 50 % Un-Used • 50 % Un-Used
• Big Layer 2 domain ( ALERT ) • Reduces Mobility

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 Traditional vs VXLAN network design

HSRP
Layer-3

Layer-2
HSRP

Spanning-Tree

Layer-2 Layer-2 Layer-2

Layer-2 Layer-2
Layer-2 Layer-2

pervisor Baremet al Baremet al Hypervisor Hypervisor

Baremet al Hypervisor Hypervisor Hypervisor Baremet al Hy

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 The Benefit of Spine and Leaf

1. Improved Redudancy
2. Increased Bandwidth
3. Improved Scalability
4. Low Latency and Congestion Avoidence

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 4
What is VXLAN?
 What is VXLAN?

1. VXLAN is a network overlay technology

2. VXLAN builds Layer-2 & Layer-3 overlay network on top of an IP routed network
3. VXLAN uses MAC in UDP encapsulation (UDP destination port 4789)
4. VXLAN is one of the Tunneling Protocol
5. VXLAN is an extension to Vlan that provide 16 Million VNI number to use 16 million
6. Reduces MAC Address Table Consumption
7. Anycast Gateway
8. Leverages Layer-3 ECMP – all links forwarding
9. Segmentation and Multi-Tenancy
10. CLOS Topology

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 Two Modes of VXLAN

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 The Benefit of VXLAN

1. Flexible placement of multitenant segment throughout the data center

2. Better utilization of available network path in the underlying infrastructure
3. Higher Scalability to address more Layer 2 segment

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 5
VXLAN Terminologi
 VXLAN TERMINOLOGY

1. VXLAN Underlay
2. VXLAN Overlay
3. VXLAN Tunnel End Point (VTEP)
4. VNI/VNID
5. VXLAN Gateway ( Anycast Gateway )
6. Network virtualization Edge (NVE)
7. BUM Traffic Tunnel End Point (VTEP)

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 Why VXLAN Overlay

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 Overlay Taxonomy

• Identifier = VN Identifier (VNID)

Overlay Control Plane
• NVE = Network Virtualisation Edge VTEPs
• VTEP = VXLAN Tunnel End-Point
Encapsulation

Edge Devices (NVE)

Edge Device (NVE)

Hosts
(end- points,
Underlay Network physical or
virtual)

Underlay Control Plane

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 Virtual Tunnel End Point (VTEP)

Transport Ip
Network

VTEP
IP Interface IP Interface

Local LAN Local LAN

Segment Segment

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 VXLAN Underlay

Edge Device
Edge Device

Local LAN
Local LAN Segment
IP Interface
Segment

Physical Host
Edge Device Physical Host
Local LAN
Segment

Virtual Switch

Virtual Hosts

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 VXLAN Overlay

VTEP
VTEP

V V
Local LAN
Local LAN Segment
Segment Encapsulation

Physical Host
VTEP
V Physical Host
Local LAN
Segment

Virtual Switch

VTEP – VXLAN Tunnel End-Point

VNI/VNID – VXLAN Network Identifier Virtual Hosts

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 Overlay Network Evolution: Edge Devices
Network Overlays Host Overlays Hybrid Overlays
Protocols Flooding Network DB

V V
V V M A A
M M p p
M O O p
O p
O S S O O
S S
S S

Physical Physical Virtual Virtual Virtual Physical

• Router/switch end-points Virtual end-points only • Physical and Virtual

• Protocols for Single admin domain • Resiliency + Scale
resiliency/loops
VXLAN, NVGRE, STT • x-organisations/federation
• Traditional VPNs
Tunnel End-points • Open Standards
• OTV, VPLS, LISP, FP

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 VTEP (1 of 3)
A VTEP is the endpoint of a VXLAN tunnel
It takes Layer 2 frames from VMs and encapsulates them using
VXLAN encapsulation
Based on preconfigured mapping of VLAN to VNI

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 VTEP (2 of 3)
A VTEP is the endpoint of a VXLAN tunnel (contd.)
Forwards VXLAN packets to remote VTEP over the L3 network
Based on MAC to remote VTEP mapping

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 VTEP (3 of 3)
A VTEP is the endpoint of a VXLAN tunnel (contd.)
Takes Layer 3 packets received from the remote VTEP and strips the outer
MAC, outer IP header, and VXLAN header
Forwards resulting Layer 2 frames to the destination based on VNI-to-interface
mapping

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 MAC Address Learning

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 Multicast MAC Learning (Controller-less)

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 Building the Multicast Tree

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 Multicast Tree Forwarding

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 6
VXLAN Type
 VXLAN Type

• VXLAN Unicast/Static VXLAN

• VXLAN Multicast/ Flood & Learn
• VXLAN EVPN
• VXLAN LISP (Locator ID Separation Protocol)

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 VXLAN Unicast/Static VXLAN

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 VXLAN Multicast/Flood & Learn

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 VXLAN EVPN (L2)

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 VXLAN EVPN (L3)

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 VXLAN Data Plane
Original VLAN tag is usually removed
during encapsulation

F
OUTER OUTER OUTER VXLAN
Original L2 Frame C
MAC IP UDP Header S

48 DEST MAC
IP HDR SOURCE
72 16
DATA PORT FLAGS
48 SRC MAC 8
PROTO: VXLAN RRRR1RRR
8 16
VLAN UDP PORT
32
(OPTIONAL) UDP RESERVED 24 VXLAN Network Identifier – On a
16 CKSUM 16
16
ETH TYPE LENGTH VXLAN gateway, the 24-bit VNI is
0X0800 SRC IP: CHKSUM VNI 24
32
MY VTEP
16
0X0000
mapped statically through
DST IP: RESERVED 8 configuration to a host/server facing
32
DEST VTEP VLAN allowing for ~16 million
broadcast domains in a data center

VXLAN Port = 4789

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 VXLAN Packet

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork
 VXLAN Packet

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 Difference VLAN & VXLAN

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 7
Topology Lab
 VxLAN Unicast

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 VxLAN Unicast Cont.

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 VxLAN Unicast cont.

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 VxLAN Unicast cont.

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 VxLAN Unicast Cont.

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 VxLAN Multicast

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 VxLAN Multicast Cont.

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 VxLAN Multicast Cont.

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

 VxLAN Multicast Cont.

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork

BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork
BestPath-Network Best-Path Network www.bestpath-network.com [email protected] @bestpathnetwork
TERIMAKASIH ATAS PARTISIPASI
ANDA
Salam Pantang Pulang Sebelum Reply!!!
---
Dan Selamat Menunaikan Ibadah Puasa