EVPN: Or how I learned to stop worrying and love the BGP Tom Dwyer, JNCIE-ENT #424 Clay Haynes, JNCIE-SEC # 69 JNCIE-ENT # 492.

Slides:



Advertisements
Similar presentations
Copyright © 2004 Juniper Networks, Inc. Proprietary and Confidentialwww.juniper.net 1 E-VPN and Data Center R. Aggarwal
Advertisements

L3 + VXLAN Made Practical
Ethernet VPN (EVPN) - Casos de Uso e Aplicação
Virtual LANs.
Transitioning to IPv6 April 15,2005 Presented By: Richard Moore PBS Enterprise Technology.
Introduction into VXLAN Russian IPv6 day June 6 th, 2012 Frank Laforsch Systems Engineer, EMEA
Multi-homed network in EVPN draft-hao-evpn-mhn-00 July 20131MHN in EVPN Weiguo Hao(Huawei) Yizhou Li(Huawei) Pei Xu(Huawei)
Switching & Operations. Address learning Forward/filter decision Loop avoidance Three Switch Functions.
Switching Topic 4 Inter-VLAN routing. Agenda Routing process Routing VLANs – Traditional model – Router-on-a-stick – Multilayer switches EtherChannel.
Network Overlay Framework Draft-lasserre-nvo3-framework-01.
MPLS And The Data Center Adrian Farrel Old Dog Consulting / Juniper Networks
IETF-82 draft-bitar-datacenter-vpn-applicability-01.txt Page - 1 Cloud Networking: Framework and VPN Applicability draft-bitar-datacenter-vpn-applicability-01.txt.
© 2006 Cisco Systems, Inc. All rights reserved.1 Microsoft Network Load Balancing Support Vivek V
Draft-bitar-nvo3-vpn-applicability-00.txt Page - 1 Cloud Networking: Framework and VPN Applicability draft-bitar-nvo3-vpn-applicability-00.txt Nabil Bitar.
Virtual Subnet: A Scalable Cloud Data Center Interconnect Solution draft-xu-virtual-subnet-06 Xiaohu Xu IETF82, TAIWAN.
VXLAN – Deepdive Module 5
1 © OneCloud and/or its affiliates. All rights reserved. VXLAN Overview Module 4.
Using BGP between PE and CE in EVPN draft-li-l2vpn-evpn-pe-ce-01 Zhenbin Li, Junlin Zhuang, Shunwan Zhuang (Huawei Technologies) IETF 90, Toronto, Canada.
1 © 2003, Cisco Systems, Inc. All rights reserved. CCNA 3 v3.0 Module 9 Virtual Trunking Protocol.
Draft-boutros-l2vpn-evpn-vpws-00.txt Sami Boutros Ali Sajassi Samer Salam IETF 84, July 2012 Vancouver, Canada.
E-VPN on UW System Network Michael Hare. Purpose of presentation A high level introduction to E-VPN A simple lab demonstration For our documentation,
Copyright © 2004 Juniper Networks, Inc. Proprietary and Confidentialwww.juniper.net 1 draft-sajassi-bess-evpn-virtual-eth- segment-00.txt A. Sajassi (Cisco),
Cisco Confidential © 2013 Cisco and/or its affiliates. All rights reserved. 1 Cisco Networking Training (CCENT/CCT/CCNA R&S) Rick Rowe Ron Giannetti.
Copyright © 2004 Juniper Networks, Inc. Proprietary and Confidentialwww.juniper.net 1 draft-sajassi-l2vpn-pbb-evpn-02.txt Ali Sajassi (Cisco), Nabil Bitar.
Copyright © 2004 Juniper Networks, Inc. Proprietary and Confidentialwww.juniper.net 1 draft-ietf-l2vpn-evpn-04.txt A. Sajassi (Cisco), R. Aggarwal (Arktan),
1 Copyright © 2009 Juniper Networks, Inc. E-VPN for NVO Use of Ethernet Virtual Private Network (E-VPN) as the carrier-grade control plane.
VS (Virtual Subnet) draft-xu-virtual-subnet-03 Xiaohu Xu IETF 79, Beijing.
Active-active access in NVO3 network draft-hao-l2vpn-evpn-nvo3-active-active-00 July 20131Active-active access in NVO3 network Weiguo Hao(Huawei) Yizhou.
XRBLOCK IETF 85 Atlanta Network Virtualization Architecture Design and Control Plane Requirements draft-fw-nvo3-server2vcenter-01 draft-wu-nvo3-nve2nve.
EVPN: Or how I learned to stop worrying and love the BGP
VXLAN DCI Using EVPN draft-boutros-l2vpn-vxlan-evpn-01.txt Sami Boutros Ali Sajassi Samer Salam Dennis Cai IETF 86, March 2013 Orlando, Florida.
Virtual Private LAN Service
MBGP and Customer Routes
MPLS Virtual Private Networks (VPNs)
EVPN Unifying control plane
Virtual Hub & Spoke with BGP EVPNs
Virtual Local Area Networks or VLANs
draft-xu-isis-nvo-cp-00 Xiaohu Xu (Huawei) Saumya Dikshit (Cisco)
Virtual Subnet : A L3VPN-based Subnet Extension Solution
Revisiting Ethernet: Plug-and-play made scalable and efficient
Hierarchical Fabric Designs
L2VPN/EVPN/L3VPN Yang IETF-96 Berlin.
DCI using TRILL Kingston Smiler, Mohammed Umair, Shaji Ravindranathan,
Trellis Tutorial An Open-Source, White-Box, SDN Based Leaf-Spine Network Fabric Charles Chan Open Networking Foundation.
TRILL MPLS-Based Ethernet VPN
Introduction to Networking
Virtual LANs.
Framework for EVPN Designated Forwarder Election Extensibility
G0/0 ip address nve-only (only required for transparent mode)
EVPN Interworking with IPVPN
Automating the DATACENTER
NTHU CS5421 Cloud Computing
draft-sajassi-bess-evpn-ip-aliasing- 00.txt
Dr. Rocky K. C. Chang 23 February 2004
draft-sajassi-bess-evpn-vpls-all-active- 00.txt
EVPN a very short introduction
Attilla de Groot | Sr. Systems Engineer, HCIE #3494 | Cumulus Networks
Top #1 in China Top #3 in the world
draft-malhotra-bess-evpn-unequal-lb-00
IS-IS VPLS for Data Center Network draft-xu-l2vpn-vpls-isis-02
EVPN multi-homing port-active load-balancing IETF-101 [London]
Virtual Hub-and-Spoke in BGP EVPNs
EVPN multi-homing port-active load-balancing IETF-103 [Bangkok]
Applicability of EVPN to NVO3 Networks
Multicasting Unicast.
BGP VPN service for SRv6 Plus IETF 105, Montreal
EVPN Interworking with IPVPN
EVPN and L2 Access Protocols: Single-Flow-Active load-balancing mode
Reconciling Zero-conf with Efficiency in Enterprises
Tim Strakh CEO, IEOFIT CCIE RS, CCIE Sec CCIE Voice, CCIE DC
Presentation transcript:

EVPN: Or how I learned to stop worrying and love the BGP Tom Dwyer, JNCIE-ENT #424 Clay Haynes, JNCIE-SEC # 69 JNCIE-ENT # 492

So what is EVPN? EVPN is a VPN technology that provides L2 or integrated L2+L3 VPN. EVPN uses a control plane methodology ( BGP ) for MAC learning over traditional data plane methodologies. Learning from the sins of the past. Minimizes flooding with the use of proxy arp. Supports an active/active multi-homing with load balancing. EVPN can use fast convergence for ethernet segment failures.

MPLS-Based Ethernet VPN RFC 7432

EVPN Overlay ( NVO )

BGP to the rescue MAC/IP routes are now advertised via the control plane by BGP ( PE to PE ). We use a new BGP NLRI ( AFI =25 ) and ( SAFI=70) BGP allows for greater scale ( can use route reflectors ) Supports all active multi-homing Supports ECMP MAC routes. Supports Mass withdrawal for segment failure

EVPN Terms Ethernet Segment : For multi-homed CE’s the set of Ethernet links from the PE’s to the CE’s form Ethernet Tag = identifier for a broadcast domain. Such as a VLAN. Each PE will map between the different identifiers. Ethernet Segment Identifier ( ESI) A unique nonzero identifier that represents a Ethernet segment across the network EVPN Instance ( EVI ) A routing and forwarding instance that spans across all PE routers for that VPN.

EVPN Sample Topology

MAC Advertisement Each PE will learn mac’s from the attached CE via traditional data plane methods. The MAC address is learned and is now advertised to remote PE’s as a MAC Address Route Type 2 via BGP.

MAC Advertisement When used with Integrated Routing and Bridging ( IRB ) the MAC address route has an extended community for the Default GW. PE’s can proxy-ARP for remote gateway Minimizes flooding across the WAN

MAC Advertisement – Services Vlan Base Service Interface Single bridge domain per EVI 1:1 mapping between Vlan ID and EVI Ethernet tag in route update set to 0 Vlan translation can occur at Egress PE Label created per EVI Vlan Aware Bundle Multiple VLANs N:1 mapping between Vlan ID and EVI Ethernet tag in route is set to the tag value Mutiple bridge domains, one per vlan Label created per vlan

MAC Advertisement – Services Vlan Bundle Service Interface Single bridge domain per EVI Many –to-one mapping VLAN ID and EVI Ethernet tag in route update set to 0 MACs unique across VLANs Vlan translation NOT ALLOWED

EVPN Multi-homing Single—A CE connected to one PE. No Ethernet segment value is required. Active-Standby— CE is connected to more than one PE. Only of the PE’s forward traffic from that Ethernet segment. One PE is selected as the Designated Forwarder. This is a redundancy mode. Ethernet Segment Identifier is included with Ethernet Segment route with the ES-Import extended Community. DF election is based on Ethernet Segment Routes. Active-Active – CE is connected to more than one PE. All the PE routers connected to this CE are allowed to forward to and from that Ethernet segment.

EVPN Multi-homing Single—A CE connected to one PE. No Ethernet segment value is required.

EVPN Multi-homing Active-Standby— CE is connected to more than one PE. Only of the PE’s forward traffic from that Ethernet segment. One PE is selected as the Designated Forwarder. This is a redundancy mode.

EVPN Multi-homing Active-Active – CE is connected to more than one PE. All the PE routers connected to this CE are allowed to forward to and from that Ethernet segment.

EVPN MAC Mass withdrawal When an ESI link failure occurs, the PE will withdraw the AD route Next Hops are removed from the associated PEs for MAC/IP routes. Per ESI and EVI instead of per mac address

Unknowns and ARP So how do we deal with ARP? EVPN uses Proxy-ARP. The PE will respond to all arp requests it knows about. What if none of the PE’s know about it? We drop the trafffic. Limiting flooding. Each PE will learn the MAC or ARP entry before we allow the traffic to pass.

EVPN MAC Mobility During VMotions the PE may not detect the move and may not withdraw the mac route. MAC routes have an extended community with a MAC mobility sequence number. The new PE will see the new mac address being advertised locally and will advertise it with a MAC mobility sequence number. The remote PE’s will see this advertisement with the higher sequence number and will prune the mac route replacing the old one with the new one. The original PE will see the new route and will withdraw the old route.

EVPN with VXLAN

VXLAN : Building blocks VM 1 VM 2 VM 3 Bridge Domain 1 VNI : 100 Bridge Domain 2 VNI : 200 vSwitch (Virtual Switch) Virtual Tunnel End Point (VTEP, lo0) Kernel IP Stack IP Network 24 bits = 16 M VNIs vServer

VXLAN – Putting it Together Servers TOR Switches Routers VXLAN tunnels VTEP: Virtual Tunnel End Point A B C D E F B C D E F A B A

Why VXLAN/EVPN? Limited hardware specs GRE hashing across WAN limits IP Fabrics are becoming more popular In enterprise, MPLS is really HARD! …Or so they say National Archives image (208-N-43888)

VXLAN Deployment Options Data plane BasedControl Plane Based Virtual Networks created using Multicast (PIM) groups. Susceptible to data trombone effects across DC’s Virtual Networks created using 3 rd party controllers Virtual Networks with benefits such as VM traffic optimization PIM creates fully meshed P2P tunnels for known unicast PIM creates multicast tunnels for L2 BUM Virtual Network IDs (VNID) communicated using EVPN Fully meshed VXLAN tunnels forward traffic

Lab Layout