Network Packet Broker Http Network Sniffer VXLAN Header Stripping VXLAN Forwarding

VXLAN Gateway

VXLAN gateways facilitate communication among Virtual Machines (VMs) across various modes: VMs under the same Virtual Network Identifier (VNI), cross-network access across different VNIs, and interaction between VXLAN and non-VXLAN users. These gateways exist in two-layer and three-layer forms.

Two-layer Gateway
Workflow involves Broadcast, Unknown Unicast, and Multicast (BUM) forwarding and VXLAN unicast forwarding.

Process includes:

1. Switch_1: Identifies broadcast domain, checks MAC type:

• BUM MAC: Broadcast in domain (2).
• Known single broadcast: Proceeds with forwarding.

2. VTEP on Switch_1: Copies header, encapsulates VXLAN based on tunnel list, forwards.

3. VTEP on Switch_2/3: Validates packet, obtains broadcast domain, unseals VXLAN, checks

MAC type:

• BUM MAC: Broadcast processing.
• Native MAC: Processes; else, proceeds (4).

4. Switch_2/3: Adds VLAN, forwards to respective terminal.

Known Unicast Forwarding:
Workflow comprises known unicast MAC forwarding:

1. Switch_1: Identifies domain, checks MAC type:

Known unicast MAC: Proceeds if native; else, proceeds (2).
Others: Broadcasts in domain (2).
2. VTEP on Switch_1: Encapsulates, forwards.

3. VTEP on Switch_2: Validates packet, obtains broadcast domain, unseals VXLAN, checks
MAC type:

• Known single broadcast MAC: Proceeds (4).
• Native MAC: Processes; else, BUM process.

4. Switch_2: Adds VLAN, forwards to terminal.

VLAN Comparing VxLAN

Three Layers Gateway

Communication between vxlans of different network segments, and communication between vxlans and non-vxlans, need to be realized through IP routing.

BD was created on the three-layer gateway, and the VNI was mapped to BD in a 1:1 manner. BDIF interface was created based on BD, and the IP address was configured through the BDIF interface to realize the communication between vxlans of different network segments, as well as between VXLAN and non-vxlan.

The BDIF interface is similar to the VLANIF interface.

Three Layers Gateway Classification

L3 gateway is divided into centralized gateway and distributed gateway.

Centralized Gateway All network gateways are centrally deployed on a single device, and all cross-network access flows need to go through a centralized gateway.North-south/east-west traffic needs to go through the gateway, and local cross-subnet traffic is forwarded through the centralized gateway, with traffic detour.
Distributed Gateway Cross-subnet traffic is also the optimal path forwarding, only north-south flow pressure, no east-west flow pressure.In a typical spin-leaf networking deployment, gateways can be distributed across all leaf nodes to solve the problem of centralized gateways.

Recommend Network Packet Broker for VXLAN Header Stripping in Original Packet and Metadata

NT-FTAP-32QCX Network TAP NPB.pdf