PowerPoint Presentation - Juniper Networks Presentation Template-US

E-VPN and Data Center R. Aggarwal (rahul@juniper.net)

Copyright 2004 Juniper Networks, Inc. Proprietary and Confidentialwww.juniper.net ##Copyright 2004 Juniper Networks, Inc. Proprietary and Confidentialwww.juniper.net

Reference Model and TerminologyData Center 1DCS1DCS2DCB1

Data Center 3DCB3DCS8

Data Center 2DCS4DCS5

Data Center 4DCB4/DCS9

DCB2DC: Data CenterDCS: Data center switchConnected to Servers/VMsDCB: Data center border router Could be co-located with DCSWAN provides interconnect among DCs, and between DCs and Client Site BR

Client site

Client Site BRWAN#Copyright 2004 Juniper Networks, Inc. Proprietary and Confidentialwww.juniper.net

Data Center Interconnect: Layer 2 ExtensionData Center 1DCS1DCS2DCB1

Data Center 3DCB3DCS8

Data Center 2DCS4DCS5

Data Center 4DCB4/DCS9

DCB2

Client site

Client Site BRWANVM1VM3VM2VM4VM5VM6VM7VM8VLAN1 (subnet1) stretches between DC1, DC2, DC3 and DC4VLAN2 (subnet2) is present only on DCS1VLAN3 (subnet3) stretches between DC1 and DC2VLAN stretch is required for cloud computing resource fungibility, redundancy etc.Communication between VMs on different VLANs/subnets and between clients and the VMs requires layer 3 routing

#Copyright 2004 Juniper Networks, Inc. Proprietary and Confidentialwww.juniper.net BGP-MPLS E-VPNs for Data Center InterconnectBGP-MPLS based technology, one application of which is data center interconnect between data center switches for intra-VLAN forwarding i.e., layer 2 extensionWhy?Not all data center interconnect layer 2 extension requirements are satisfied by existing MPLS technology such as VPLSE.g., minimizing flooding, active-active points of attachment, fast edge protection, scale, etc.How?Reuses several building blocks from existing BGP-MPLS technologiesRequires extensions to existing BGP-MPLS technologiesDraft-raggarwa-sajassi-l2vpn-evpn-01.txtBeing pursued in the L2VPN WG

#Copyright 2004 Juniper Networks, Inc. Proprietary and Confidentialwww.juniper.net

E-VPN Reference Model

MES 1

Ethernet Switch-B3MES 3MES 2

MES 4VPN A

Host -A1Host-B1Host-A4Host-A3VPN B

VPN A

VPN B

EFI-AEFI-AEFI-BEFI-BVPN A

EFI-ARR

Host A5MES - MPLS Edge Switch; EFI E-VPN Forwarding Instance; ESI Ethernet Segment Identifier (e.g., LAG identifier)MESes are connected by an IP/MPLS infrastructureTransport may be provided by MPLS P2P or MP2P LSPs and optionally P2MP/MP2MP LSPs for multicastTransport may be also be provided by IP/GRE Tunnels

ESI 1, VLAN1ESI 2, VLAN2ESI 3, VLAN1ESI 4, VLAN2ESI 5, VLAN1ESI 1, VLAN1#Copyright 2004 Juniper Networks, Inc. Proprietary and Confidentialwww.juniper.net Relating EVPN Reference Model to Data Center Interconnect Reference Model

Data Center 1DCS1DCS2DCB1

Data Center 3DCB3DCS8

Data Center 2DCS4DCS5

Data Center 4DCB4/DCS9

DCB2WANDCSes may act as MPLS Edge Switches (MES)DCSes may interconnect with DCBs using E-VPNDCSes are connected to hosts i.e., VMsDCBs must participate in E-VPN although they may perform only MPLS switchingWAN routers may or may not participate in E-VPNFollowing slides will describe an overview of E-VPN and then apply E-VPN to data center interconnect

#Copyright 2004 Juniper Networks, Inc. Proprietary and Confidentialwww.juniper.net E-VPN Local MAC Address LearningA MES must support local data plane learning using vanilla ethernet learning proceduresWhen a CE generates a data plane packet such as an ARP requestMESes may learn the MAC addresses of hosts in the control plane using extensions to protocols that run between the MES and the hostsMESes may learn the MAC addresses of hosts in the management plane#Copyright 2004 Juniper Networks, Inc. Proprietary and Confidentialwww.juniper.net E-VPN Remote MAC Address LearningE-VPN introduces the ability for an MES to advertise locally learned MAC addresses in BGP to other MESes, using principles borrowed from IP VPNsE-VPN requires an MES to learn the MAC addresses of CEs connected to other MESes in the control plane using BGPRemote MAC addresses are not learned in the data plane

#Copyright 2004 Juniper Networks, Inc. Proprietary and Confidentialwww.juniper.net Remote MAC Address Learning in the BGP Control PlaneArchitectural BenefitsIncreases the scale of MAC addresses and VLANs supportedBGP capabilities such as constrained distribution, Route Reflectors, inter-AS etc., are reusedAllows hosts to connect to multiple active points of attachmentImproves convergence in the event of certain network failures Allow hosts to relocate within the same subnet without requiring renumberingMinimizes flooding of unknown unicast packetsMinimizes flooding of ARPRest of the presentation will focus on this Control over which MAC addresses are learned by which devicesSimplifies operations; enables flexible topologies etc.

#Copyright 2004 Juniper Networks, Inc. Proprietary and Confidentialwww.juniper.net ARP Scaling Optimization: ApproachMinimize the radius of ARP request/response propagationMinimize the propagation radius of ARP request from a server/Virtual MachineIn the switching infrastructure in the data center Across data centersRespond to an ARP request from a server/VM as close to the server/VM as possibleRequires a number of componentsSee the following slide#Copyright 2004 Juniper Networks, Inc. Proprietary and Confidentialwww.juniper.net ARP Scaling Optimization: Proxy ARPA network node as close to the server/VM, as possible, performs Proxy ARP in response to ARP requests from the server/VMThe network node should ideally be the DCSWhich MAC address does the network node use to respond to the ARP request?The answer depends on the forwarding paradigm used by the node to forward packets within the VLANMAC lookup based forwarding within the VLAN/subnetThe solution in the following slides focuses on thisIP address based forwarding within the VLAN/subnetNot discussed in the following slides

#Copyright 2004 Juniper Networks, Inc. Proprietary and Confidentialwww.juniper.net ARP Scaling Optimization: The Role of E- VPN (1)When MAC lookup based forwarding is used within a VLAN/subnetMESes perform Proxy ARP An MES responds to an ARP request, for an IP address, with the MAC address bound to the IP address When the destination is in the same subnet as the sender of the ARP requestThe ARP request is not forwarded to other MESes

#Copyright 2004 Juniper Networks, Inc. Proprietary and Confidentialwww.juniper.net ARP Scaling Optimization: The Role of E- VPN (2)How does the MES learn the IP address bound to the MAC address when the MAC address is remote?BGP MAC routes carry the IP address bound to the MAC address How does an MES learn the IP to MAC binding when the MAC address is local?Control or management plane between MES and CEs or data plane snooping An MES advertises the local IP to MAC bindings in the MAC routes

#Copyright 2004 Juniper Networks, Inc. Proprietary and Confidentialwww.juniper.net