BGP Based Services

https://e-vpn.io/fal

Introduction

Jiri Chaloupka – Cisco Technical Marketing Engineer

03/2020
Objective
• Short Technical session (Flood & Learn)
• No Fee
• No Registration (Let’s see if we will not overload meeting;) )
• Networking topics with focus on Service Provider(SP) and SP Data
Center technologies
• Next Topic and When?
• We will see based on your interest J

https://e-vpn.io/fal
BGP Based Services
Introduction

https://e-vpn.io/fal
Service Provider Network - Simplification Journey

Provisioning NETCONF NETCONF

YANG YANG

Programmability

L2/L3VPN Services LDP BGP LDP BGP BGP

Inter-Domain CP BGP-LU BGP-LU

FRR or TE RSVP
IGP with SR
LDP IGP with SR
Intra-Domain CP
IGP

https://e-vpn.io/fal
From Mac Bridging to Mac Routing
Common BGP Control Plane
EVPN, VPNv4/6 Overlay
Evolution:
Underlay
Segment Routing (SR: MPLS, SRv6) SR, VXLAN SR, VXLAN

Data Center Network

Service Provider Network overlap

Leaf
VM

PE1 DCI1

Spine Spine

Leaf
VM
A1 Access WAN/Core

Leaf
PE2 DCI2 VM

BGP: VPNv4/6 VPLS Overlay

Existing Solution: Fabric-Path (Trill)
LDP: VPLS, PW Fabric-Path

MPLS: LDP, RSVP-TE MPLS, L2 L2, IP Underlay

https://e-vpn.io/fal
EVPN Advantages:
Integrated • Integrated Layer 2 and Layer 3 VPN services

Services • L3VPN-like principles and operational experience for scalability and control
• All-active Multi-homing & PE load-balancing (ECMP)
• Fast convergence (link, node, MAC moves)
Network
• Control-Place (BGP) learning. PWs are no longer used.
Efficiency
• Optimized Broadcast, Unknown-unicast, Multicast traffic delivery

• Choice of MPLS, VxLAN or SRv6 data plane encapsulation

Service • Support existing and new services types (E-LAN, E-Line, E-TREE)
Flexibility
• Peer PE auto-discovery. Redundancy group auto-sensing

Fully support IPv4 and IPv6 in the data plane and control plane
Investment •

Protection • Open-Standard and Multi-vendor support

https://e-vpn.io/fal
EVPN – Why?
Next-Generation Solutions for L2VPN
Solving VPLS challenges for per-flow Redundancy
M1 M2
CE1 PE1 PE3 CE2
• Existing VPLS solutions do not offer an All- Echo !
Active per-flow redundancy
PE2 PE4

• Looping of Traffic Flooded from PE

M1 Duplicate !
M2
• Duplicate Frames from Floods from the
CE1 PE1 PE3 CE2
Core
• MAC Flip-Flopping over Pseudowire PE2 PE4

• E.g. Port-Channel Load-Balancing does not

produce a consistent hash-value for a M1 M2
frame with the same source MAC (e.g. non CE1 PE1
MAC
Flip-Flop PE3 CE2
MAC based
Hash-Schemes)
PE2 PE4

https://e-vpn.io/fal
EVPN Flavors
• Multi-Homed All-Active Ethernet Access
• Replacement of: mLACP, STP, T-LDP, BGP-AD, etc.

• Standards-based Multi-chassis / Cluster Control Plane

• Replacement of: vPC, VSS, nVCluster, etc.
• Replacement of: HSRP, VRRP, etc.

https://e-vpn.io/fal
Concepts
EVPN Instance (EVI) Ethernet Segment BGP Routes BGP Route Attributes

SHD CE1
Route Types Extended Communities
BD EVI ESI1 PE1 [1] Ethernet Auto-Discovery (AD) Route ESI MPLS Label

[2] MAC/IP Advertisement Route ES-Import

MHD CE2
[3] Inclusive Multicast Route MAC Mobility
BD
EVI

PE2
ESI2 [4] Ethernet Segment Route Default Gateway
PE
[5] IP Prefix Advertisement Route Encapsulation

• EVI identifies a VPN in the • Represents a ‘site’ • New SAFI [70] • New BGP extended
network connected to one or more • Routes serve control communities defined
• Encompass one or more PEs plane purposes, • Expand information
bridge-domains, • Uniquely identified by a 10- including: carried in BGP routes,
depending on service byte global Ethernet MAC address reachability including:
interface type Segment Identifier (ESI) MAC mass withdrawal MAC address moves
Port-based • Could be a single device Split-Horizon label adv. Redundancy mode
VLAN-based (shown above) or an entire network MAC / IP bindings of a GW
Aliasing
VLAN-bundling Single-Homed Device (SHD) Multicast endpoint discovery Split-horizon label encoding
Multi-Homed Device (MHD) Redundancy group discovery Data plane Encapsulation
Single-Homed Network (SHN)
Designated forwarder election
Multi-Homed Network (MHN) IP address reachability
L2/L3 Integration

https://e-vpn.io/fal
EVPN - Ethernet VPN
• Concepts are same!!! Pick your side!

Pick your side!

SP1 SP2
PE2 PE4
CE1
PE1 PE3
L1 L2 L3 L4

C1 C2
VM VM VM VM

https://e-vpn.io/fal
EVPN - Ethernet VPN
• Leafs run Multi-Protocol BGP to advertise & learn MAC/IP addresses over the
Network Fabric
• MAC/IP addresses are advertised to rest of Leafs

SP1 SP2

MAC/IP advertisement &

learning via BGP EVPN NLRI

L1 L2 L3 L4
Data Plane learning
from the hosts
All Active multi-homing
C1 C2 Ethernet Segment
VM VM VM VM

https://e-vpn.io/fal
 EVPN - load-balancing modes
All-Active Single-Active Port-Active
(per flow) (per VLAN) (per port)

PE1 PE2 PE1 PE2 PE1 PE2

V1 V1 V1 V2 V1, V2

CE1 CE2 CE3

Single LAG at the CE Multiple LAGs at the CE Single LAGs at the CE

VLAN goes to both PE VLAN active on single PE Port active on single PE
Traffic hashed per flow Traffic hashed per VLAN Traffic hashed per port
Benefits: Bandwidth, Convergence Benefits: Billing, Policing Benefits: Protocol Simplification

https://e-vpn.io/fal
EVPN – Distributed Anycast Gateway
Purpose:
Optimal intra and inter-subnet connectivity with seamless workload mobility
Identical Anycast Gateway Virtual IP
and MAC address are configured on
all the Leafs
Distributed Anycast Gateway serves
as the gateway for connected hosts SP1 SP2

BVI BVI BVI BVI

GW GW GW GW

L1 L2 L3 L4
All the BVIs perform active forwarding
in contrast to active/standby like First-
hop routing protocol
C1 C2
VM VM VM VM

https://e-vpn.io/fal
EVPN – IRB in Network Fabric
Intra-subnet
Forwarding

Inter-subnet
Forwarding
SP1 SP2

BVI BVI BVI BVI

GW GW GW GW

L1 L2 L3 L4

C1 C2 C3 C4
VM VM VM VM

https://e-vpn.io/fal
 EVPN-VPWS
• Benefits of EVPN applied to point-to-point services
• No signaling of PWs. Instead signals MP2P LSPs instead
(ala L3VPN)
• All-active CE multi-homing (per-flow LB) PE2 PE4
• Single-active CE multi-homing (per-service LB)
CE1 MPLS CE2
• Relies on a sub-set of EVPN routes to advertise
Ethernet Segment and AC reachability PE1 PE3
• PE discovery & signaling via a single protocol – BGP
• Per-EVI Ethernet Auto-Discovery route

https://e-vpn.io/fal
EVPN – Flexible Cross-Connect Service
Challenge:
How to bring multiple access services from different sources using a single EVPN E-LINE tunnel?

A1
CE1 CE1
A1
EVPN
CE2 PE
CE2 MPLS PE Forwarder
MUX
A2 CEn DEMUX
CEn

Normalized VLAN
VLAN translation over unique tunnel

https://e-vpn.io/fal 16
BGP Layer3 Interconnect
Principles
• DCI/BL provides Layer3 Interconnect
• DCI/BL participates in L3 Routing, but not in L2 Bridging
• DCI/BL summarization is required/recommended

IRB
L4 X.X.X.H2/24

H2

Z.Z.Z.CE1/24 DCI2 SP2 L3 IRB

CE1
PE/DCI
3
CORE CO
IRB
L2
DCI1 SP1
H1

X.X.X.H1/24
L1 IRB

https://e-vpn.io/fal
BGP Layer3 Interconnect
Control Plane
BGP - L3VPN VPNv4/6 BGP - L3VPN VPNv4/6 Option #1 – VPNv4/6 & VPNv4/6
BGP – EVPN L3 BGP – EVPN L3
Option #2 – EVPN & EVPN
BGP - L3VPN VPNv4/6 BGP – EVPN L3
Option #3 – VPNv4/6 & EVPN

IRB
L4 X.X.X.H2/24

H2

Z.Z.Z.CE1/24 DCI2 SP2 L3 IRB

CE1
PE/DCI
3
CORE CO
IRB
L2
DCI1 SP1
H1

X.X.X.H1/24
L1 IRB

https://e-vpn.io/fal
EVPN E-TREE

• Based on EVPN-ETREE (RFC8317)

SP SP
• Extended to support IRB

• Leaf / Root assignment per EVI

L3
L L L --
L
L2

CE CE CE
VM VM VM

https://e-vpn.io/fal 19
EVPN – Native Multicast in the Network Fabric
Source

BL BL
PIM State sync
in EVPN
SP SP

L3
mcast ---
L2 L L L L
evpn EVI-x
IGMP Join / Leave
EVI-y
C C
IRB
Receiver Receiver

https://e-vpn.io/fal 20
EVPN – Service Unification A
Access

P/PE
Pre-Agg

P/PE
Aggregation

P/PE
Core

PE

CE

More… A P/PE P/PE P/PE PE

Multicast
DCI
Head-End
ETREE Far Edge Edge Regional Central
FXC
VPWS
Routing
IRB
Bridging

Network
Service
Fabric SP SP

PE PE L L

s.switch

https://e-vpn.io/fal
A vm vm
21
EVPN – RFCs/Drafts
RFC 7432
EVPN

P2P Multipoint

EVPN-VPWS

RFC 8214

EVPN EVPN-IRB
RFC 7432

draft-ietf-bess-evpn-inter-subnet-forwarding

https://e-vpn.io/fal
EVPN Interop Highlights
• EVPN VPWS over SR-MPLS (Single-Active / All-Active MH)
• EVPN Integrated Routing and Switching IRB – Symmetric
• EVPN IP Subnet Routing
• EVPN over SR-MPLS (All-active MH with and w/o IRB)
• EVPN-VxLAN to EVPN-MPLS interworking
• EVPN MAC Mobility over SR-MPLS
• EVPN Flexible Cross-Connect (FXC) over SR-MPLS
• EVPN interworking with IPVPN First time Cisco IOS XR test @ EANTC
First time ever test @ EANTC
https://e-vpn.io/fal
EVPN - Stay Up-To-Date
• https://e-vpn.io/

• Upcoming “Flood & Learn” Networking Broadcast: https://e-vpn.io/fal/

https://e-vpn.io/fal