EVPN-Applications.pdf
- 1. EVPN Solutions/Applications for DC & SP Segments Ali Sajassi Distinguished Engineer, Cisco System MPLS Japan 2015, Nov 9
- 2. © 2014 Cisco and/or its affiliates. All rights reserved. BRKMPL-2333 Cisco Public 2006 2008 2010 2012 2014/2015 - Started the project OPEN at Cisco - OPEN = Optimum Ethernet Network - Introduced to IETF as Routed-VPLS - Merged with Juniper’s MAC-VPN and was introduced an EVPN Following drafts were introduced: - EVPN - IPBB-EVPN - EVPN-VPWS - EVPN-Overlay - EVPN-ETREE Following drafts were introduced - EVPN IRB - EVPN DCI Enhancements - Virtual ES - Optimized ingress replication - IGMP aggregation between PODs - mcast tunnels between DCs - Inter-AS for IRB - L3VPN multi-homing
- 3. © 2014 Cisco and/or its affiliates. All rights reserved. BRKMPL-2333 Cisco Public Challenges with Legacy VPN (VPLS) • Next generation VPN solution need to have – Extensive multi-homing capabilities – Per-flow load-balancing in the core and access with DF election and loop prevention – Fast convergence upon failure • Existing VPLS solutions do not offer an All- Active per-flow redundancy • Looping of Traffic Flooded from PE • Duplicate Frames from Floods from the Core • MAC Flip-Flopping over Pseudowire – E.g. Port-Channel Load-Balancing does not produce a consistent hash-value for a frame with the same source MAC (e.g. non MAC based Hash-Schemes) 3 PE1 PE2 PE3 PE4 CE1 CE2 Echo ! PE1 PE2 PE3 PE4 CE1 CE2Duplicate ! M1 M1 M2 PE1 PE2 PE3 PE4 CE1 CE2 MAC Flip-Flop M1 M2
- 4. © 2014 Cisco and/or its affiliates. All rights reserved. BRKMPL-2333 Cisco Public What is EVPN ? EVPN is next generation all-in-one VPN solution 4 E-LAN (MP2MP L2VPN) E-LINE (P2P L2VPN) E-TREE (P2MP L2VPN) L3VPN EVPN VPWS PBB- EVPN EVPN DC Fabric (IntraDC Overlay) IRB (L2/L3 Overlay) DCI (InterDC) EVPN- IRB EVPN- Overlay EVPN- L3VPN EVPN ETREE EVPN- DCI VPLS PW 4364 VPLS- ETREE
- 5. © 2014 Cisco and/or its affiliates. All rights reserved. BRKMPL-2333 Cisco Public Service Additional Capabilities E-LAN • Provides All-Active multi-homing • Prevents loop for both all-active & single-active even in transient state • Ability to do per-flow LB & DF E-Line • Both single-segment & multi-segment support • Discovery & signaling via single protocol – BGP • All-active & single-active redundancy support E-TREE • Ingress filtering for traffic destined to egress leaf sites Not only a single technology/solution does the job of many existing solutions but it does it better! PBB- EVPN EVPN VPWS EVPN ETREE
- 6. © 2014 Cisco and/or its affiliates. All rights reserved. BRKMPL-2333 Cisco Public Service Features DC-Fabric (IntraDC Overlay) • Geo-redundancy & VM mobility support • ARP suppression & ARP proxy • Support for different encaps such as VxLAN, NVGRE, MPLS, MPLSoUDP • Extensive multi-homing support • Extensive load-balancing capabilities IRB • both L2 & L3 (on a per flow) for a given VLAN/tenant • L3 only mode when needed • Inherent support for anycast GW DCI (InterDC) • Support for any kind of access technology such as EVPN Overlay (VxLAN), Native Ethernet, TRILL, 802.1Qbp, MPLS • Seamless interop with IP-VPN (RFC4364) New Applications & Solutions EVPN- Overlay EVPN- DCI EVPN- IRB
- 7. © 2014 Cisco and/or its affiliates. All rights reserved. BRKMPL-2333 Cisco Public Service IETF drafts E-LAN • RFC7209 – draft-ietf-l2vpn-evpn-req • RFC 7432 - draft-ietf-l2vpn-evpn • RFC 7623 - draft-ietf-l2vpn-pbb-evpn • draft-ietf-bess-evpn-vpls-seamless-integ • draft-rbadan-bess-evpn-optimized-ir • drft-mohanty-bess-evpn-df-election • draft-sajassi-bess-evpn-igmp-mld-proxy • Draft-sajassi-bess-pbb-evpn-anycast-ip-tunnel E-Line • draft-ietf-bess-evpn-vpws • draft-boutros-bess-evpn-service-edge-gw E-TREE • draft-bess-l2vpn-evpn-etree EVPN/ PBB- EVPN EVPN- VPWS EVPN- ETREE
- 8. © 2014 Cisco and/or its affiliates. All rights reserved. BRKMPL-2333 Cisco Public Service IETF drafts DC-Fabric (IntraDC Overlay) • draft-ietf-bess-evpn-overlay IRB • draft-bess-l2vpn-evpn-inter-subnet-forwarding • draft-bess-l2vpn-evpn-prefix-advertisement DCI (InterDC) • draft-sajassi-l2vpn-evpn-ipvpn-interop • draft-ietf-l2vpn-trill-evpn • Draft-ietf-l2vpn-spb-evpn • draft-boutros-l2vpn-vxlan-evpn L3VPN • draft-sajassi-evpn-l3vpn-multihoming EVPN- Overlay EVPN- DCI EVPN- IRB EVPN- L3VPN
- 9. SP Applications 9 E-LAN (MP2MP L2VPN) E-LINE (P2P L2VPN) E-TREE (P2MP L2VPN) L3VPN EVPN VPWS PBB- EVPN EVPN EVPN- L3VPN EVPN ETREE VPLS PW 4364 VPLS- ETREE
- 10. © 2014 Cisco and/or its affiliates. All rights reserved. BRKMPL-2333 Cisco Public EVPN - Highlights • Next generation solution for Ethernet multipoint (E-LAN) services • PEs run Multi-Protocol BGP to advertise & learn Customer MAC addresses (C-MACs) over Core – Same operational principles of L3VPN • Learning on PE Access Circuits via data-plane transparent learning • No pseudowire full-mesh required – Unicast: use MP2P tunnels – Multicast: use ingress replication over MP2P tunnels or use LSM • Provides – Extensive multi-homing capabilities – Per-flow load-balancing in the core and access with DF election and loop prevention – Fast convergence upon failure • Multi-vendor Solution – RFC 7432 MPLS PE1 CE1 PE2 PE3 CE3 PE4 VID 100 SMAC: M1 DMAC: F.F.F BGP MAC adv. Route EVPN NLRI MAC M1 via PE1 Data-plane address learning from Access Control-plane address advertisement / learning over Core C-MAC: M2 C-MAC: M1 10
- 11. © 2014 Cisco and/or its affiliates. All rights reserved. BRKMPL-2333 Cisco Public PBB -EVPN • Next generation solution for Ethernet multipoint (E-LAN) services by combining Provider Backbone Bridging (PBB - IEEE 802.1ah) and Ethernet VPN • Data-plane learning of local C-MACs and remote C-MAC to B-MAC binding • PEs run Multi-Protocol BGP to advertise local Backbone MAC addresses (B-MACs) & learn remote B-MACs – Takes advantage of PBB encapsulation to simplify BGP control plane operation – faster convergence – Lowers BGP resource usage (CPU, memory) on deployed infrastructure (PEs and RRs) – Scales for very large number of MACs • Multi-vendor solution – RFC 7623 Highlights MPLS PE1 CE1 PE2 PE3 CE3 PE4 B-MAC: B-M1 B-M2 B-M2 BGP MAC adv. Route EVPN NLRI MAC B-M1 via PE2 B-MAC: B-M1 Control-plane address advertisement / learning over Core (B- MAC) Data-plane address learning from Access • Local C-MAC to local B- MAC binding Data-plane address learning from Core • Remote C-MAC to remote B-MAC binding PBB Backbone Edge Bridge EVPN PBB-EVPN PE C-MAC: MB C-MAC: MA 11
- 12. © 2014 Cisco and/or its affiliates. All rights reserved. BRKMPL-2333 Cisco Public When to use PBB-EVPN? • For SP & DCI applications where E2E L2 services needed • Lower control-plane overhead than EVPN alone – PBB-EVPN uses only a sub-set of EVPN routes – Simpler and Faster failure convergence for all- active multi-homing scenarios – Faster MAC move convergence handled in data-plane • Lower control-plane scale requirements than EVPN alone – BGP MAC advertisements for smaller Backbone MAC (B-MAC) address space – Requires less resources (CPU, memory) on deployed infrastructure (PEs / RRs) PBB- EVPN 12
- 13. © 2014 Cisco and/or its affiliates. All rights reserved. BRKMPL-2333 Cisco Public Comparison of L2VPN Solutions 13 Requirement VPLS PBB-VPLS EVPN PBB-EVPN Provisioning Simplicity Core Auto-Discovery ✔ ✔ ✔ ✔ Access Auto-Sensing !" ! ✔ ✔ Redundancy Group Auto-Discovery !" ! ✔ ✔ Automatic Designated Forwarder election and Service Carving !" ! ✔ ✔ Multi-Homing with All-Active Forwarding Service Based Load-balancing CE-to-PE ✔ ✔ ✔ ✔ Flow Based Load-balancing CE-to-PE !" ! ✔ ✔ Flow Based Load-balancing PE-to-PE !" ! ✔ ✔ Flow Based Multi-Pathing in the Core ✔ ✔ ✔ ✔ Service Interfaces Port-Based / VLAN-based / VLAN Bundling ✔ ✔ ✔ ✔ VLAN-aware Bundling !" ! ✔ ✔ Multi-Destination Traffic Forwarding Ingress Replication ✔ ✔ ✔ ✔ LSM with P2MP Tree ✔ ✔ ✔ ✔ LSM with MP2MP Tree !" ! ✔ ✔
- 14. © 2014 Cisco and/or its affiliates. All rights reserved. BRKMPL-2333 Cisco Public Comparison of L2VPN Solutions (cont.) 14 Requirement VPLS PBB-VPLS EVPN PBB-EVPN Fast Convergence CE-PE Link Failures / PE Node Failures ✔ ✔ ✔ ✔ MAC Mobility ✔ ✔ ✔ ✔ CE-PE Link Failures with Local Repair !" ! ✔ ✔ MAC Scalability Scale to Millions of C-MAC Addresses ! ✔ ! ✔ Confinement of C-MAC entries to PE with active flows ✔ ✔ ! ✔ MAC Summarization ! ! ✔ ✔ MAC Summarization co-existence with C-MAC Mobility ! ! ! ✔ Flexible VPN Policies Per C-MAC Forwarding Control Policies ! ! ✔ ! Per-Segment Forwarding Control Policies ! ! ✔ ✔
- 15. © 2014 Cisco and/or its affiliates. All rights reserved. BRKMPL-2333 Cisco Public EVPN VPWS: All-Active Operation 15 MPLS PE1 CE1 PE3 CE2 PE 1 Eth A-D Route RD = RD-1a ESI = ES1 Eth.Tag ID = VPWS-ID A Label (e.g. X) RT ext. community RT-a PE 3 Eth A-D Route RD = RD-2a ESI = ES2 Eth.Tag ID = VPWS-ID A Label (e.g. Y) RT ext. community RT-a PE1 & PE2 RIB VPN MAC ESI Eth.TAG RT-a - - AC2 Path List NH PE3 ES1 ES2 RT – RT associated with a given EVI RD – RD unique per adv. PE per EVI MPLS Label – (downstream assigned) used by remote PEs to reach segment ESI – 10 bytes ESI as specify by EVPN Ethernet segment IETF draft VPWS Service Config: EVI = 100 Local AC ID = AC1 VPWS ID = A VPWS Service Config: EVI = 100 Local AC ID = AC2 VPWS ID = A 1 ES2 – Since CE2 is single homed to PE2, ES2 = 0 Eth.Tag ID – 4-bytes local AC-ID 2 3 4 5 PE2 ES1 VPWS Service Config: EVI = 100 Local AC ID = AC1 VPWS ID = A PE3 RIB VPN MAC ESI Eth.TAG RT-a - ES1 A RT-a - ES1 A RT-a - ES1 A Path List NH PE1 PE2 PE1,PE2 6 • Both single-segment & multi- segment support • Discovery & signaling via single protocol – BGP • All-active & single-active redundancy support
- 16. © 2014 Cisco and/or its affiliates. All rights reserved. BRKMPL-2333 Cisco Public EVPN-VPWS: Service Edge GW 1. Discovery among S-PEs per EVPN/IP-VPN service needing VPWS 2. Origination of single-side signaling by an A-PE for a given VPWS service (identified by the 24-bit Ethernet tag) 3. DF election by S-PEs for Active/Backup 4. Active & Backup S-PEs responding to the single-sided signaling of step (2) 5. Binding of two halves of the EVC (or IPVC) by the A-PE upon receiving the response in step (3) & setting up backup EVC IP/MPLS Access IP/MPLS Core A-PE S-PE CE EVPN VPWS EVPN or IP-VPN 1 2 3 4 5
- 17. © 2014 Cisco and/or its affiliates. All rights reserved. BRKMPL-2333 Cisco Public EVPN-ETREE (L) (L) (L) (R) (L) (L) (R) (R) (L) PE-1 PE-2 PE-3 PE-4 (L) (L) EVI MPLS/IP Core EVPN-ETREE provides ingress filtering for traffic destined to egress leaf sites !!
- 18. © 2014 Cisco and/or its affiliates. All rights reserved. BRKMPL-2333 Cisco Public • Req: Single-BGP session from CPE with fast switchover and min. traffic disruption during failure • Solution has three components: 1. PIC functionality for fast switchover at PEr devices 2. Synch up of ARP cache and VRF tables on all PEs in the redundancy group 3. BGP GR with non-stop forwarding between CPE and PEs in the redundancy group PE1 PE2 PE4 PE3 MPLS/IP Core IP-VRF foo IP-VRF foo IP-VRF foo IP-VRF foo PEr IP-VRF foo PEr IP-VRF foo RR A-PE CPE Interface Ether25 mode Single-Active Interface Ether25.1 vrf forwarding vrf-foo ipv4 address 10.0.0.11 255.255.255.0 mac-address aaa.bbb.ccc
- 20. © 2014 Cisco and/or its affiliates. All rights reserved. BRKMPL-2333 Cisco Public H1 VTEP IP-H1 VNI 100 BGP RR VTEP H2 IP-H2 VNI 100 Data Center East : BGP AS #100 Data Center West: BGP AS #200 BGP RR eBGP VXLAN Packet: … … • Layer-2 multi-tenacy • Geo-redundancy & seamless VM mobility support • ARP suppression & ARP proxy • Support large scale VMs & policy control N7K N9K Aggregation Access Two DCs are directly connected at the Agg. eVPN Routes exchanged via eBGP • Support for different encaps such as VxLAN, NVGRE, MPLS, MPLSoUDP • Extensive multi-homing support • Extensive load-balancing capabilities
- 21. © 2014 Cisco and/or its affiliates. All rights reserved. BRKMPL-2333 Cisco Public # 1 TOR NX 2K NX 2K NX 2K NX 2K NX 2K # 2 # 40 DC Core WAN-Edge PE ToR • Multi-tenancy for L2 & L3 • LB (on a per flow) for a given VLAN/ tenant • Inherent support for anycast GW • ARP suppression • L3 only mode when needed Distributed Anycast Gateway ToR EVPN-IRB
- 22. © 2014 Cisco and/or its affiliates. All rights reserved. BRKMPL-2333 Cisco Public 22 Client Leaf/ Access Leaf/ Access Leaf/ Access Leaf/ Access DC1 DC2 Aggrega.on Layer MPLS- EVPN MPLS- L3VPN WAN DCI/WAN ASR9K/N7K • Seamless interop with IP-VPN (RFC4364) • Support for any kind of access technology such as EVPN Overlay (VxLAN), Native Ethernet, TRILL, 802.1Qbp, MPLS EVPN-DCI
- 23. © 2014 Cisco and/or its affiliates. All rights reserved. BRKMPL-2333 Cisco Public IGMP/MLD Proxy Leaf A1 Leaf A2 Leaf A3 Spine Spine Border Leaf G3 G1, G2, G3 Border Leaf Leaf B1 Leaf B2 Spine Spine Leaf B3 G2 G1 G1 G3 G3 BGP EVPN selective multicast Route: G1, G2, G3 IGMP Reports IGMP Report POD-A POD-B G1 G2 G3 Multicast Router