Network Architecture

Deploying Firewalls With Routing

Table Of Content

Introduction State-tracking firewall devices are commonly deployed at the border of data centers, office networks, and other corporate environments where precious IP needs to be kept out of the hands of others.  My opinion of these firewall devices is that they should be avoided at all costs, and I’ll get into that later.  Sometimes we’re forced to deploy things…

Continue Reading

Network Architecture

EVPN and VXLAN on Cumulus

Table Of Content

Introduction and Purpose Introduction Almost three years ago, I wrote this long and detailed post about building a VXLAN-enabled virtual lab on a KVM hypervisor, using Arista’s vEOS image.  Prior to that, I also wrote up this post regarding the ideas around using VXLAN for spanning L2 across an L3 infrastructure.  In the second post, I wrote about the…

Continue Reading

Network Architecture

VXLAN Configuration and Deployment

Table Of Content

In my VXLAN: Providing Ponies for Bad System Designers entry, I discussed using an L2 overlay technology such as VXLAN to provide virtually spanned L2 VLANs over an L3 infrastructure.  In this document, I’ll show via diagrams and config snippets how to build a poorly-designed network and why it’s a problem.  Then I’ll use VXLAN to build a similar…

Continue Reading