top | item 46609670

(no title)

iscoelho | 1 month ago

EVPN/VXLAN fabrics are becoming industry standard for new deployments. MACSEC/IPsec is industry standard for site-to-site.

You'd be surprised to know that this is especially popular in cloud! It's just abstracted away (:

discuss

order

wmf|1 month ago

EVPN/VXLAN fabrics are becoming cargo culted. In most cases they aren't needed.

q3k|1 month ago

Agreed. They've also been extremely finnicky from my experience - had cases where large EVPN deployments just blackholed some arbitrary destination MAC until GARPs were sent out of them.

Also IME EVPN is mostly deployed/pushed when clueless app developers expect to have arbitrary L2 reachability across any two points in a (cross DC!) fabric [1], or when they want IP addresses that can follow them around the DC or other dumb shit that they just assumed they can do.

[1] "What do you mean I can't just use UDP broadcast as a pub sub in my application? It works in the office, fix your network!" and the like.

iscoelho|1 month ago

I don't disagree (:

Though there are definitely use cases where it is needed, and it is way easier to implement earlier than later.