Juniper / vqfx10k-vagrant

Vagrant projects for vQFX10k
Apache License 2.0
136 stars 62 forks source link

Do not use "ingress-node-replication" with VXLAN #31

Closed vincentbernat closed 5 years ago

vincentbernat commented 5 years ago

JTAC advises to not use "ingress-node-replication" when using BGP EVPN VXLAN. "multicast-mode ingress-replication" is enough to achieve the same effect. "ingress-node-replication" will replicate packets to VTEP not advertising the Type 3 route and also incurs a low-level overhead which may exhaust the chipset capacity (on a Broadcom platform for example). Please check with a QFX engineer if needed.

vincentbernat commented 5 years ago

Additional reference:

Retains the QFX10000 switch’s default setting of disabled for ingress node replication for EVPN-VXLAN. With this feature disabled, if a QFX10000 switch that functions as a VTEP receives a BUM packet intended, for example, for a physical server in a VLAN with the VNI of 1001, the VTEP replicates and sends the packet only to VTEPs on which the VNI of 1001 is configured. If this feature is enabled, the VTEP replicates and sends this packet to all VTEPs in its database, including those that do not have VNI 1001 configured. To prevent a VTEP from needlessly flooding BUM traffic throughout an EVPN-VXLAN overlay network, we strongly recommend that if not already disabled, you disable ingress node replication on each of the leaf devices by specifying the delete vlans vlan-name vxlan ingress-node-replication command.