Double-check FRR EVPN/VXLAN Linux flags

jbemmel commented 1 year ago

At https://github.com/FRRouting/frr/pull/12464/files there is a recent FRR PR with some advanced settings suggestions we may want to consider:

   #############################
   ## ip-vrf vrf1 / l3vni 100 ##
   #############################
   ip link add vrf1 type vrf table 1100
   ip link set vrf1 up
   ip link add br100 type bridge
   ip link set br100 master vrf1 addrgenmode none
   ip link set br100 addr aa:bb:cc:00:00:64
   ip link add vni100 type vxlan local 100.64.0.1 dstport 4789 id 100 nolearning
   ip link set vni100 master br100 addrgenmode none
   ip link set vni100 type bridge_slave neigh_suppress on learning off

Note 'addrgenmode' and 'neigh_suppress' for example

ipspace commented 1 year ago

Hey, you're the boss ;) Please fix whatever you feel needs fixing in FRR setup. I decided to use ifupdown2 for Cumulus Linux and never looked into what ip commands one would need.

ipspace commented 1 year ago

@sysoleg: Could you take a look at whether anything needs to be done in FRR VXLAN setup? Thanks a million!

ipspace commented 8 months ago

As nobody else picked this up, I spent a few minutes reading the documentation ;)

addrgenmode specifies what to use in the lower 64 bits of SLAAC-generated IPv6 address. I don't think we care (too much) about that, although it would be fun to test what happens if I connect two IPv6-enabled routers over an FRR VXLAN ;)
neigh_suppress turns on proxy-arp for IPv4 and IPv6. That might make sense for EVPN, but not by default.

Closing this one for the moment -- I might change my opinion once I start creating VXLAN labs using FRR though ;)

ipspace / netlab

Double-check FRR EVPN/VXLAN Linux flags #675