4

As we're creating a cluster of tens of KVM host nodes we've chosen openvswitch as our virtual network infrastructure.

So we need to make isolated virtual networks between VMs on demand. I've seen some designs which uses VXLAN or GRE tunnels based on a mesh. But that could lead to thousands of tunnels between host nodes.

Basically we need something like Amazon VPC in our infrastructure. Can VXLAN tunnels provide us with such a service? If yes how about the scalability issue?

Improve this question

1 Answer 1

Reset to default
4

You could solve this by running VXLAN on the hypervisor using software like FRR. That would imply that you run a full mesh BGP setup between your hypervisors, or use route reflectors. Then, you can create as many VNI's between your hypervisors which can be used as VPC's between virtual machines.

We've done this in a test setup and it seems to work, so we're planning on building our new hypervisors platforms this way using VXLAN.

Improve this answer
2
  • That looks like a viable solution but a bit overdo for our setup. I'd really appreciate if you share any detailed open-source info on your test setup that is shareable but I think we need to go with something simpler. Any other simpler solution comes to mind?
    – Amir K
    Commented Dec 17, 2018 at 13:08
  • 1
    vincent.bernat.ch/en/blog/2017-vxlan-bgp-evpn is a nice read on this topic.
    – Teun Vink
    Commented Dec 17, 2018 at 13:52

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.