Network Packet Broker Http Network Sniffer VXLAN Header Stripping VXLAN Forwarding

Network Packet Broker Http Network Sniffer VXLAN Header Stripping VXLAN Forwarding

VXLAN Gateway

VXLAN gateways facilitate communication among Virtual Machines (VMs) across various modes: VMs under the same Virtual Network Identifier (VNI), cross-network access across different VNIs, and interaction between VXLAN and non-VXLAN users. These gateways exist in two-layer and three-layer forms.

Two-layer Gateway
Workflow involves Broadcast, Unknown Unicast, and Multicast (BUM) forwarding and VXLAN unicast forwarding.

Process includes:

1. Switch_1: Identifies broadcast domain, checks MAC type:

• BUM MAC: Broadcast in domain (2).
• Known single broadcast: Proceeds with forwarding.

2. VTEP on Switch_1: Copies header, encapsulates VXLAN based on tunnel list, forwards.

3. VTEP on Switch_2/3: Validates packet, obtains broadcast domain, unseals VXLAN, checks

MAC type:

• BUM MAC: Broadcast processing.
• Native MAC: Processes; else, proceeds (4).

4. Switch_2/3: Adds VLAN, forwards to respective terminal.

Known Unicast Forwarding:
Workflow comprises known unicast MAC forwarding:

1. Switch_1: Identifies domain, checks MAC type:

Known unicast MAC: Proceeds if native; else, proceeds (2).
Others: Broadcasts in domain (2).
2. VTEP on Switch_1: Encapsulates, forwards.

3. VTEP on Switch_2: Validates packet, obtains broadcast domain, unseals VXLAN, checks
MAC type:

• Known single broadcast MAC: Proceeds (4).
• Native MAC: Processes; else, BUM process.

4. Switch_2: Adds VLAN, forwards to terminal.

VLAN Comparing VxLAN

Three Layers Gateway

Communication between vxlans of different network segments, and communication between vxlans and non-vxlans, need to be realized through IP routing.

BD was created on the three-layer gateway, and the VNI was mapped to BD in a 1:1 manner. BDIF interface was created based on BD, and the IP address was configured through the BDIF interface to realize the communication between vxlans of different network segments, as well as between VXLAN and non-vxlan.

The BDIF interface is similar to the VLANIF interface.

Three Layers Gateway Classification

L3 gateway is divided into centralized gateway and distributed gateway.

Centralized Gateway All network gateways are centrally deployed on a single device, and all cross-network access flows need to go through a centralized gateway.North-south/east-west traffic needs to go through the gateway, and local cross-subnet traffic is forwarded through the centralized gateway, with traffic detour.
Distributed Gateway Cross-subnet traffic is also the optimal path forwarding, only north-south flow pressure, no east-west flow pressure.In a typical spin-leaf networking deployment, gateways can be distributed across all leaf nodes to solve the problem of centralized gateways.

Recommend Network Packet Broker for VXLAN Header Stripping in Original Packet and Metadata

NT-FTAP-32QCX Network TAP NPB.pdf

NetTAP® (Full named Chengdu Shuwei Communication Technology Co., Ltd.)was established in 2007. Focusing on the Research and Development of Network TAPs/NPBs Communication Equipment, Data Security Analysis Equipment, which provides products and solutions in Big Data Acquisition, Data Storage, Data Monitoring, Data Processing and Data Analysis for Telecom, TV Broadcasting, Government, Education, IT, Finance, Bank, Hospital, Transportation, Energy, Power, Petroleum, Enterprise and other industries.

NetTAP® has launched various types of high-density devices such as: Fast Gigabit, 10 Gigabit Ethernet Network Traffic Replication, Aggregation, Distribution Network TAPs/NPBs (Network Packet Broker), intelligent Hybrid Traffic Network TAPs, 25G, 40G, 100G, etc. high density and Performance Network TAPs/NPBs(Network Packet Broker).

NetTAP® has a hardware production plant, all the communication products have complete Software and Hardware Independent Intellectual Property Rights, with complete Copyright Registration and Product Certification.

MATRIX NetInsight™ - A Fully Function Network Visibility Control Platform

MATRIX NetInsight™ Network System Value

1- Data Acquisition with centralized planning, eliminate monitoring blind spot

2- Free distribution of data, saving analysis of the overall investment

3- Data Security Control, Reduce the risk of disclosure

4- Overall Traffic visible, Abnormal Located more accurate, Fault analysis more useful

MATRIX NetInsight™ Function Architecture

1- User Interaction Layer

2- Big Data Analysis Layer

3- Data Storage Layer

4- Analysis Visibility Layer

5- Data Acquisition Layer

                                                                                       Zain Cloud Project of Saudi Arabia Telecom