EVPN - Ethernet VPN (2024)

Introduction:

Ethernet Virtual Private Network (EVPN) is an advanced and efficient way of extending layer 2 and layer 3 connectivity across different networks. It is used in data center environments, cloud computing, and service provider networks.

In this article, we will explore EVPN, its benefits, how it works, and its use cases.

What is EVPN?

EVPN is a network technology that provides a way to extend layer 2 and layer 3 connectivity across different networks. It is based on the BGP protocol and uses a new address family, the Ethernet VPN (EVPN) address family, to advertise MAC addresses and IP prefixes.

EVPN can be used in a wide range of network scenarios, including data center networks, service provider networks, and cloud computing environments.

Benefits of EVPN:

EVPN offers several benefits over traditional layer 2 and layer 3 VPN technologies. These benefits include:

  1. Scalability: EVPN can scale to support large numbers of endpoints and can be used to provide connectivity across multiple data centers or cloud environments.

  2. Efficient use of network resources: EVPN uses a single control plane, which reduces the amount of overhead required to manage the network and enables more efficient use of network resources.

  3. Fast convergence: EVPN supports fast convergence times, which is critical in environments where high availability is required.

  4. Easy configuration: EVPN is easy to configure, especially when compared to traditional layer 2 and layer 3 VPN technologies.

  5. Support for layer 2 and layer 3 connectivity: EVPN provides a way to extend layer 2 and layer 3 connectivity across different networks, enabling organizations to simplify their network infrastructure and reduce costs.

How does EVPN work?

EVPN is based on the BGP protocol and uses a new address family, the Ethernet VPN (EVPN) address family, to advertise MAC addresses and IP prefixes. In EVPN, each endpoint, such as a server or a switch, is assigned a unique MAC address.

These MAC addresses are then advertised across the network using BGP, allowing endpoints to be discovered and located.

EVPN also uses a new type of route, called an Ethernet Segment (ES) route, to advertise information about the endpoints. ES routes carry information about the endpoints, including their MAC addresses, their associated VLANs, and the physical location of the endpoints.

By using ES routes, EVPN provides a way to extend layer 2 connectivity across different networks.

EVPN also supports layer 3 connectivity, which allows organizations to extend IP connectivity across different networks. In EVPN, IP prefixes are advertised using BGP, just like in traditional layer 3 VPNs. However, EVPN provides a more efficient way of advertising IP prefixes by using a new type of route, called an IP Prefix route.

Use cases for EVPN:

EVPN can be used in a wide range of network scenarios, including:

  1. Data center networks: EVPN is well-suited for data center networks, where it can be used to provide layer 2 and layer 3 connectivity between servers, storage devices, and other network resources. EVPN can also be used to provide connectivity between different data centers, allowing organizations to create geographically dispersed data center environments.

  2. Service provider networks: EVPN is ideal for service provider networks, where it can be used to provide layer 2 and layer 3 VPN services to customers. EVPN can be used to provide VPN services across different data centers and cloud environments, enabling service providers to offer highly flexible and scalable VPN services.

  3. Cloud computing environments: EVPN can be used in cloud computing environments to provide layer 2 and layer 3 connectivity between different cloud environments. EVPN can be used to connect different cloud environments, allowing organizations to create hybrid cloud environments that

EVPN vs. VPLS

EVPN (Ethernet Virtual Private Network) and VPLS (Virtual Private LAN Service) are two technologies that are used for extending Layer 2 connectivity between different networks.

While both technologies have similar goals, they differ in their approach and the features they offer. In this article, we will compare EVPN and VPLS and highlight their differences.

EVPN:

EVPN is a technology that uses BGP (Border Gateway Protocol) to extend Layer 2 and Layer 3 connectivity across different networks. EVPN is based on the Ethernet VPN address family, which is used to advertise MAC addresses and IP prefixes.

EVPN uses a single control plane to manage the network, which reduces the overhead required for network management and enables efficient use of network resources.

EVPN provides several benefits over traditional Layer 2 VPN technologies, such as VPLS. EVPN offers efficient use of network resources, fast convergence times, and easy configuration.

Additionally, EVPN supports both Layer 2 and Layer 3 connectivity, which enables organizations to simplify their network infrastructure and reduce costs.

VPLS:

VPLS is a Layer 2 VPN technology that is used to extend Ethernet-based LANs across different networks. VPLS creates a virtual LAN (VLAN) between different sites, which allows Ethernet frames to be transported across the network.

VPLS uses a single control plane to manage the network, which makes it easy to configure and manage.

VPLS provides several benefits over traditional WAN technologies, such as Frame Relay and ATM. VPLS offers efficient use of network resources, easy configuration, and the ability to transport all types of Ethernet traffic, including multicast and broadcast traffic.

Additionally, VPLS provides end-to-end Ethernet connectivity, which enables organizations to extend their LANs across different sites without the need for complex routing configurations.

Comparison:

EVPN and VPLS have similar goals, but they differ in their approach and the features they offer. Here are some of the main differences between EVPN and VPLS:

  1. Control plane: EVPN uses BGP as its control plane, while VPLS uses LDP (Label Distribution Protocol) or RSVP-TE (Resource Reservation Protocol-Traffic Engineering) as its control plane. BGP provides more efficient use of network resources and faster convergence times than LDP or RSVP-TE.

  2. Scalability: EVPN can scale to support large numbers of endpoints, making it suitable for data center networks and cloud computing environments. VPLS can also scale, but it may not be as efficient for large-scale deployments.

  3. Configuration: EVPN is easy to configure, especially when compared to VPLS. EVPN requires minimal configuration, and it can be deployed quickly and easily. VPLS requires more configuration, especially when it comes to managing the control plane.

  4. Layer 3 connectivity: EVPN supports both Layer 2 and Layer 3 connectivity, while VPLS only supports Layer 2 connectivity. This means that EVPN can be used to extend IP connectivity across different networks, which is useful for organizations that need to connect different sites or data centers.

EVPN and VPLS are both technologies that are used for extending Layer 2 connectivity between different networks.

While both technologies have their benefits and drawbacks, EVPN is generally considered to be a more efficient and scalable solution, especially for large-scale deployments.

EVPN offers fast convergence times, efficient use of network resources, and easy configuration, making it a popular choice for data center networks, cloud computing environments, and service provider networks.

VPLS, on the other hand, is a well-established technology that offers easy configuration and the ability to transport all types of Ethernet traffic.

EVPN Services

EVPN (Ethernet Virtual Private Network) is a technology that provides Layer 2 and Layer 3 connectivity between different networks.

EVPN enables organizations to extend their LANs (Local Area Networks) across different sites, data centers, and cloud computing environments.

EVPN offers several services that make it a popular choice for organizations that need to connect different networks. In this article, we will discuss the different EVPN services and their benefits.

  1. Ethernet Services:

EVPN provides several Ethernet services, such as Ethernet over MPLS (Multiprotocol Label Switching), Ethernet over VXLAN (Virtual Extensible LAN), and Ethernet over IP. These services enable organizations to extend their Ethernet-based LANs across different networks, regardless of the underlying network infrastructure.

EVPN also supports different Ethernet service types, such as E-Line and E-LAN, which offer point-to-point and point-to-multipoint connectivity, respectively.

  1. Virtual Private LAN Service (VPLS):

EVPN can also be used to provide VPLS, which is a Layer 2 VPN technology that enables organizations to extend their LANs across different networks. VPLS creates a virtual LAN between different sites, which allows Ethernet frames to be transported across the network.

VPLS is a popular service that is widely used in service provider networks to offer Layer 2 connectivity to their customers.

  1. Multicast Services:

EVPN provides multicast services that enable organizations to transport multicast traffic across different networks. EVPN supports both multicast VPN (MVPN) and ingress replication models for multicast traffic.

MVPN enables organizations to transport multicast traffic across different sites, while ingress replication enables organizations to replicate multicast traffic at the ingress router and send it to the appropriate egress routers.

  1. IP Services:

EVPN supports Layer 3 IP services, such as IP VPN and IP transport. IP VPN enables organizations to extend their IP networks across different networks, while IP transport enables organizations to transport IP traffic across different networks without the need for a VPN.

EVPN also supports different IP service types, such as L3VPN and VRF (Virtual Routing and Forwarding), which enable organizations to isolate their IP networks and control the flow of traffic between them.

  1. Network Virtualization:

EVPN supports network virtualization services, such as Virtual Network Identifier (VNI) and Virtual Routing and Forwarding (VRF). VNI enables organizations to create multiple virtual networks on a single physical network infrastructure, which enables them to isolate different types of traffic and control the flow of traffic between them.

VRF enables organizations to create virtual routers on a single physical router, which enables them to isolate different IP networks and control the flow of traffic between them.

Benefits of EVPN Services:

EVPN services offer several benefits to organizations that need to extend their LANs across different networks. EVPN enables organizations to simplify their network infrastructure, reduce costs, and improve network performance.

EVPN also provides fast convergence times, efficient use of network resources, and easy configuration, which make it a popular choice for data center networks, cloud computing environments, and service provider networks.

Conclusion:

EVPN provides several services that enable organizations to extend their LANs across different networks.

EVPN services include Ethernet services, VPLS, multicast services, IP services, and network virtualization. EVPN services offer several benefits, such as simplified network infrastructure, reduced costs, improved network performance, fast convergence times, efficient use of network resources, and easy configuration.

EVPN is a popular choice for organizations that need to connect different networks, and it is widely used in data center networks, cloud computing environments, and service provider networks.

EVPN - Ethernet VPN (2024)

FAQs

What is the difference between VPN and EVPN? ›

In EVPN, IP prefixes are advertised using BGP, just like in traditional layer 3 VPNs. However, EVPN provides a more efficient way of advertising IP prefixes by using a new type of route, called an IP Prefix route.

What is Ethernet VPN? ›

An Ethernet VPN is a virtual private network using an Ethernet connection, linking multiple sites without using the public internet. They are, essentially, extended local area networks (LANs), often used to connect companies' headquarters, branch locations and data centres.

Why is EVPN better than VPLS? ›

EVPN has some noteworthy benefits over VPLS (be it tLDP or BGP): It provides All-Active multi-homing (and not just dual-homing). Prior to EVPN, different vendors where using proprietary solutions for multi-chassis LAG to provide All-Active dual-homing.

What is l3 VPN vs EVPN? ›

Control plane: Traditional L3VPN uses VPNv4 routes to transmit route information, whereas EVPN L3VPN uses Type 5 routes extended by MP-BGP. EVPN L3VPN unifies the Layer 2 and Layer 3 control planes, simplifying deployment and maintenance.

What is the difference between Ethernet and IP VPN? ›

Global IPVPN offers multi-point transmission, while Global Ethernet delivers point-to- point connectivity around the world. Both products offer service assurance through strict service level agreements (SLAs), a range of bandwidth speeds and increased choice in pricing models.

Is EVPN the same as VXLAN? ›

Ethernet VPN (EVPN) which is used as the overlay control plane and provides virtual connectivity between different layer 2/3 domains over an IP or MPLS network. Virtual extensible LANs (VXLAN), a common network virtualization overlay protocol that expands the layer 2 network address space from 4,000 to 16 million.

Why do we need an EVPN? ›

EVPN, or Ethernet Virtual Private Network, represents a modern full-service bearer VPN solution. It simplifies control planes for various VPN services and uses BGP extensions to transmit Layer 2 or Layer 3 reachability information, effectively separating the forwarding and control planes.

Can you use a VPN through Ethernet? ›

Yes. You can use a VPN while connected via Ethernet/cable. The method of connection does not affect the ability to use a VPN. Whether you are connected via Wi-Fi, Ethernet, or any other type of network, you can still use a VPN to encrypt your traffic and protect your online privacy and security.

What does EVPN stand for? ›

Ethernet VPN (EVPN) is a technology for carrying layer 2 Ethernet traffic as a virtual private network using wide area network protocols. EVPN technologies include Ethernet over MPLS and Ethernet over VXLAN.

Does EVPN use MPLS? ›

You can interconnect different data center networks running Ethernet VPN (EVPN) with Virtual extensible LAN (VXLAN) encapsulation through a WAN running MPLS-based EVPN.

Can you use VXLAN without EVPN? ›

Benefits of Static VXLAN

Instead of using an Ethernet VPN (EVPN) control plane to learn the MAC addresses of hosts, static VXLAN uses a flooding-and-learning technique in the VXLAN data plane. Therefore, using static VXLAN reduces complexity in the control plane.

What are the benefits of Cisco EVPN? ›

EVPN provides the solution for network operators for the following emerging needs in their network:
  • Data center interconnect operation (DCI)
  • Cloud and services virtualization.
  • Remove protocols and network simplification.
  • Integration of L2 and L3 services over the same VPN.
  • Flexible service and workload placement.

What is the strongest type of VPN? ›

In other words, OpenVPN is the most secure protocol. WireGuard uses state-of-the-art cryptography. It doesn't support AES encryption, but it substitutes it with ChaCha20. It's less complex, but still very secure.

Is EVPN encrypted? ›

NGE router interface encryption does not differentiate between EVPN-VXLAN tunnels and other L3 traffic, and therefore encrypts all EVPN-VXLAN traffic that egresses the node.

What are EVPN Type 5 routes? ›

The EVPN type-5 route defined within the IETF draft, provides the ability to decouple the advertisem*nt of an IP prefix from any specific MAC address, providing the ability to support floating IP address, optimize the mechanism for advertising external IP prefixes, and reduce the churn when withdrawing IP prefixes.

What is the difference between BGP and VPN? ›

BGP is handled by the routers that transfer the data from your router to the destination. To configure a VPN you just provide a VPN service and a client. The internet and ISP routers do all the rest.

What is EVPN used for? ›

It is commonly used for interconnecting Layer 2 networks within and between large data centers. EVPN reduces complexity by integrating different control planes. This integration separates the forwarding plane from the control plane, enhancing traffic balance and flexibility in deployment and operation.

What is the difference between a VPN and a proxy service? ›

A proxy server provides traffic source anonymization. It may also support traffic distribution, or potentially scan and check network data packets against predetermined security policies. In contrast, a VPN uses encryption to mask both the IP address and data so it's unreadable by unauthorized users.

Top Articles
Latest Posts
Article information

Author: Delena Feil

Last Updated:

Views: 6150

Rating: 4.4 / 5 (65 voted)

Reviews: 88% of readers found this page helpful

Author information

Name: Delena Feil

Birthday: 1998-08-29

Address: 747 Lubowitz Run, Sidmouth, HI 90646-5543

Phone: +99513241752844

Job: Design Supervisor

Hobby: Digital arts, Lacemaking, Air sports, Running, Scouting, Shooting, Puzzles

Introduction: My name is Delena Feil, I am a clean, splendid, calm, fancy, jolly, bright, faithful person who loves writing and wants to share my knowledge and understanding with you.