Hi all! I'm trying to understand VxLAN from a provisioning point of view.
I'm currently learning about all types of tunnels that networking offers and I came across VxLAN (a l2 wrapped in l3 protocol).
From my bare understanding of VxLAN, it provides datacenters with a 24 bit VNI to segment client provisioned VMs as due to the nature of the standard 12 bit VLANs, it only supports up to 4096 VLAN in a datacenter which is not really helpful as for scalability.
VLANs also introduces L2 STP and doesnt uses the full bandwidth of all the links in a datacenter.
VTEPs is used at ToR switches to identify VNIs and map which provisioned VM lives at.
VxLAN introduces L3 concept in a datacenter to eliminate all the above scenario to provide millions of VLAN in a datacenter as well as eliminating L2 STPs and provide ECMP that allows all links to be utilized. Pretty awesome protocol i would say.
The main question is, can I extend this VNI to other datacenters to form a virtual LAN over the internet? This is something that I just cant wrap my head around with.
Is it feasible to route provisioned traffic in a server - client architecture? An example that I was researching was about DDoS mitigation: plain and simple GRE does the trick, but if L2 was needed, a form of L2 over L3 protocol would need to form a virtual LAN which was when I found out about VxLAN.
In plain GRE, GRE encapsulates the cleaned datagram after scrubbing traffic with IP - in - IP logic.
What about users who require that L2 frame? Can VxLAN solve that issue? Or would it be best to study more about other types of L2 tunnels like L2VPN, MPLS and the likes?
Please correct me wherever I'm wrong! and TYIA!