EVPN + VxLAN

EVPN-VXLAN is a modern network overlay technology that combines Ethernet VPN (EVPN) with Virtual Extensible LAN (VXLAN) to deliver scalable, flexible, and efficient Layer 2 and Layer 3 connectivity across data centers and cloud environments. It’s the foundation for building next-generation data center fabrics, enabling seamless multi-tenancy, workload mobility, and network segmentation across large-scale infrastructures.

By decoupling the physical network from the logical topology, EVPN-VXLAN allows operators to design agile, programmable, and highly resilient architectures that are ideal for cloud-native applications, virtualization, and hybrid cloud deployments.

Key Benefits of EVPN-VxLAN

Enable seamless connectivity and security across your enterprise with VyOS EVPN-VxLAN

scalability

Scalability

Supports massive growth in tenants and endpoints using VXLAN’s 24-bit VNIs, far exceeding traditional VLAN limits.

multitenancy

Multi-Tenancy

Isolates traffic for different customers or applications, ensuring secure segmentation in shared infrastructures.

layers_connectivity

Layer 2 and Layer 3 Connectivity

Offers integrated support for both L2 bridging and L3 routing services across distributed environments.

Efficient

Efficient MAC Learning

Uses control-plane-based MAC distribution (via BGP EVPN), avoiding flooding and reducing unnecessary traffic.

mobility-and-flexibility.

Mobility and Flexibility

Enables seamless VM or container mobility across data centers without breaking network sessions.

high-availability

Resilient and Redundant

Supports active-active multihoming and fast convergence for high availability.

secure_cloud

Cloud-Ready

Ideal for SDN and cloud environments, with native support for automation, programmability, and service chaining.

How EVPN-VxLAN Works

EVPN-VXLAN overlays a virtual network on top of an IP-based underlay. VXLAN encapsulates Ethernet frames into UDP packets, enabling Layer 2 networks to be extended over Layer 3 infrastructures. Each VXLAN segment is identified by a VXLAN Network Identifier (VNI), allowing isolation between tenants or services.

The EVPN control plane, based on BGP, distributes MAC address and IP-to-MAC mapping information between network devices (usually called VXLAN Tunnel Endpoints or VTEPs). This eliminates the need for traditional flooding and learning methods, making the network more efficient and deterministic.

VTEPs encapsulate and de-encapsulate VXLAN traffic, ensuring traffic is sent only to the intended recipients. With EVPN, the network can support advanced features like IRB (Integrated Routing and Bridging), ARP suppression, and active-active multihoming, bringing cloud-scale networking capabilities to enterprise and service provider environments.

Cloud-ready data centers with EVPN+VXLAN

DatasheetDownload Solution Brief
EVPN-VXLAN Architecture Diagram

EVPN-VxLAN for Data Centers

evpn-vxlan_data

Key Benefits of EVPN-VxLAN

EVPN-VXLAN has become the de facto standard for building scalable, agile, and cloud-ready data center fabrics. It addresses the limitations of traditional Layer 2 networks and provides a robust foundation for multi-tenant architectures, workload mobility, and automation-driven operations.

scale

Scalable Layer 2 Over Layer 3 Fabric

By decoupling Layer 2 connectivity from the physical topology, EVPN-VXLAN enables seamless extension of broadcast domains over a Layer 3 underlay. This supports scalable east-west traffic patterns without compromising performance or manageability.

merge

Massive Multi-Tenancy Support

Using VXLAN Network Identifiers (VNIs) and EVPN route types, data centers can support thousands of isolated tenants or services within a single fabric—ideal for service providers, cloud operators, and large enterprises.

Workload Mobility and Elasticity

Workload Mobility and Elasticity

EVPN-VXLAN enables VMs, containers, and services to move freely across racks or sites without changing IP addresses. This ensures business continuity and simplifies disaster recovery and active-active site designs.

Integrated Layer 2 and Layer 3 Services

Integrated Layer 2 and Layer 3 Services

With Integrated Routing and Bridging (IRB), EVPN-VXLAN provides efficient L2 and L3 connectivity at the network edge, reducing latency and simplifying network design while maintaining optimal traffic flow.

sorting

Optimized Traffic Handling

EVPN’s control-plane-based MAC and ARP learning eliminates the need for flooding, improving bandwidth efficiency and lowering CPU usage on switches.

globe

High Availability and Resilience

With native support for active-active multihoming, fast convergence, and loop prevention, EVPN-VXLAN ensures data center services remain uninterrupted and resilient to failures or link changes.

settings

Automation and SDN Readiness

Designed for modern infrastructure, EVPN-VXLAN integrates easily with network automation tools (like Ansible, Terraform) and SDN controllers, streamlining provisioning and reducing operational errors.

cloud-dots

Seamless Hybrid and Multi-Cloud Connectivity

By extending overlay networks across physical and virtual environments, EVPN-VXLAN simplifies the integration between private data centers and public clouds—accelerating hybrid cloud adoption.

EVPN-VxLAN vs. Traditional Data Center Networks

Feature

Traditional L2/L3 Network

EVPN-VxLAN Fabric

Scalability

Limited to ~4K VLANs

Supports 16 million VNIs

Layer 2 Extension

Spanning Tree Protocol (STP), prone to loops

VXLAN tunnels with loop-free Layer 3 underlay

Traffic Learning

Flood-and-learn

Control-plane-based MAC learning (BGP EVPN)

Multitenancy

Complex with VRFs and VLANs

Simplified with EVPN route types and VNIs

Workload Mobility

Limited, breaks L3 session continuity

Seamless with distributed gateways

High Availability

Active/standby links, slower convergence

Active/active multihoming, fast convergence

Automation

Manual, CLI-driven

Fully automatable with SDN and IaC tools

Hybrid Cloud Integration

Manual setup, limited flexibility

Native overlay extension into cloud


Datasheet
Datasheet

Want to learn more about VyOS Technical Capabilities?

Download the Technical Datasheet

DatasheetDatasheetDatasheetTechnical DatasheetDatasheet

Guide icon

L2VPN EVPN VXLAN Deployment Guide.

View Guide
Guide icon

L3VPN EVPN VXLAN Deployment Guide

View Guide

Resources

Here are some resources to help you learn more about VyOS, keep up with the development, and participate in it.

Book a Complimentary Consultation Today

GET FREE TRIAL TODAY

Still not 100% sure about VyOS? Give it a shot and let the hands-on experience speak for itself!