From mboxrd@z Thu Jan 1 00:00:00 1970 From: David Ahern Subject: Re: [RFC v3 0/3] Add VRF support for VXLAN underlay Date: Tue, 20 Nov 2018 07:48:42 -0700 Message-ID: References: <20181120142317.88277-1-abauvin@scaleway.com> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Cc: netdev@vger.kernel.org, akherbouche@scaleway.com To: Alexis Bauvin , roopa@cumulusnetworks.com Return-path: Received: from mail-pf1-f180.google.com ([209.85.210.180]:34005 "EHLO mail-pf1-f180.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1725899AbeKUBSP (ORCPT ); Tue, 20 Nov 2018 20:18:15 -0500 Received: by mail-pf1-f180.google.com with SMTP id h3so1115756pfg.1 for ; Tue, 20 Nov 2018 06:48:45 -0800 (PST) In-Reply-To: <20181120142317.88277-1-abauvin@scaleway.com> Content-Language: en-US Sender: netdev-owner@vger.kernel.org List-ID: On 11/20/18 7:23 AM, Alexis Bauvin wrote: > We are trying to isolate the VXLAN traffic from different VMs with VRF as shown > in the schemas below: > > +-------------------------+ +----------------------------+ > | +----------+ | | +------------+ | > | | | | | | | | > | | tap-red | | | | tap-blue | | > | | | | | | | | > | +----+-----+ | | +-----+------+ | > | | | | | | > | | | | | | > | +----+---+ | | +----+----+ | > | | | | | | | | > | | br-red | | | | br-blue | | > | | | | | | | | > | +----+---+ | | +----+----+ | > | | | | | | > | | | | | | > | | | | | | > | +----+--------+ | | +--------------+ | > | | | | | | | | > | | vxlan-red | | | | vxlan-blue | | > | | | | | | | | > | +------+------+ | | +-------+------+ | > | | | | | | > | | VRF | | | VRF | > | | red | | | blue | > +-------------------------+ +----------------------------+ > | | > | | > +---------------------------------------------------------+ > | | | | > | | | | > | | +--------------+ | | > | | | | | | > | +---------+ eth0.2030 +---------+ | > | | 10.0.0.1/24 | | > | +-----+--------+ VRF | > | | green| > +---------------------------------------------------------+ > | > | > +----+---+ > | | > | eth0 | > | | > +--------+ > > > iproute2 commands to reproduce the setup: Thanks for putting the diagram and commands in the cover letter. Really helps to understood (and test) what you are wanting to do.