Uploaded image for project: 'Fast Datapath Product'
  1. Fast Datapath Product
  2. FDP-1387

[EVPN] Add support for FDB learning through L2 EVPN.

    • Icon: Story Story
    • Resolution: Done
    • Icon: Major Major
    • None
    • None
    • ovn25.09
    • None
    • 8
    • False
    • Hide

      None

      Show
      None
    • False
    • Hide

      Given an OCP cluster with OVN and having remote tunnel endpoints learned via BGP,

      When OVN detects MAC addresses from EVPN in the Linux bridge for a virtual network port,

      Then, OVN stores these MACs in its database to enable devices to communicate across locations as a single virtual network without errors.

      Show
      Given an OCP cluster with OVN and having remote tunnel endpoints learned via BGP, When OVN detects MAC addresses from EVPN in the Linux bridge for a virtual network port, Then, OVN stores these MACs in its database to enable devices to communicate across locations as a single virtual network without errors.
    • ovn25.09-25.09.0-beta.3.el9fdp
    • rhel-9
    • None
    • rhel-net-ovn
    • ssg_networking
    • OVN FDP Sprint 6, OVN FDP Sprint 7
    • 2

      In specific deployments, e.g., with BGP EVPN configured for OVN logical switches / routers (the BGP control plane is executed outside of OVN), OVN needs to be able to send packets to MAC addresses that are reachable through the fabric (EVPN).

      These remote MAC addresses are learnt by the control plane and installed in the Linux (VRF) FDB table where the control plane daemon runs.  With FRR that translates into FRR inserting externally learnt FDB entries onto the linux bridge it uses for that VRF VNI.

      E.g., for a MAC (00:02:84:84:84:20) learnt for VRF VNI 20:

          $ podman exec -it evpn-host1 bridge fdb show dev vxlan-20 | grep 00:02:84:84:84 | grep extern_learn
          00:02:84:84:84:20 vlan 1 extern_learn master br-20 
          00:02:84:84:84:20 extern_learn master br-20 
          00:02:84:84:84:20 dst 20.0.0.2 self extern_learn

      OVN should provide a way for users to configure an OVN logical switch to monitor and automatically install rules to forward traffic towards MAC addresses learnt by the control plane through EVPN in a given L2 VRF.

      In conjunction with the support for encapsulating/decapsulating packets towards/from dynamically learned remote VTEPs from FDP-1385 this would enable stitching together L2 domains through EVPN.

      Notes on potential implementation details:

      • ovn-controller could monitor through netlink the Linux VRF where the remote MAC FDB entries are created
      • OVN already supports FDB learning (for logical switch ports of with "unknown" addreses") and that can be extended to include MACs learnt through the netlink interface above

              amusil@redhat.com Ales Musil
              dceara@redhat.com Dumitru Ceara
              Jianlin Shi Jianlin Shi
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: