Virtual eXtensible Local Area Network (VXLAN): A Framework for Overlaying Virtualized Layer 2 Networks over Layer 3 Networks

Sridhar, T.; Kreeger, Lawrence; Wright, Chris; Dutt, Dinesh; Bursell, Mike; Mahalingam, Mallik; Agarwal, Puneet; Duda, Kenneth J.

doi:10.17487/rfc7348

Cited by 299 publications

(180 citation statements)

References 6 publications

Supporting

Mentioning

158

Contrasting

Unclassified

Order By: Relevance

“…V: The RLOCs listed in the AFI-encoded addresses in the next longword can accept Virtual eXtensible Local Area Network (VXLAN) encapsulation using destination UDP port 4789 [RFC7348].…”

Section: | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-mentioning

confidence: 99%

LISP Canonical Address Format (LCAF)

Snijders¹,

Meyer²,

Farinacci³

2017

View full text Add to dashboard Cite

“…V: The RLOCs listed in the AFI-encoded addresses in the next longword can accept Virtual eXtensible Local Area Network (VXLAN) encapsulation using destination UDP port 4789 [RFC7348].…”

Section: | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-mentioning

confidence: 99%

LISP Canonical Address Format (LCAF)

Snijders¹,

Meyer²,

Farinacci³

2017

View full text Add to dashboard Cite

“…These limitations led to an evolution of new network protocols, which intend to increase the number of possible participants or to hide internal address schemes of the logical networks. Protocols like QinQ [17], Stateless Transport Tunneling (STT) [1] or Virtual eXtensible LAN (VXLAN) [26] encapsulate the internal network protocols and transfer the new protocols to a given endpoint. Generic Network Virtualization Encapsulation (GENEVE) [14] encapsulates the payload by prefixing a GENEVE and a UDP-Header.…”

Section: Novel Protocolsmentioning

confidence: 99%

Challenges of Network Forensic Investigation in Virtual Networks

Spiekermann

Eggendorfer

2017

JCSM

View full text Add to dashboard Cite

The evolution of virtualization techniques is changing operating principles in today's datacenters. Virtualization of servers, networks and storage increases the flexibility and dynamic of the environment by reducing the administrative overhead. Based on a physical underlay network, different logical networks are implemented with new protocols like VXLAN, STT or GENEVE. New paradigms like Software-Defined-Networks or Network Function Virtualization offer new capabilities to redesign the whole network infrastructure. This trend creates new challenges for digital investigations analysing incidents by extracting and interpreting recorded data inside the environment. As a branch of digital investigation, network forensic investigation is used to examine network traffic by capturing the data of a suspicious target system and analysing this data. In this article, we analyse in detail new challenges in investigating virtual networks. We propose a classification in three categories, which might help to develop new methods and possible solutions to simplify further necessary investigations in virtual network environments. The defined challenges are classified according their potential to impede the investigation. Based on this classification we derive a list of basic conditions, describing different necessary requirements to implement a successful, valid and ongoing network forensic investigation in these virtual networks.

show abstract

“…However, the VLAN tag in the Ethernet packets is only 12 bits long, which means the isolation units are no more than 4096. Methods like private VLAN [10] and VXLAN [11] are proposed to address this issue. Private VLAN configures the switches with two-level VLAN strategy and maintains a VLANs' mapping table, but its effect is not good as the packets forwarding become more complicated and the mapping table cannot be large enough.…”

Section: Related Workmentioning

confidence: 99%

“…In this test we run twelve VMs on six hosts. These VMs are allocated to different tenants, VM1,2,3 belong to tenant-1, VM4,5,6,9,10 belong to tenant-2 and VM7, 8,11,12 belong to tenant-3. After that the SDN controller respectively takes the FENet's routing algorithm and the routing algorithm based on the shortest path algorithm to compute routing paths for the 12 VMs.…”

Section: B Virtual Network Performancementioning

confidence: 99%

FENet: An SDN-based scheme for virtual network management

Liu

Cui

et al. 2014

2014 20th IEEE International Conference on Parallel and Distributed Systems (ICPADS)

View full text Add to dashboard Cite

Abstract-Virtual networking is vital to efficient resource management in Clouds, and it is in fact one of the main services provided by many Cloud Computing platforms. Virtual network management needs to meet specific requirements, including tenant isolation and adaption to virtual machines' lifecycle. Most of the existing schemes for virtual network management are based on the use of overlay networks in order to achieve a desirable degree of flexibility. However, these schemes suffer from a common limit, i.e. relatively high performance penalty due to a complicated forwarding process. We address this performance concern by developing a new management scheme, FENet, which makes use of Software-Defined Networks (SDN) to create virtual networks and manage them via the SDN controller programs. We present the design of an SDN controller, with the definition of flow entry rules based on the OpenFlow protocol and the specification of a routing algorithm. The results from our experimental evaluation show that our SDN-based prototype can control virtual network interconnections and tenant isolation appropriately. FENet achieves about 30% better network performance than the management scheme based on OpenVPN and lower latency in comparison with the traditional bridging scheme.

show abstract

Virtual eXtensible Local Area Network (VXLAN): A Framework for Overlaying Virtualized Layer 2 Networks over Layer 3 Networks

Cited by 299 publications

References 6 publications

LISP Canonical Address Format (LCAF)

LISP Canonical Address Format (LCAF)

Challenges of Network Forensic Investigation in Virtual Networks

FENet: An SDN-based scheme for virtual network management

Contact Info

Product

Resources

About