nanog mailing list archives

Re: 10G CPE w/VXLAN - vendors?


From: Mark Tinka <mark@tinka.africa>
Date: Thu, 15 Jun 2023 07:18:33 +0200



On 6/14/23 20:50, Adam Thompson wrote:

Hello, all.

I’m having difficulty finding vendors, never mind products, that fit my need.

We have a small but growing number of L2 (bridged) customers that have diverse fiber paths available, and, naturally, want to make use of them.

We have a solution for this: we extend the edge of our EVPN VXLAN fabric right to the customer premise. The customer-prem device needs 4x10G SFP+ cages (2 redundant paths, plus LAG to customer), and the switches we currently use, Arista 7020Rs, are quite expensive if I’m deploying one one per customer.  (Nice switches, but overkill here – I don’t need 40/100G, and I don’t need 24 SFP+ ports.  And they still take forever to ship.)

We use RFC7438 §6.3 “vlan-aware-bundle” mode, not §6.1 “vlan-based” mode, which limits our choices somewhat.  I might be willing to entertain spinning up a separate VXLAN mesh using RFC7438 §6.1 (“vlan-based”) and static VTEPs if it saves me a lot of pain.

However, I’m having trouble finding small & cheap*/er/* 1U (or even desktop/wallmount) devices that have 4 SFP+ cages, and can do VXLAN, in the first place.

Who even makes CPE gear with SFP+ ports? (Other than Mikrotik CRS309-1G-8S+IN / CRS317-1G-16S+RM, which are nice, but our policy requires vendor support contracts, so… no-go.)

Vendors?  Model#s, if you happen to know any?


You will have trouble finding such a device at the price you need because it is atypical to have your customer's CPE as part of your Metro-E backbone.

Our sales people have asked for this more times than I can remember. We have continued to refuse for a reason.

They've angled their query to extend our u-PE devices into the customer site, to which they can attach their CPE. We have refused that too, because most customer's do not allow 3rd party fibre x-connects into their site (for example, some country's embassy, a stock exchange building, a bank, e.t.c.), never mind the fact that most customer sites are not fitted with 24/7/365 availability and security. And we continue to refuse.

My advice - don't do it. But it sounds like you want to, so...

Mark.

Current thread: