aroulin · HackerTrans

3 years agodiscuss

Right. My thinking is that with VxLAN you can get each tenant in the datacenter to have its own L3 network, isolated from other tenants L3 network.

Each tenant can have multiple subnets; run BGP, etc. and the IP addresses can be re-used between different tenants.

It doesn't seem wireguard can do that with just p2p network. This was one argument I had for adding VXLAN encapsulation over IP for the above comment. You also get L2 connectivity if you want it.

aroulin

3 years agodiscuss

Right, that's what I was trying to understand.

"wireshark can virtualize an L3 network out-of-the-box" How can this be true then?

aroulin

3 years agodiscuss

With Wireguard being a point-to-point protocol (as I understand), it will be challenging to get good performance for L3VPN BUM traffic?

aroulin

3 years agodiscuss

Using vxlan you can also connect L3 networks, not just L2 networks. i.e., virtualize an L3 network

comments