nanog mailing list archives

Re: 10G CPE w/VXLAN - vendors?


From: Marco Paesani <marco () paesani it>
Date: Thu, 15 Jun 2023 07:22:05 +0200

Huawei NE8000-M1C

On Thu, Jun 15, 2023, 07:20 Mark Tinka <mark@tinka.africa> wrote:



On 6/14/23 20:50, Adam Thompson wrote:

Hello, all.

I’m having difficulty finding vendors, never mind products, that fit my
need.



We have a small but growing number of L2 (bridged) customers that have
diverse fiber paths available, and, naturally, want to make use of them.

We have a solution for this: we extend the edge of our EVPN VXLAN fabric
right to the customer premise.  The customer-prem device needs 4x10G SFP+
cages (2 redundant paths, plus LAG to customer), and the switches we
currently use, Arista 7020Rs, are quite expensive if I’m deploying one one
per customer.  (Nice switches, but overkill here – I don’t need 40/100G,
and I don’t need 24 SFP+ ports.  And they still take forever to ship.)



We use RFC7438 §6.3 “vlan-aware-bundle” mode, not §6.1 “vlan-based” mode,
which limits our choices somewhat.  I might be willing to entertain
spinning up a separate VXLAN mesh using RFC7438 §6.1 (“vlan-based”) and
static VTEPs if it saves me a lot of pain.



However, I’m having trouble finding small & cheap*er* 1U (or even
desktop/wallmount) devices that have 4 SFP+ cages, and can do VXLAN, in the
first place.

Who even makes CPE gear with SFP+ ports?  (Other than Mikrotik
CRS309-1G-8S+IN / CRS317-1G-16S+RM, which are nice, but our policy requires
vendor support contracts, so… no-go.)



Vendors?  Model#s, if you happen to know any?


You will have trouble finding such a device at the price you need because
it is atypical to have your customer's CPE as part of your Metro-E backbone.

Our sales people have asked for this more times than I can remember. We
have continued to refuse for a reason.

They've angled their query to extend our u-PE devices into the customer
site, to which they can attach their CPE. We have refused that too, because
most customer's do not allow 3rd party fibre x-connects into their site
(for example, some country's embassy, a stock exchange building, a bank,
e.t.c.), never mind the fact that most customer sites are not fitted with
24/7/365 availability and security. And we continue to refuse.

My advice - don't do it. But it sounds like you want to, so...

Mark.


Current thread: