Overview

EVPN-VXLAN combines a routed IP underlay with a scalable overlay for tenant, application, or campus segmentation. VXLAN provides the encapsulation, while BGP EVPN distributes MAC, IP, and route information across the fabric.

For xSONiC networks, EVPN-VXLAN is useful when teams need Layer 2 adjacency in selected places without extending a fragile Layer 2 domain across the whole network.

Architecture Layers

Layer	Function	xSONiC Design Choice
Underlay	Provides IP reachability between VTEPs.	Use routed leaf-spine with ECMP.
Overlay	Carries tenant or segment traffic over VXLAN tunnels.	Map VLANs or VRFs to VNIs.
Control Plane	Distributes MAC/IP and route information.	Use BGP EVPN instead of flood-and-learn.
Gateway	Routes between segments or external networks.	Use distributed or centralized gateway based on operations model.

Spine-Leaf Pattern

Tenant / application networks
        |
        v
Leaf VTEPs with VLAN/VNI mapping
        |
        v
Routed xSONiC spine underlay
        |
        v
Remote leaf VTEPs and external gateways

The underlay should be simple and predictable. It carries IP reachability and ECMP paths. The overlay carries tenant segmentation and endpoint mobility.

EVPN Route Types

Route Type	Role	Operational Use
Type 2	MAC/IP advertisement.	Endpoint reachability across VTEPs.
Type 3	Inclusive multicast Ethernet tag.	Broadcast, unknown unicast, and multicast handling.
Type 5	IP prefix route.	Inter-subnet and external route advertisement.

Campus and Data Center Use Cases

Scenario	EVPN-VXLAN Benefit
Data center application segmentation	Keeps tenants or application tiers isolated over a routed fabric.
Workload mobility	Allows selected Layer 2 extension while underlay remains routed.
Campus spine-leaf	Provides consistent segmentation across access and aggregation.
Migration from legacy Layer 2	Lets teams introduce routing without breaking every existing segment at once.

Deployment Workflow

1. Build and validate the routed underlay first.
2. Assign loopbacks and confirm VTEP reachability.
3. Define VRFs, VLANs, VNIs, and gateway behavior.
4. Enable BGP EVPN sessions and route exchange.
5. Validate endpoint learning, ARP/ND behavior, and inter-VNI routing.
6. Test failure recovery for leaf, spine, and uplink events.

Operations Checklist

Check	Why It Matters
Underlay route health	Overlay tunnels depend on IP reachability.
VTEP loopback reachability	VXLAN endpoints must remain stable during link changes.
EVPN route table	Confirms MAC/IP and prefix information is being advertised.
VNI consistency	Prevents silent tenant or segment mismatch.
Gateway placement	Determines traffic path and failure behavior.

xSONiC Platform Fit

xSONiC data center switches fit EVPN-VXLAN leaf/spine fabrics for application segmentation and workload mobility. XS-AA core and aggregation platforms can support campus designs where EVPN-VXLAN provides a consistent segmentation model across buildings or distribution layers.