What is VXLAN?
VXLAN (Virtual Extensible LAN) is a Layer 2 overlay network protocol built on top of Layer 3 networks. It encapsulates Ethernet frames into UDP packets, enabling scalable virtual networks (overlays) within data centers and cloud infrastructures.
Why is VXLAN needed?
- Scales virtual networks (up to 16 million segments)
- Enables traffic isolation for cloud tenants (multi-tenancy)
- Supports network virtualization in NFV and SDN environments
VXLAN replaces traditional VLANs, eliminating their 4096-segment limitation.
How VXLAN works
Core components:
- VNI (VXLAN Network Identifier) — a 24-bit segment ID
- VTEP (VXLAN Tunnel Endpoint) — a device that performs encapsulation/decapsulation
- UDP port — standard is 4789
Transmission flow:
- The VTEP receives an Ethernet frame from a virtual machine
- Encapsulates it in VXLAN + UDP + IP
- Sends it over the L3 network to another VTEP
Use cases
- Cloud providers (AWS, Azure, OpenStack)
- Virtualized data centers
- Enterprise networks with SDN (Cisco ACI, VMware NSX)
FAQ
Does VXLAN replace MPLS?
No. They operate at different layers. VXLAN is L2 over L3, while MPLS is a label-switching and routing mechanism (Layer 2.5).
Is VXLAN-capable hardware required?
Yes. Switches or virtual routers with VTEP support are needed.
Conclusion
VXLAN is a critical protocol for modern infrastructures where scalability, isolation, and flexibility are essential. It enables seamless migration, multi-tenancy, and automation in virtualized networks.
