--- title: "VXLAN: network agility and flexibility – not only in the datacenter !" description: You might think VXLAN technology is not meant for you because you are not running a large multi-datacenter network. Well, think again ! image: https://blog.easi.net/hubfs/Images/Security/header-vxlan-EN.jpg --- [![Home](https://blog.easi.net/hubfs/easi-logo.svg)](https://easi.net) Hit enter to search - [All](https://blog.easi.net/en) - [Adfinity](https://blog.easi.net/en/tag/adfinity) - [Cloud](https://blog.easi.net/en/tag/cloud) - [Easi](https://blog.easi.net/en/tag/easi) - [Microsoft](https://blog.easi.net/en/tag/microsoft) - [Rooftop](https://blog.easi.net/en/tag/rooftop) - [Security](https://blog.easi.net/en/tag/security) - [SmartSales](https://blog.easi.net/en/tag/smartsales) - [Spoom](https://blog.easi.net/en/tag/spoom) [Go back to the blog](https://blog.easi.net/en?hsLang=en) # [VXLAN: network agility and flexibility – not only in the datacenter !](https://blog.easi.net/en/vxlan-network-agility-and-flexibility-not-only-in-the-datacenter) [![Author Avatar](https://blog.easi.net/hubfs/Images/Security/Screenshot%202021-12-15%20at%2017.00.43.png) Jeroen Colpaert](https://blog.easi.net/en/author/jeroen-colpaert) Datacenters have grown in the last decade towards large server virtualized environments. The demand for flexibility and agility on the network layer resulted in virtualization of the network to facilitate management, automation and orchestration. Segmentation on a large scale was required to facilitate multi-tenant and geographically spread datacenters. ## What is VXLAN ? **VXLAN** (or **Virtual Extensible LAN**) is **a network virtualization technology** well known in datacenters or large cloud deployments. It is a commonly known protocol to create overlay networks on top of the physical network and tunnels L2 ethernet traffic over an IP L3 network. It enables you to **create virtualized L2 segments that span physical L3 networks.** ## How does VXLAN work ? VXLAN creates an **“overlay” virtual network on top of the “underlay” physical network**. The underlay network is your physical “transport” network. It’s job is to get packets from A to B by using L3 routing. We know this network as our L3 network to connect networks to each other, typically in between sites or in your network switch core or firewall. The overlay network is virtual and sits on top of the underlay physical network. Virtual tunnels are created in between VXLAN tunnel endpoints (VTEPs) VXLAN network identifiers (VNI) identify the VXLAN and is similar to VLAN id’s in a normal network. VNI uses 24-bits which allows +/- 16 million VXLANs compared to 4094 vlan’s. This allows service providers to use many VNI and **facilitate multi-tenancy** for its customers. The advantage of this approach is that **both networks are independent.** Changes in the overlay or underlay network don’t affect each other and as long as the underlay network and routing protocol can deliver packets, the overlay network remains unchanged. VXLAN adds **resiliency** and **scale** to the physical network as we have never seen before. ## Why should you care about VXLAN ? You might think by reading documentation about VXLAN technology, it is **not meant for you** because you are not running a large multi-datacenter network. Well, **think again** ! ### **1. Extend your L2 network cross-site** We all have virtual machines that remain in a single subnet or broadcast domain. The hosts running these machines are often close to each other and might be separated by racks or even different local datacenters connected with a L2 physical network. Have you ever thought about the possibility to spread virtual machines within a single L2 subnet towards different locations or sites ? In the past, the most obvious solution was to ask your provider for L2 connectivity in between your sites or an EVPN solution. Often the cost for such solutions is high, not flexible and requires high network expertise to maintain or troubleshoot. VXLAN can be the right solution to solve your problem ! By creating an overlay network on top of your existing L3 connections we can stretch L2 networks. ### 2. L2 security Did you worried about L2 security and the possibility that L2 network issues at one site could impact or break down your other sites ? VXLAN might help you out ! The creation of different L2 VXLAN tunnels limits layer 2 issues and isolates the problem within one VXLAN segment. The underlay L3 network remains unaffected for L2 issues and allows always-on connectivity in between your sites. ### 3. Disaster recovery Imagine a backup 3-2-1 scenario. You have a decent backup strategy and spread your backups locally, on different media and also invest in an offsite backup for disaster scenario’s. Moving backups to a highly secure and segregated environment will make sure that they are protected against all sort of attacks. But what do you do when disaster strikes ? How are you going to to access your data ? VXLAN can help by allowing flexible L3 connection towards your restore site in the underlay network and building a virtualized L2 tunnel on top. VXLAN allows direct L2 access and no additional complexity, when you really need it. ### **4. Operating system limitations** Some industries still use machinery from decades ago that do not allow routing or have major limitations in their TCP/IP stack. Often L2 connectivity is the only solution to let them talk to a controller and the impact on cost, complexity and manageability might give you stress or a sky high TCO. VXLAN can overcome these issues by having a “normal” L3 connection in the underlay and building a L2 overlay. By using this technique, there is no further need for expensive L2 connection capabilities or investment in local controllers at different sites. ## Can Easi help ? For sure, Easi has **experience** and can help you out with both **advanced datacenter VXLAN design & implementations** on datacenter technology and **cross-site L2 VXLAN implementations** based on KMO/Entreprise equipment. Do not hesitate to reach out to know more or to see how we can help.  Why should you care about VXLAN ? You might think by reading documentation about VXLAN technology, it is not meant for you because you are not running a large multi-datacenter network. Well, think again ! [![M365 Discovery Track - Hubspot Banner - EN](https://no-cache.hubspot.com/cta/default/473564/interactive-156863034745.png)](https://blog.easi.net/hs/cta/wi/redirect?encryptedPayload=AVxigLKI5ZZamVWQEflEsZe0qFsgHLFjbdJ6uzJEps4M7SB%2F%2FmEQZcvFegaFe8oIEq5Utgz%2Fji5NAW%2BJvIV7qzvpQKi0LdHSVH2w9SR4xcnhdq0%2BTvT18Tkx0cZoe1Tjo3pGIDA4gUbr0PrT0twPqFv24J9bORI%2BpTBqo0%2FGuFAQhWoBNg31Ol4wYMyTStIhQMdyqfELaW8YI%2FLe&webInteractiveContentId=156863034745&portalId=473564&hsLang=en) [Security](https://blog.easi.net/en/topic/security?hsLang=en) ## Current job openings We are constantly looking for new colleagues! If you share our values and you're looking for a challenging job in Belgium's Best Workplace, visit our website. [Apply now](https://easi.net/en/jobs) ### Get our top stories in your inbox every month ## Follow us [![Share on Facebook](https://static.hubspot.com/final/img/common/icons/social/facebook-24x24.png)](http://www.facebook.com/easi.net) [![Share on LinkedIn](https://static.hubspot.com/final/img/common/icons/social/linkedin-24x24.png)](https://www.linkedin.com/company/easi) [![Share on Twitter](https://static.hubspot.com/final/img/common/icons/social/twitter-24x24.png)](https://twitter.com/easi_net) ## Recent posts ![Microsoft 365 Copilot Cowork: From AI Assistant to AI Coworker](https://blog.easi.net/hubfs/Copilot%20Cowork%20is%20now%20available%20-EN%20%286%29-1.png) ### [Microsoft 365 Copilot Cowork: From AI Assistant to AI Coworker](https://blog.easi.net/en/solutions/microsoft/copilot-cowork-is-now-available?hsLang=en) 11/01/2022 ![Microsoft 365 Archive goes file-level: how to cut SharePoint storage costs from July 2026](https://blog.easi.net/hubfs/Copilot%20Cowork%20is%20now%20available%20-EN%20%283%29.png) ### [Microsoft 365 Archive goes file-level: how to cut SharePoint storage costs from July 2026](https://blog.easi.net/en/solutions/microsoft/m365-archive-file-level?hsLang=en) 11/01/2022 ![GRC in Belgium: Why PROTECT Is Where Insight Becomes Action](https://blog.easi.net/hubfs/GRC%20in%20Belgi%C3%AB%20-%20Protect%20-%20EN%20%281%29.png) ### [GRC in Belgium: Why PROTECT Is Where Insight Becomes Action](https://blog.easi.net/en/solutions/security/grc-in-belgium-why-protect-is-where-insight-becomes-action?hsLang=en) 11/01/2022 ## Share this article [![Share on Facebook](https://static.hubspot.com/final/img/common/icons/social/facebook-24x24.png)](http://www.facebook.com/share.php?u=https%3A%2F%2Fblog.easi.net%2Fen%2Fvxlan-network-agility-and-flexibility-not-only-in-the-datacenter%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on LinkedIn](https://static.hubspot.com/final/img/common/icons/social/linkedin-24x24.png)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fblog.easi.net%2Fen%2Fvxlan-network-agility-and-flexibility-not-only-in-the-datacenter%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on Twitter](https://static.hubspot.com/final/img/common/icons/social/twitter-24x24.png)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fblog.easi.net%2Fen%2Fvxlan-network-agility-and-flexibility-not-only-in-the-datacenter%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fblog.easi.net%2Fen%2Fvxlan-network-agility-and-flexibility-not-only-in-the-datacenter%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=VXLAN%3A%20network%20agility%20and%20flexibility%20%E2%80%93%20not%20only%20in%20the%20datacenter%20%21) ### Never miss our stories ## Related articles [See all blog articles](https://blog.easi.net/en/tag/security) ![GRC in Belgium: Why Identify Is the Foundation of Cyber Resilience](https://blog.easi.net/hubfs/GRC%20in%20Belgi%C3%AB%20-%20EN%20%283%29.png) ### [GRC in Belgium: Why Identify Is the Foundation of Cyber Resilience](https://blog.easi.net/en/solutions/security/grc-in-belgium/why-identify-is-the-foundation-of-cyber-resilience?hsLang=en) In many organisations, cybersecurity is still seen as a technical domain. Something owned by IT,... [Read more](https://blog.easi.net/en/solutions/security/grc-in-belgium/why-identify-is-the-foundation-of-cyber-resilience?hsLang=en) ![GRC in Belgium: How organizations maintain oversight in a growing regulatory landscape](https://blog.easi.net/hubfs/GRC%20in%20Belgi%C3%AB%20-%20EN.png) ### [GRC in Belgium: How organizations maintain oversight in a growing regulatory landscape](https://blog.easi.net/en/solutions/securitygrc-in-belgium-how-organizations-maintain-oversight?hsLang=en) In recent years, digital regulation in Europe has accelerated significantly. New frameworks focused... [Read more](https://blog.easi.net/en/solutions/securitygrc-in-belgium-how-organizations-maintain-oversight?hsLang=en) ![The Most Common Cyber Incidents Today](https://blog.easi.net/hubfs/The%20Most%20Common%20Cyber%20Indicents%20Todays%20-%20EN.png) ### [The Most Common Cyber Incidents Today](https://blog.easi.net/en/the-most-common-cyber-incidents?hsLang=en) Cyber-attacks are no longer exceptional crisis situations. Today, they are part of the daily... [Read more](https://blog.easi.net/en/the-most-common-cyber-incidents?hsLang=en) - [Solutions](https://www.easi.net) - [AAA Financials](https://www.easi.net/en/solutions/aaa-financials) - [Adfinity](https://adfinity.easi.net) - [Cloud2be](https://www.easi.net/en/solutions/managed-cloud) - [Rooftop](https://www.easi.net/en/solutions/rooftop) - [Security](https://www.easi.net/en/solutions/security) - [SmartSales](https://www.easi.net/en/solutions/smartsales) - [SmartDrive](https://smartdrive.easi.net) - [SmartShare](https://smartshare.easi.net) - [Synchro Production](https://www.easi.net/en/solutions/synchro-production) - [Services](https://www.easi.net/en/services) - [Mobile Development](https://www.easi.net/en/services/mobile-development) - [Software development](https://www.easi.net/en/services/application-development) - [Managed Services](https://www.easi.net/en/services/managed-services) - [On Premise infrastructure](https://www.easi.net/en/services/it-infrastructure-projects) - [Cosourcing](https://www.easi.net/en/services/co-sourcing) - [End user support](https://www.easi.net/en/services/end-user-support) - [Company](https://www.easi.net) - [About EASI](https://www.easi.net/en/about-easi) - [Jobs](https://www.easi.net/en/jobs) - [Blog](https://blog.easi.net) - [Press](https://www.easi.net/en/press) - [Customer stories](https://www.easi.net/en/customer-stories-references) - [Trainings](https://www.easi.net/en/trainings) - [Events](https://www.easi.net/en/events) - [Customer support](https://www.easi.net/en/customer-support) - [Legal](https://www.easi.net/en/about/legal/website-privacy-policy) - Useful links - [Microsoft](https://www.easi.net/en/services/microsoft) - [IBM Power Systems](https://www.easi.net/en/services/ibm-power-systems) - [IBM Notes](https://www.easi.net/en/services/ibm-notes) - [EASI Jump](https://www.easi.net/en/easi-jump) - [English](https://blog.easi.net/en/vxlan-network-agility-and-flexibility-not-only-in-the-datacenter) - [Français - Belgique](https://blog.easi.net/fr/vxlan-agilité-et-flexibilité-du-réseau) - [Nederlands - België](https://blog.easi.net/nl/vxlan-netwerkflexibiliteit-en-beweeglijkheid) - [Privacy](https://www.easi.net/about/legal/website-privacy-policy) - [info@easi.net](mailto:info@easi.net) - [+32 67 28 10 00](tel:+3216313000) - [Contact](https://www.easi.net/en/contact) - - - - - -