IPBH Network

An example of a collapsed IPBH network

Layer 1

Physical layer architecture

Layer 1 - Core

Core Layer 1 represents a physical ring spanned across two data centres with the access extension...

Layer 1- Infrastructure

Infrastructure Layer 1 represents an access layer built to the server farm hosted in the private ...

Layer 2

Datalink layer architecture

Layer 2 - Core

Core Layer 2 connectivity is provided through EVPN sub interfaces (refer to the respective chapte...

Layer 2 - Infrastructure

The same principle applies to the Core – Cloud trunks represented by EVPN ESI

Layer 3

Network layer architecture

IPBH Underlay

OSPF has been chosen as an EVPN underlay protocol as opposed to Full Mesh BGP unnumbered to minim...

IPBH EVPN Overlay

The Core overlay is built up on VXLAN EVPN allowing for granular network segmentation (L2/L3 VPN)...

EVPN – Local VRF

As mentioned earlier, EVPN was adopted to allow network segmentation at Datalink and Network laye...

EVPN – Management VRF

Management VRF is a Layer 3 VRF built on top of the existing “Local” L2 VRF used as transport Fr...

EVPN – Public VRF

Public VRF is built to provide connectivity with public peers (IP Transit) and the Outside Firewa...

EVPN – Private VRF

Like the Public, Private VRF has been built to accommodate for peering in the Private address spa...

BGP – Public VRF

Public VRF is represented by various logical zones. At the centre we have a Core AS PUBLIC which ...

BGP – Private VRF

Private VRF is represented by two Core ASNs 65101 (DC01) and 65111(DC11) and has peering with AWS...

Layer 4 - 7

Transport - Application layer architecture

Private VRF Segmentation

Private VRF is represented by four security zones each with its' own feature set and functionality

Public VRF Segmentation

Public VRF is represented by a single security zone with an intent to publish front end and other...