Preventing Network Outages in L2VPN with Storm Control: A Real-World Guide
Preface: In modern service provider and enterprise networks, L2VPN services like VPLS, VPWS and EVPN provide transparent, low latency connectivity across geographically distributed sites. However, these services are prone to Layer 2 traffic storms - broadcast, multicast and unknown unicast floods which can originate from a misbehaving customer edge (CE) device or unintended loops in the network. These storms can quickly propagate through the provider edge (PE) infrastructure, saturate link bandwidth, overload CPU and memory and potentially cause widespread service degradation or outages not just for the offending customer but for multiple tenants sharing the same network. To address this critical vulnerability, storm control is implemented as a protective measure on PE interfaces, especially on customer facing ports. By monitoring and rate limiting specific Layer 2 traffic types, storm control stops the storm at its source. This ensures only a permissible amount of broadcast...