Underlay Configuration #

In addition to the configuration described in the underlay configuration section, the VTEP (Virtual Tunnel End Point) source must be configured via the evpn field. There are two mutually exclusive options:

• vtepcidr: OpenPERouter creates a loopback interface and allocates a unique VTEP IP per node from the given CIDR. OpenPERouter advertises the VTEP IP into the fabric via BGP.
• vtepInterface: OpenPERouter uses an existing interface (and its IP) as the VTEP source. The ToR is responsible for advertising the interface IP into the fabric (e.g. via redistribute connected).

Exactly one of the two must be specified.

Using vtepcidr #

apiVersion: openpe.openperouter.github.io/v1alpha1
kind: Underlay
metadata:
  name: underlay
  namespace: openperouter-system
spec:
  asn: 64514
  evpn:
    vtepcidr: 100.65.0.0/24
  nics:
    - toswitch
  neighbors:
    - asn: 64512
      address: 192.168.11.2

The evpn.vtepcidr field defines the IP range used for VTEP addresses. OpenPERouter automatically assigns a unique VTEP IP to each node from this range. For example, with 100.65.0.0/24:

• Node 1: 100.65.0.1
• Node 2: 100.65.0.2
• Node 3: 100.65.0.3
• etc.

A loopback interface is created inside the router namespace with the allocated IP, and OpenPERouter advertises the VTEP IP to the fabric over the BGP underlay session.

Using vtepInterface #

apiVersion: openpe.openperouter.github.io/v1alpha1
kind: Underlay
metadata:
  name: underlay
  namespace: openperouter-system
spec:
  asn: 64514
  evpn:
    vtepInterface: toswitch
  nics:
    - toswitch
  neighbors:
    - asn: 64512
      address: 192.168.11.2

When vtepInterface is set, OpenPERouter uses the specified interface’s IP as the VXLan VTEP. The interface must already have an IP address configured; the first IPv4 address found on the interface is used as the VTEP IP.

Configuration Fields #

L3 VNI Configuration #

L3 VNI (Virtual Network Identifier) configurations define EVPN L3 overlays. Each L3VNI creates a separate routing domain and BGP session with the host.

Basic L3VNI Configuration #

apiVersion: openpe.openperouter.github.io/v1alpha1
kind: L3VNI
metadata:
  name: blue
  namespace: openperouter-system
spec:
  vrf: blue
  hostsession:
    asn: 64514
    hostasn: 64515
    localcidr:
      ipv4: 192.169.11.0/24
  vni: 200

Configuration Fields #

Multiple VNIs Example #

You can create multiple VNIs for different network segments:

# Production VNI
apiVersion: openpe.openperouter.github.io/v1alpha1
kind: L3VNI
metadata:
  name: signal
  namespace: openperouter-system
spec:
  vrf: signal
  vni: 100
  hostsession:
    asn: 64514
    hostasn: 64515
    localcidr:
      ipv4: 192.168.10.0/24
---
# Development VNI
apiVersion: openpe.openperouter.github.io/v1alpha1
kind: L3VNI
metadata:
  name: oam
  namespace: openperouter-system
spec:
  vrf: oam
  vni: 200
  hostsession:
    asn: 64514
    hostasn: 64515
    localcidr:
      ipv4: 192.168.20.0/24

What Happens During Reconciliation #

When you create or update VNI configurations, OpenPERouter automatically:

1. Creates Network Interfaces: Sets up VXLAN interface and Linux VRF named after the VNI
2. Establishes Connectivity: Creates veth pair and moves one end to the router’s namespace
3. Assigns IP Addresses: Allocates IPs from the localcidr range:
   • Router side: First IP in the CIDR (e.g., 192.169.11.1)
   • Host side: Each node gets a free IP in the CIDR, starting from the second (e.g., 192.169.11.15)
4. Creates BGP Session: Opens BGP session between router and host using the specified ASNs

L2VNI Configuration #

L2VNIs provide Layer 2 connectivity across nodes using EVPN tunnels. Unlike L3VNIs, L2VNIs extend Layer 2 domains rather than routing domains.

Configuration Fields #

L2VNI Example #

apiVersion: openpe.openperouter.github.io/v1alpha1
kind: L2VNI
metadata:
  name: l2red
  namespace: openperouter-system
spec:
  vni: 210
  vrf: red
  hostmaster:
    type: linux-bridge
    linuxBridge:
      autoCreate: true

What Happens During Reconciliation #

When you create or update VNI configurations, OpenPERouter automatically:

1. Creates Network Interfaces: Sets up VXLAN interface and Linux VRF named after the VNI
2. Establishes Connectivity: Creates veth pair and moves one end to the router’s namespace
3. Enslaves the veth: the veth is connected to the bridge corresponding to the l2 domain
4. Optionally creates a bridge on the host: if hostmaster.autocreate is set to true
5. Optionally connects the host veth to the bridge on the host: if hostmaster.autocreate is set to true or name is set

Per-Node Configuration #

All EVPN resources (Underlay with EVPN, L3VNI, and L2VNI) support the optional nodeSelector field, which allows you to target specific configurations to specific nodes. This is useful for:

• Multi-rack deployments with different VNIs per rack
• Multi-datacenter clusters with zone-specific configurations
• Selective deployment to worker nodes only
• Hardware-specific configurations

For detailed information and examples, see the Node Selector Configuration documentation.

API Reference #

For detailed information about all available configuration fields, validation rules, and API specifications, see the API Reference documentation.