Port mirroring over EVPN VXLAN

1. A method comprising:

receiving, by a first network device of a plurality of network devices of a leaf and spine network configured with an Ethernet Virtual Private Network and from a second network device of the plurality of network devices, an extended routing message including information indicating the second network device is connected to an analyzer that is configured to analyze packets, and wherein the plurality of network devices is configured with a Virtual Local Area Network (VLAN) for which the analyzer is configured to analyze packets; and

configuring, within forwarding information of the first network device and in response to receiving the extended routing message advertised by the second network device, a next hop that specifies packets received by the first network device and associated with the VLAN are to be forwarded by the first network device directly to the second network device without flooding the packets to each of the plurality of network devices configured with the VLAN.

2. The method of claim 1 ,

wherein the extended routing message comprises an Inclusive Multicast Ethernet Tag (IMET) route including an extended community that specifies the information indicating the second network device is connected to the analyzer.

3. The method of claim 1 ,

wherein the first network device is configured as a mirror leaf device for the VLAN to enable the first network device to configure, in response to receiving the extended routing message, the next hop to the second network device that advertised the extended routing message, and

wherein the second network device that is connected to the analyzer is configured as a mirror root device for the VLAN to enable the second network device to send the extended routing message to the plurality of network devices.

4. The method of claim 1 , further comprising:

receiving, by the first network device, a packet to be sent to the analyzer;

copying, by the first network device and in response to a lookup of the forwarding information, the packet to generate a mirrored packet for a port to the second network device; and

sending, by the first network device, the mirrored packet via the port to the second network device without flooding the packet to all ports to the plurality of network devices.

5. The method of claim 4 ,

wherein the next hop comprises a virtual tunnel endpoint (VTEP) address to the second network device, and

wherein sending the mirrored packet to the second network device comprises sending the packet encapsulated with the VTEP address to the second network device.

6. The method of claim 1 , wherein the extended routing message comprises a first extended routing message, wherein the analyzer comprises a first analyzer, wherein the next hop comprises a first next hop, the method further comprising:

receiving, by the first network device, a second extended routing message including routing information including information indicating a third network device is connected to a second analyzer; and

configuring, within the forwarding information of the first network device and in response to receiving the second extended routing message from the third network device, a second next hop that specifies packets associated with the VLAN are to be forwarded to the third network device.

7. The method of claim 6 , further comprising:

receiving, by the first network device, a packet to be sent to the analyzer;

copying, by the first network device and in response to a lookup of the forwarding information, the packet to generate a mirrored packet for a first port to the second network device and for a second port to the third network device; and

sending, by the first network device, the mirrored packet via the first port to the second network device and via the second port to the third network device without flooding the traffic to all ports to the plurality of network devices.

8. The method of claim 7 ,

wherein the first next hop comprises a first virtual tunnel endpoint (VTEP) address associated with the second network device,

wherein the second next hop comprises a second VTEP address associated with the third network device,

wherein sending the mirrored packet to the second network device comprises sending the packet encapsulated with the first VTEP address to the second network device, and

wherein sending the mirrored packet to the third network device comprises sending the packet encapsulated with the second VTEP address to the third network device.

9. A method comprising:

generating, by a first network device of a plurality of network devices of a leaf and spine network configured with an Ethernet Virtual Private Network, an extended routing message including information indicating the first network device is connected to an analyzer configured to analyze packets, wherein the plurality of network devices is configured with a Virtual Local Area Network (VLAN) for which the analyzer is configured to analyze packets; and

sending, by the first network device, the extended routing message to the plurality of network devices configured with the VLAN to cause the plurality of network devices to configure a next hop that specifies packets received by the first network device and associated with the VLAN are to be forwarded by the first network device directly to the first network device without flooding the packets to each of the plurality of network devices configured with the VLAN.

10. The method of claim 9 ,

wherein the extended routing message comprises an Inclusive Multicast Ethernet Tag (IMET) route including an extended community that specifies the information indicating the first network device is connected to the analyzer.

11. The method of claim 9 ,

wherein the first network device is configured as a mirror root device for the VLAN to enable the first network device to send the extended routing message including information indicating the first network device is connected to the analyzer, and

wherein the second network device is configured as a mirror leaf device for the VLAN to enable the second network device to configure, in response to receiving the extended routing message from the first network device, the next hop to the first network device.

12. A first network device comprising:

a plurality of ports, wherein each port is configured to be communicatively coupled to a respective network device of a plurality of network devices of a leaf and spine network configured with an Ethernet Virtual Private Network; and

one or more processors operably coupled to a memory, wherein the one or more processors are configured to:

receive, from a second network device of the plurality of network devices, an extended routing message including information indicating the second network device is connected to an analyzer configured to analyze packets, and wherein the plurality of network devices is configured with a Virtual Local Area Network (VLAN) for which the analyzer is to analyze packets; and

configure, within forwarding information of the first network device and in response to receiving the extended routing message from the second network device, a next hop that specifies packets received by the first network device and associated with the VLAN are to be forwarded by the first network device directly to the second network device without flooding the packets to each of the plurality of network devices configured with the VLAN.

13. The first network device of claim 12 ,

wherein the extended routing message comprises an Inclusive Multicast Ethernet Tag (IMET) route including an extended community that specifies the information indicating the second network device is connected to the analyzer.

14. The first network device of claim 12 ,

wherein the first network device is configured as a mirror leaf device for the VLAN to enable the first network device to configure, in response to receiving the extended routing message from the second network device, the next hop to the second network device that advertised the extended routing message, and

wherein the second network device is configured as a mirror root device for the VLAN to enable the second network device to send the extended routing message to the plurality of network devices.

15. The first network device of claim 12 , wherein the one or more processors are further configured to:

receive a packet to be sent to the analyzer;

copy, in response to a lookup of the forwarding information, the packet to generate a mirrored packet for a port to the second network device; and

send the mirrored packet via the port to the second network device without flooding the packet to all ports to the plurality of network devices.

16. The first network device of claim 15 ,

wherein the next hop comprises a virtual tunnel endpoint (VTEP) address to the second network device, and

wherein, to send the mirrored packet to the second network device, the one or more processors are further configured to send the packet including the VTEP address to the second network device.

17. The first network device of claim 12 , wherein the extended routing message comprises a first extended routing message, wherein the analyzer comprises a first analyzer, wherein the next hop comprises a first next hop, wherein the one or more processors are further configured to:

receive a second extended routing message including routing information including information indicating a third network device is connected to a second analyzer; and

configure, within the forwarding information of the first network device and in response to receiving the second extended routing message from the third network device, a second next hop for the VLAN that specifies packets associated with the VLAN are to be forwarded to the third network device.

18. The first network device of claim 17 , wherein the one or more processors are further configured to:

receive a packet to be sent to the analyzer;

copy, in response to a lookup of the forwarding information, the packet to generate a mirrored packet for a first port to the second network device and for a second port to the third network device; and

send the mirrored packet via the first port to the second network device and via the second port to the third network device without flooding the traffic to all ports to the plurality of network devices.

19. The first network device of claim 18 ,

wherein the first next hop comprises a first virtual tunnel endpoint (VTEP) address to the second network device,

wherein the second next hop comprises a second VTEP address to the third network device,

wherein, to send the mirrored packet to the second network device, the one or more processors are further configured to send the packet encapsulated with the first VTEP address to the second network device, and

wherein, to send the mirrored packet to the third network device, the one or more processors are further configured to send the packet encapsulated with the second VTEP address to the third network device.

20. The method of claim 1 , wherein the analyzer is configured to monitor network traffic, enforce policies, and identify problems in the leaf and spine network.