VX-LAN active with one peer IP

[tonnorprox]

Hi,
I am testing the different SDN options, to that I use a server with IP 10.10.10.10 and one with 10.10.10.20.
I configured the vxlan peer IP's and the guests on both hosts could communicate. Then I found a typo on host '10.10.10.20' I wrote peer IP '10.10.10.1' and not .10

Does anyone know if it is this by design that it works even though only 1 peer address is correct? It feels a bit like a bug/security issue. Apparently anyone can connect vxlan to your host as long as it's reachable.

 

[shanreich]

VXLAN has no inbuilt security mechanism, you need to make sure to secure the network by yourself, for instance by segmentation. IPSpace has a good article regarding this [1], that goes more in depth about the topic.

[1] https://blog.ipspace.net/2015/04/omg-vxlan-encapsulation-has-no-security/