Aventura, Florida · serving clients across the United States (305) 404-9404Toll-free (800) 767-8566Emergency? Get a call within 1 hour

Datacenter fabric & optics

A modern datacenter network is a leaf-spine fabric: every leaf switch connects to every spine, so any two servers are the same number of hops apart. Layer 2 and layer 3 segments are carried over that routed fabric with VXLAN (RFC 7348, UDP port 4789, 24‑bit VNI) and a BGP EVPN control plane (RFC 7432, RFC 9136). Our team designs and builds these fabrics, and the optics and cabling under them.

What we do

  • Leaf-spine fabric design with BGP as the routing protocol
  • VXLAN-EVPN to stretch VLANs and tenants across racks and datacenters
  • MLAG and dual-homed server uplinks
  • Optics and cabling plans from SFP+ 10G to QSFP-DD 400G
  • DAC and AOC for in-rack and row runs, fiber for longer distance
  • Datacenter interconnect over dark fiber or coherent DWDM
  • Cumulus Linux, SONiC and EOS templated configuration
  • Capacity planning, oversubscription review and migration plans
  • Transceiver compatibility and coding checks before purchase

We work across the speed ladder. SFP+ carries 10 Gb/s, SFP28 25 Gb/s, QSFP28 100 Gb/s and QSFP-DD 400 Gb/s on eight lanes, with DAC and AOC cables for short runs and fiber optics for longer ones. Between datacenters we plan DCI over dark fiber, wavelength services or coherent DWDM, and MLAG pairs where servers need dual-homed uplinks.

The fabric stays boring on purpose: BGP as the only routing protocol as described in RFC 7938, templated configuration, automated validation and a rollback plan for each change.

Leading platforms we work with

  • Arista Networks
  • NVIDIA Spectrum
  • Broadcom Tomahawk & Trident
  • Cisco
  • Juniper Networks
  • Dell PowerSwitch
  • Extreme Networks
  • Nokia SR Linux

Platforms and practices

  • Spine-leaf design
  • VXLAN-EVPN
  • MLAG
  • SFP+ / SFP28
  • QSFP28 / QSFP-DD
  • DAC & AOC cabling
  • Coherent DWDM data center interconnect
  • Cumulus Linux & SONiC
  • Fabric automation & validation
  • Transceiver coding and compatibility

References

Sources last checked .

Product names are trademarks of their owners and are listed to describe our experience; they do not imply endorsement or partnership.

A fabric with no single point of failure

Every leaf switch has a 100G QSFP28 uplink to every spine, servers attach at 25G or 10G through LACP pairs, and ECMP spreads flows across all spines. If a spine fails, the flows simply rehash onto the rest.

A fabric with no single point of failureA spine-leaf datacenter fabric. Two spine switches, each linked to four leaf switches by QSFP28 100G uplinks running an eBGP underlay. The leaves form two MLAG pairs. Servers connect at 25G SFP28 through LACP bonds split across both switches of a pair, and two legacy servers connect at 10G SFP+. Two traffic flows are hashed by ECMP, one through each spine. On a loop, spine 1 fails and its flow rehashes onto spine 2. Spine 1eBGP underlaySpine 2eBGP underlayLeaf 1Leaf 2Leaf 3Leaf 4MLAGMLAGLegacySFP+ 10GCompute A2 × SFP28 25G · LACPCompute B2 × SFP28 25G · LACPStorageSFP+ 10GQSFP28 100GSFP28 25GSFP+ 10Gflow 1 · hash Aflow 2 · hash BECMPspine down: ECMP rehash

The right module for every reach

From 10G SFP+ to 400G QSFP-DD, the module is chosen by distance and fibre: DAC or AOC inside the rack, short-reach optics on OM4 multimode in the hall, long-reach on OS2 single-mode between buildings and coherent 400ZR between datacenters. One 100G port can also break out into four 25G.

The right module for every reachA grid of optical and copper modules. Rows are 10G SFP+, 25G SFP28, 100G QSFP28 and 400G QSFP-DD. Columns are reach classes: in the rack with direct attach copper or active optical cables, in the hall with short-reach optics on OM4 multimode fibre, between buildings with long-reach optics on OS2 single-mode fibre, and metro or datacenter interconnect, where 400G uses coherent 400ZR. Packets move faster along faster rows. Below, a QSFP28 100G port splits through a breakout cable into four 25G SFP28 server links. IN RACKHALLCAMPUSMETRO · DCISFP+10GDACup to 7 mSR · OM4400 mLR · OS210 kmER · OS240 kmSFP2825GDACup to 5 mSR · OM4100 mLR · OS210 kmER · OS240 kmQSFP28100GDAC · AOC5 m · 100 mSR4 · OM4100 mLR4 · OS210 kmER4 · OS240 kmQSFP-DD400GDAC · AOC3 m · 100 mDR4 · OS2500 mFR4 · OS22 km400ZRcoherent · 120 kmBREAKOUTQSFP28100G portSFP28 25G1SFP28 25G2SFP28 25G3SFP28 25G4100G → 4 × 25G

Per-rack bandwidth, 10G to 100G

Aggregate uplink capacity from one rack to the spine, with four uplinks per rack. 10G SFP+ (10GBASE-SR, IEEE 802.3ae) gives 40 Gb/s, 25G SFP28 (25GBASE-SR, 802.3by) gives 100 Gb/s, and 100G QSFP28 (100GBASE-SR4, 802.3bm) gives 400 Gb/s. Illustrative.

Per-rack bandwidth, 10G to 100GBar chart of per-rack uplink bandwidth: 40 gigabits per second with 10G SFP+, 100 with 25G SFP28, 400 with 100G QSFP28, four uplinks per rack in each case.Rack-to-spine capacity by optic generation0100200300400Gb/s40 Gb/s10G SFP+4 × 10G100 Gb/s25G SFP284 × 25G× 2.5400 Gb/s100G QSFP284 × 100G× 4

Talk to an engineer about Datacenter fabric & optics

  1. 1

    Tell us what worries you

    Send the form, or call us if it is urgent.

  2. 2

    A senior engineer replies

    Usually the same business day.

  3. 3

    A confidential 30‑minute call

    With a security engineer, at no cost and with no obligation.

  4. 4

    Your written summary

    Your external exposure and the first three things we would fix.

Prefer to talk now? (305) 404-9404

Request your free assessment

A senior engineer replies, usually the same business day. Please do not put passwords or client data in the form.

Required

We use your details only to respond to you. See our privacy notice.

Frequently asked questions

Direct answers to the questions we hear most. Something else on your mind?

Send us a message
What is a spine-leaf fabric and why use it?

Every leaf switch connects to every spine switch, so any two servers on different leaves are the same number of hops apart and traffic can use all paths with ECMP. You scale by adding leaves for ports or spines for bandwidth, without redesign. It replaces the older three-tier tree that was limited by oversubscribed uplinks and spanning tree.

Why VXLAN with EVPN instead of stretched VLANs?

VXLAN (RFC 7348) carries Layer 2 segments over a routed Layer 3 network, using a 24-bit VNI, so there are no spanning-tree loops across the fabric. EVPN (RFC 7432, RFC 9136) is the BGP control plane that distributes MAC and IP reachability instead of flooding. The result is VLANs that can span racks or datacenters while the underlay stays routed and stable.

How do we choose between DAC, AOC and fiber?

Direct-attach copper is cheapest for very short runs inside a rack, typically a few meters. Active optical cables suit row runs, and structured fiber with separate optics is right for longer distances and for patching that may change. We pick by distance, power and cost, and check that the switches accept the optics chosen.

Can we upgrade from 10G to 25G or 100G without replacing everything?

Often, if planned. SFP28 ports also accept SFP+ modules at 10G, and QSFP28 ports accept QSFP+ at 40G or can break out to four 25G links. Fiber type, switch support and server NICs decide it, so we check the existing cabling and optics before quoting. Moving to 400G generally means new optics and often new switches.

What is MLAG and when is it the right choice?

MLAG presents two switches to a server or another switch as one link aggregate, so either switch can fail without dropping connectivity. It suits server uplinks and small designs. In larger fabrics, EVPN multihoming provides the same function without a proprietary peer link between two vendor switches.

How do you connect two datacenters over EVPN?

Over dark fiber, a carrier circuit or coherent DWDM, we extend the fabric with VXLAN-EVPN, so a VLAN can exist in both sites and a server can move without changing its address. We design the interconnect for latency and failure: the link between sites becomes a shared fate, so we limit what stretches and keep routing local where possible.

Do you know if your company is safe?

Speak with a security engineer today. The first assessment call is free and confidential.

CallFree assessment