RE: Last-resort tunnel recommendations on WAN network ...

[Dennis - LTI Support via NANOG <nanog () lists nanog org>]

Mikrotik can do all of that.  At 10gig speeds without issues.  Contact linktechs.net if you need suggestions, etc.   

-----Original Message-----
From: Bryan Holloway via NANOG <nanog () lists nanog org> 
Sent: Thursday, March 12, 2026 2:25 PM
To: North American Network Operators Group <nanog () lists nanog org>
Cc: Bryan Holloway <bryan () shout net>
Subject: Last-resort tunnel recommendations on WAN network ...

Greetings, Dear Community!

Consider the following scenario: major colo with a pair of transits, peering, and a single transport back to another 
colo on our backbone.

Transport carries public but also several overlays (VRFs) for management and whatnot.

If the transport fails, we're good on transit/peering, but we can't get back to the mothership for mgmt.

We're looking at solutions (secure tunnels over transit) to bring the severed colo back to "HQ" ... looking at a 
hub/spoke topology with the intent of possibly doing this more than once.

Requirements:
* Multiple VRFs across the tunnel

* OSPF - each VRF should have its own instance, so we need something that supports interface-based tunneling since 
IPsec doesn't handle multicast well. Open to other tunneling strategies. Wireguard? OpenVPN?

* v6 a plus (OSPFv3)

* 10G should suffice across the board, but it should have interfaces that are LAGable.

The appliances we have considered so far do most if not all of these things, but they come with a lot of features (and 
cost) we simply don't need (e.g., UTM, DPI)

Also open to something server (VM) based since our traffic requirements aren't that significant.

Easy to support is obviously a plus.

Curious if others have had similar needs and how they solved this problem.

Recommendations (good or bad) greatly appreciated.

Thank you!

                - bryan

_______________________________________________
NANOG mailing list
https://lists.nanog.org/archives/list/nanog () lists nanog org/message/77KTXLHWHFQTPIGG7EQCWQVNZVTJP3TS/


_______________________________________________
NANOG mailing list 
https://lists.nanog.org/archives/list/nanog () lists nanog org/message/SS3UPFDNPIE3RCT426D4OZGUCVEZQ6OK/