Skip to content

Instantly share code, notes, and snippets.

@drewr

drewr/galactic-vs-vxlan-encap.md

Created August 21, 2026 15:22
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save drewr/549c108a948f072ca3ed6a35561e89ee to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save drewr/549c108a948f072ca3ed6a35561e89ee to your computer and use it in GitHub Desktop.
Download ZIP
Galactic (SRv6 uSID) vs VXLAN encap/decap comparison
Raw
galactic-vs-vxlan-encap.md

Galactic (SRv6) vs VXLAN — Encap/Decap Comparison

Both are overlay data planes. Neither encrypts the inner payload — confidential traffic must be layered on separately (IPsec, WireGuard, TLS).

Galactic VXLAN
Encap format SRv6 uSID in IPv6 header (RFC 8986) VXLAN (UDP-MAC-in-IP), VNI
Dataplane eBPF TC-BPF (usid.c) + kernel SRv6 kernel vxlan device / vSwitch
Control plane BGP EVPN Prefix-SID (typically) BGP EVPN MAC/VNI or static
Segmentation VRF + route-target; VPC via BGPVRFInstance VNI / VLAN in -A mode
L2/L3 L3 (IP) overlay L2 (MAC) overlay (L2VNI)
Fragmentation uSID compression to fit 128-bit next-hop outer UDP/IP; inner + outer headers
Encryption none — plaintext inner traffic in outer IPv6 none — plaintext inner L2 in outer UDP/IP
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment