Jeroen Massar
@jeroen@secluded.ch replied  ·  activity timestamp 2 days ago
@gyptazy @stucchimax @BoxyBSD keep one thing in mind with VXLAN: it is unencrypted and unauthenticated, that means that a MITM can insert and observe packets, which can wreak havoc.

Wireguard etc is thus recommended on untrusted networks. IPSEC, hardware offloaded, is therefore still also a favorite.

Stretching VLANs, especially over longer distances also runs into a lot of fun latency-related issues, thus be aware; not even talking about packetloss.... though at least it is not over TCP ;)