VXLAN DHCP Relay via VTEP Unicast Forwarding

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In a conventional VXLAN overlay fabric, leaf VTEP devices lack the ability to directly relay DHCP requests, leading to excessive broadcast traffic and security issues due to DHCP requests being broadcast to all VTEP and host devices, rather than being relayed directly to an external DHCP server or centralized gateway.

Innovation Solution

A mechanism that intercepts DHCP discover requests at the VTEP device, converts them to unicast requests, and relays them to a selected centralized gateway with Layer 3 relay functionality, encapsulating the requests with a unicast VXLAN header to transmit them directly to the DHCP server.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If DHCP requests are broadcast to all VTEP devices in the overlay fabric, then all devices can receive the DHCP request, but this results in excessive broadcast traffic and security issues

Engineering Contradiction:
ImproveDHCP service deliveryVSAvoidbroadcast traffic
Core Design Contradiction:
ReliabilityVSObject-generated harmful factors

Solution Approach 1:

The patent introduces an intermediary mechanism where the VTEP device acts as a mediator between the DHCP client and the external DHCP server. Instead of broadcasting to all devices, the VTEP intercepts the broadcast request, converts it to a unicast request, and forwards it through the overlay network to the designated DHCP server, which then responds through the same path. This intermediary approach maintains service delivery while eliminating excessive broadcast traffic.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent changes the transmission parameter of DHCP requests from broadcast mode to unicast mode. By modifying the destination address parameter in the DHCP request packet and encapsulating it in a VXLAN header with the target VTEP's unicast address, the system transforms the communication pattern from one-to-all to one-to-one, thereby reducing broadcast traffic while maintaining reliable DHCP service delivery.

Inventive Principle:
Principle #35Parameter changes

2Adaptability or versatility

If DHCP requests are broadcast to all VTEP devices, then DHCP service can be provided to all hosts, but security is compromised as requests are exposed to all devices

Engineering Contradiction:
ImproveDHCP service coverageVSAvoidsecurity risk
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The VTEP device serves as a secure intermediary that controls and manages DHCP request forwarding. By intercepting broadcast requests and converting them to directed unicast requests to specific DHCP servers, the VTEP ensures that only authorized devices receive DHCP traffic. This intermediary mechanism maintains universal DHCP service coverage while eliminating security risks associated with broad broadcast exposure.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent extracts the DHCP relay functionality from the traditional broadcast mechanism and implements it as a separate, controlled unicast forwarding process. By taking out the broadcast nature of DHCP requests and replacing it with targeted unicast forwarding through the overlay network, the system maintains service coverage across all hosts while removing the security vulnerability of exposing requests to all VTEP devices.

Inventive Principle:
Principle #2Taking out (Extraction)

3Object-generated harmful factors

If leaf VTEP devices relay DHCP requests directly to external servers, then broadcast traffic is reduced, but leaf VTEP devices lack Layer 3 relay functionality

Engineering Contradiction:
Improvebroadcast trafficVSAvoidVTEP device capability
Core Design Contradiction:
Object-generated harmful factorsVSDevice complexity

Solution Approach 1:

The patent resolves the capability limitation by adding a new dimension to the VTEP device functionality through VXLAN encapsulation. By embedding the DHCP request within a VXLAN header that contains the destination VTEP's unicast address, the system enables Layer 3-like directed forwarding capability without requiring the leaf VTEP to have native Layer 3 relay functionality. This dimensional approach allows broadcast traffic reduction while maintaining device capability constraints.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

Data Source

PatentEP4229837B1DHCP layer 2 relay in vxlan overlay fabric
Publication Date: 2026.03.04 CISCO TECHNOLOGY INC
  • EP4229837B1 patent drawingFigure 1
  • EP4229837B1 patent drawingFigure 2
  • EP4229837B1 patent drawingFigure 3

AI summary

This technology enables a dynamic host configuration protocol ("DHCP") Layer 2 relay in a Virtual Extensible Local Area Network ("VXLAN") overlay fabric. A host device broadcasts a configuration request, such as a DHCP discover, across an Ethernet virtual private network ("EVPN") overlay fabric. The DHCP discover is intercepted by a VXLAN Tunnel End Point ("VTEP") device with Layer 2 bridging functionality. The VTEP device selects a centralized gateway ("CGW") device with Layer 3 relay functionality as a destination for the DHCP discover. The VTEP device encapsulates the DHCP discover with a unicast VXLAN header comprising the media access control ("MAC") address of the CGW device and transmits the encapsulated DHCP discover to the CGW device, resolving the destination address associated with the broadcast. The CGW device transmits the DHCP discover to an Internet Protocol ("IP") address associated with a DHCP server that is external to the EVPN overlay fabric.