Skip to main content

03 · Spine–leaf fabric

Clos architecture, fully redundant L3 pathing

North–SouthEast–WestAir-gap / at-riskPeer / HA linkFabric mesh GATEWAY FIREWALLS · TWO HA PAIRS, CROSS-LINKEDFW1A + FW1Bactive / standbyFW2A + FW2Bactive / standbyEdge Router / Switch 1Edge Router / Switch 2L3 routed north–south · OSPF / BGPLAYER 3 ROUTED CORE · P2P LINKS, NO L2 BETWEEN TIERSSpine Switch ASpine Switch BLeaf 1A/1BRack 1Leaf 2A/2BRack 2Leaf 3A/3BRack 3SERVER RACKS WITH LEAF / TOR SWITCHES · FULL MESHL2 overlay (optional) · VXLAN / EVPN

Key properties​

  • Internet & public services enter over L3 links (100GbE P2P), dynamically routed (OSPF / BGP).
  • Full-mesh interconnect — every leaf reaches every spine.
  • L2 overlay, optional — VXLAN / EVPN across racks.