Arista’s OpenFlow implementation doesn’t support TLS encryption. Usually that’s not a big deal, as there aren’t that many customers using OpenFlow anyway, and those that do hopefully do it over a well-protected management network.
However, lack of OpenFlow TLS encryption might become an RFP showstopper… not because the customer would really need it but because the customer is in CYA mode (we don’t know what this feature is or why we’d use it, but it might be handy in a decade, so we must have it now) or because someone wants to eliminate certain vendors based on some obscure missing feature.
However, as Arista EOS runs on top of fully-open Linux (not like some other vendors that try to sandbox their customers into a container) it’s pretty easy to add OpenFlow TLS encryption with a TLS proxy (stunnel) as explained in this article (might be behind a regwall).
Regardless of what you think about running your switches on Linux, or adding third-party software to your switches, or treating the switches like servers – the ability to add components that get the job done without waiting years for your $vendor to implement them is priceless.
Ignoring minor details like ridiculously low pricing offered by a $vendor who desperately wants to get your deal, I wouldn’t buy a data center switch that I can’t manage like a Linux server these days… but maybe it’s just me having my head in the clouds.
Want to know what major data center switching vendors are doing? You’ll find an in-depth overview of their latest products and software features in the Data Center Fabric Architectures webinar.
Want to learn how to build a leaf-and-spine fabric? Take the Designing and Building Data Center Fabrics online course – it covers physical and L2/L3 fabric design, advanced topics and vendor overview, and includes vibrant support community, and hands-on exercises in.
How about mastering more than just data center networking? Hundreds of fellow networking engineers found Building Next-Generation Data Center online course extremely useful.