EVPN (Ethernet Virtual Private Network) is a technology that enables organizations to extend their Layer 2 and Layer 3 networks across different sites. It enhances traditional VPN services with strong multi-tenancy and segmentation capabilities, which is why it has become a key building block both in service provider networks and in modern data center designs.
A defining characteristic of EVPN is that the same control plane can run over different data plane options. The three main choices are MPLS (Multiprotocol Label Switching), VXLAN (Virtual Extensible LAN), and PBB (Provider Backbone Bridges). In this article, we compare EVPN over MPLS with EVPN over VXLAN in detail, look at where PBB-EVPN fits, and discuss how to choose between them.
I strongly recommend checking the EVPN VXLAN Course for those who want to learn more about this topic.
EVPN over MPLS
EVPN over MPLS is a popular deployment option that uses MPLS labels to transport EVPN traffic between different sites. MPLS is a mature technology that has been widely used in service provider networks to provide traffic engineering and VPN services, forwarding traffic based on short path labels rather than long network addresses.
EVPN over MPLS enables organizations to leverage their existing MPLS infrastructure and extend their Layer 2 and Layer 3 networks across different sites. Its ability to carry multiple services over a single infrastructure makes it especially attractive for service providers running multi-service networks.
Benefits of EVPN over MPLS
Efficient use of network resources: MPLS labels enable the efficient use of network resources through traffic engineering and quality of service (QoS) mechanisms.
Mature technology: MPLS is a proven technology that has been widely used in service provider networks to deliver VPN services.
Support for multicast: EVPN over MPLS supports multicast services, which enable organizations to transport multicast traffic across different sites.
Fast convergence times: MPLS enables fast convergence through label switching and fast rerouting mechanisms.
Drawbacks of EVPN over MPLS
Complexity: MPLS is a complex technology that requires specialized skills and expertise to deploy and manage.
Limited scalability: MPLS labels have limited scalability, which can make it difficult to support very large-scale networks.
Limited flexibility: MPLS has limited flexibility, which can make it difficult to support dynamic network topologies and changing business requirements.
EVPN over VXLAN
EVPN over VXLAN uses VXLAN encapsulation to transport EVPN traffic between different sites. VXLAN is a virtualization technology that creates virtual Layer 2 networks as an overlay on top of an existing Layer 3 (IP) infrastructure.
Because it only requires IP reachability underneath, EVPN over VXLAN lets organizations leverage their existing Layer 3 infrastructure. This is particularly beneficial in data centers, where logically isolated networks can be created on the same physical infrastructure — essential in the multi-tenant environments common in cloud services. Today, VXLAN is the most commonly deployed data plane option with EVPN.
Benefits of EVPN over VXLAN
Scalability: VXLAN encapsulation enables scalable network virtualization and addresses the scale challenges of large cloud and data center deployments.
Flexibility: VXLAN supports flexible network topologies and adapts to dynamic network changes and evolving business requirements.
Support for multicast: VXLAN supports multicast services, which enable organizations to transport multicast traffic across different sites.
Easy to deploy: VXLAN is easy to deploy and manage over any IP network, which can reduce operational costs.
Drawbacks of EVPN over VXLAN
Performance: VXLAN encapsulation adds overhead to network traffic, which can impact network performance.
Limited support for traffic engineering: VXLAN has limited support for traffic engineering, which can impact the efficient use of network resources.
Limited support for QoS: VXLAN has limited support for QoS mechanisms, which can impact the delivery of high-priority traffic.
PBB-EVPN: Enhanced Isolation and MAC-Address Scalability
The third data plane option is PBB (Provider Backbone Bridges), also known as MAC-in-MAC. PBB encapsulates customer MAC addresses inside a service provider MAC address, keeping customer networks entirely distinct from each other. This granular traffic segregation makes it a strong choice for service providers that manage extensive networks with high demands for security and data integrity.
In an EVPN context, PBB improves scalability by significantly reducing the MAC address learning and broadcasting required in the provider network. This simplifies the management of large networks and improves performance by minimizing overhead. While not as widely adopted as VXLAN in data center environments, PBB-EVPN remains a robust option for large service providers running extensive multi-tenant environments.
MPLS vs. VXLAN at a Glance
AspectEVPN over MPLSEVPN over VXLAN MaturityMature, widely deployed in service provider networksNewer, now the most common EVPN data plane Underlay requirementMPLS label-switched infrastructureAny Layer 3 (IP) infrastructure ScalabilityLimitedHigh — designed for large-scale virtualization FlexibilityLimited for dynamic topologiesHigh — adapts to changing requirements Traffic engineering & QoSStrongLimited Multicast supportYesYes Encapsulation overheadLow (labels)Higher — can impact performance Typical environmentService provider WAN, multi-service networksData center and cloud, multi-tenant environmentsHow to Choose the Right Data Plane
The choice largely hinges on your specific network requirements and operational context:
Choose EVPN over MPLS if you already operate an MPLS backbone and need traffic engineering, QoS, and multi-service support — a tested solution for complex service provider networks.
Choose EVPN over VXLAN for data center and cloud environments where scalability, flexibility, and simple deployment over an IP underlay matter most.
Choose PBB-EVPN when you need the highest level of traffic isolation and must control MAC address proliferation in a very large service provider network.
Conclusion
EVPN can run over multiple data planes — MPLS, VXLAN, and PBB — and each option targets different needs. EVPN over MPLS offers efficient use of network resources, strong traffic engineering and QoS, and multicast support, but it is complex and limited in scalability and flexibility. EVPN over VXLAN offers scalability, flexibility, and easy deployment over any IP infrastructure, but adds encapsulation overhead and has limited traffic engineering and QoS support. PBB-EVPN provides the strongest traffic isolation and keeps MAC address learning under control in large provider networks.
VXLAN is currently the most widely deployed choice, particularly in data center and cloud environments. Still, organizations should evaluate their own business requirements and existing network infrastructure — rather than popularity alone — when selecting an EVPN data plane option.
