Hi,
I am playing with Fortigate in AWS together with AWS GWLB and Geneve encapsulation. To my surprise it works, but I would like to understand HOW.
The packets from AWS GWLB endpoint service are coming to the FGT encapsulated with Geneve protocol. To differentiate between multiple source VPCs (GWLB endpoints), AWS adds optional identifier attributes (TLVs) to the packet metadata in incoming packets. With VDOMs you can have multiple logical Geneve interfaces separated by those identifiers. But as we have the PAYG licensing, we don't have VDOMs.
No here the question: As it works fine even without VDOMs - without having the traffic differentiated by logical interface - how can Fortigate know which Geneve TLV identifier to add to outgoing packets? Is this information stored in the session table?
Thanks & regards
Markus
PS: If there is any mod here - please move this to the AWS related group if possible
