Vro vs vswitch

A vswitch is a network device that can encapsulate and forward data packets based on MAC (hardware address of the network adapter. The switch can "Learn" the MAC address and store it in the internal address table. By creating a temporary exchange path between the initiator of the data frame and the Target receiver, the data frame can directly reach the destination address from the source address. A vswitch is mainly composed of a LAN. For example, a company's network is usually built using a vswitch. A vswitch cannot forward data packets or route data to a destination address. currently, vswitches are divided into two types: layer-2 switches and layer-3 switches. A layer-3 Switch has the functions of a vro. A router is an important part of a wide area network. A router is the most suitable route for data packets. the main difference between a vro and a vswitch lies in the following aspects: (1) a vswitch at different working levels originally works at the data link layer of the OSI/RM open architecture, that is, the second layer, and the router was designed to work at the OSI model's network layer from the very beginning. Because the switch operates on the second layer (data link layer) of OSI, its working principle is relatively simple, while the router works on the third layer (Network Layer) of OSI ), more protocol information can be obtained, and routers can make more intelligent forwarding decisions. (2) Data Forwarding is based on different objects. Different vswitches use physical addresses or MAC addresses to determine the destination address for data forwarding. A vro uses the idnumber (IP address) of different networks to determine the data forwarding address. IP addresses are implemented in software and describe the network where the device is located. Sometimes these layer-3 addresses are also called protocol addresses or network addresses. The MAC address is usually provided by the hardware and allocated by the NIC manufacturer, and has been fixed to the NIC. Generally, it cannot be changed. The IP address is usually automatically assigned by the network administrator or the system. (3) Traditional vswitches can only be divided into conflicting domains and cannot be divided into broadcast domains. vrouters can be divided into broadcast domains. The CIDR blocks connected by vswitches still belong to the same broadcast domain, broadcast packets are transmitted across all network segments connected to the vswitch. In some cases, communication congestion and security vulnerabilities may occur. The CIDR blocks connected to the vro are allocated to different broadcast domains, and the broadcast data does not pass through the vro. Although vswitches above Layer 3 Have VLAN functions and can also be divided into broadcast domains, communication between subbroadcast domains is not allowed, and communication between them still requires routers. (4) The router provides a Firewall Service Router that only forwards data packets of a specific address. It does not transmit data packets that do not support the routing protocol or unknown destination network data packets, thus preventing broadcast storms. If you do not know much about the network, it is difficult to see the above professional knowledge. The most popular language is that the switch is responsible for communication within the same network segment, and the router is responsible for communication between different network segments.