bgp + vxlan + evpn is pretty standard in datacenters now. I’m surprised they’re running udhcpd in a ns, instead of cloud-init data iso directly. While it wasnt stated but I think using nft/based firewall is pretty common. For kvm anyone knows if they use qemu or something else for vmm, directly or via libvirtd.