Network virtualisation is the abstraction of physical networking resources into logical networks that can be created, configured, isolated and managed independently of the underlying physical infrastructure. Instead of requiring every logical network to correspond directly to a separate physical switch, cable or interface, virtualisation allows multiple virtual networks to share common hardware. A virtual network can include virtual switches, virtual routers, logical segments, virtual interfaces and software-defined security policies.
This approach is fundamental to cloud computing, server virtualisation, modern data centres and multi-tenant infrastructure because large numbers of independent workloads need network connectivity without requiring dedicated physical networks for each workload. Network virtualisation can operate at different layers and can involve VLANs, virtual switching, tunnelling, overlays, virtual network functions and software-defined networking.
Server virtualisation provides a common context for understanding network virtualisation. A physical server may host many virtual machines, and each virtual machine can have one or more virtual network interfaces. A software switch on the host can connect those interfaces to one another or to physical network adapters. Virtual routers can provide Layer 3 connectivity between logical networks, while virtual firewalls can enforce security policies.
From the perspective of the virtual machine, the network can appear similar to a physical network even though the packets may pass through multiple software and hardware layers before reaching their destination. The physical network therefore becomes an underlay that transports traffic, while the virtual network provides the logical connectivity model presented to applications and workloads.
VLANs are an established form of network segmentation in which Ethernet frames are associated with logical broadcast domains using IEEE 802.1Q tagging. VLANs provide useful isolation but have scalability and architectural limitations when extremely large numbers of logical networks or geographically distributed workloads are required. Overlay virtualisation addresses some of these limitations by encapsulating packets belonging to a virtual network inside packets carried across an IP-based physical network. VXLAN is a prominent example and uses a 24-bit virtual network identifier, allowing a much larger number of logical segments than the traditional 12-bit VLAN identifier space. Other overlay technologies exist, and the exact encapsulation, control plane and deployment model depend on the platform.
Network virtualisation commonly separates an underlay from an overlay. The underlay is the physical network that provides basic IP connectivity between endpoints, while the overlay represents logical networks built on top of that connectivity. Tunnel endpoints encapsulate and decapsulate packets as they enter and leave an overlay. A control plane may distribute information about which workloads are attached to which logical networks and where those workloads are located.
EVPN, for example, can provide a control-plane mechanism for distributing Ethernet and IP reachability information in VXLAN-based architectures. This separation allows administrators to modify logical network topology without repeatedly changing physical switch configurations. The physical network can concentrate on reliable packet transport while software manages tenant networks, workload mobility and segmentation.
Network virtualisation is closely associated with multi-tenancy. Cloud providers and large organisations may operate thousands of isolated logical networks on shared physical infrastructure. Each tenant or application environment can receive its own address space, security rules, routing policies and virtual network services. Proper isolation prevents traffic belonging to one logical network from being delivered to another unless an explicitly configured connection exists. Virtual network appliances can provide services such as firewalls, load balancers, routers, VPN gateways and network address translation. Because these services are implemented in software, they can be provisioned dynamically and scaled according to workload requirements. The resulting model is similar to other forms of virtual infrastructure in which physical resources are pooled and allocated through software-defined abstractions.
Software-defined networking and network virtualisation are related but distinct concepts. Network virtualisation focuses on creating logical networks independent of physical topology, whereas software-defined networking generally refers to architectures that make network control programmable and potentially separate control decisions from packet forwarding. A system can use network virtualisation without adopting every feature associated with SDN, and an SDN controller can manage physical as well as virtual resources.
Network functions virtualisation, or NFV, is another related concept that focuses specifically on implementing network functions such as firewalls, routers and load balancers as software workloads rather than dedicated appliances. These concepts often appear together in modern cloud and data-centre architectures but solve different abstraction and management problems.
Network virtualisation provides advantages in flexibility, resource utilisation, automation and isolation. New logical networks can be created rapidly without installing new physical cabling, and workloads can potentially move between physical hosts while retaining their logical network identity. Centralised policy management can make segmentation and access control more consistent. However, virtualisation introduces additional layers of encapsulation, control-plane complexity and troubleshooting requirements.
Encapsulation consumes some bandwidth and processing resources, while failures in virtual switches, tunnel endpoints or controllers can affect many logical networks simultaneously. Misconfigured virtual policies can also create security problems that are difficult to detect because the physical network may appear healthy even when the logical network is incorrectly configured. Monitoring therefore needs visibility into both the underlay and overlay.
Network virtualisation has become a foundational technology for cloud platforms and software-defined data centres because modern applications require networks that are as dynamic as the workloads they connect. It allows logical connectivity, addressing, segmentation and network services to be expressed in software and changed independently of physical infrastructure. The essential principle is abstraction: physical switches, links and interfaces provide shared transport capacity, while virtual network constructs provide application-specific connectivity.
Technologies such as VLANs, virtual switches, VXLAN, EVPN, virtual routers and programmable network policies implement different aspects of this model. The result is a network architecture capable of supporting large numbers of dynamic workloads and isolated environments, although achieving reliability and security still requires careful design of both the physical underlay and the virtual overlay.
