We're thinking of using a slackware system for this purpose...

pairs of LXCs will be built and linked together with veth pairs. then a real interface (vlan interface) attached to each LXC in the pair.

(VRF) <-vlan-> ((LXC A) <-veth-> (LXC B)) <-vlan-> (VRF)

The VRFs on either end are in routers in our network. VLAN from the VRF into the LXC on eithe side. The LXCs connected together via veth pair.

All static routing in the LXCs (the routers on either side are running BFD through the LXCs).

iptables will be running in each lxc doing stateless NAT.

I see that Slackware supports RPS/RFS. I'm curious how well this will scale on a 12-core server with 16GB of RAM... How many pairs, how many sessions per lxc, etc...

We will lab this, just wondering though if anyone has done something similar? I chose slackware because it seems that they have the smallest LXC footprint and thus potentially the greatest scalability?

Derick