Part 4 built the datacenter fabric and proved EVPN worked across all three sites. The DCI overlay exchanged type-2 MAC routes between DC-A, DC-B, and DC-C, so a K3s node on a leaf in one datacenter could reach a node on a leaf in another, and a ping across the stretched VXLAN data plane came back with zero loss. What Part 4 did not build was a way for that SERVERS traffic to leave the fabric. The servers could reach each other across every DC, but they had no path to the internet.
This post builds that exit. By the end, a server in any of the three DCs can reach the internet through BORDER1, and the return traffic finds its way back.




