This post is a part of my NSX SD-WAN by VeloCloud series to dive deeper into the acquisition of VeloCloud by VMware, late last year. I’ve had the privilege to play around with the virtual appliance for a couple of months with a physical appliance on the way. Expect more details in this series. 🙂

The upcoming chapters are building up the components that are in the VeloCloud portfolio and the components that you need to know.

Edge Appliances

An Edge Appliance is a physical or virtual appliance which is in the data path of your network traffic. It typically … Read more

Almost any organization that I’ve had the pleasure of talking with, uses Git either for code repositories where their developers work or for doing version control on their infrastructure systems. Git is an excellent version control tool and is widely used for both developers and also infrastructure configuration. This post goes into how to put the VMware NSX configuration into version control using Git.

Not all infrastructure components (server systems, network devices, etc) have a proper audit log on what happens in the configuration and who is doing what exactly. This is where version control can lend a helping hand … Read more

Ever since I moved to a new house, I’ve been stuck to a pretty bad ISP. With no fiber, a few kilometers away from the DSL termination pop (so a max of 10Mbit on ADSL), it just leaves cable. Speeds aren’t terrible, I get a 400Mbit line for E 60,- p/m. Latency spikes and jitter are horrible, but that can be expected on a cable network. Especially fun when doing internet calls. 😉

All in all, I haven’t been enjoying my internet connection for a while and I wanted to do something about it.

Dual Connection

After dismissing the thought … Read more

Over the last couple of months, Sander, Anne Jan and I have been working on a security whitepaper that lays out a practical implementation of zero trust while interfacing with a helpdesk system. In this case, OTRS.

It’s all about how engineers can get access to servers to perform maintenance, once your environment is properly micro-segmented. This whitepaper talks about the challenges you have when you’re micro-segmented and how you can resolve these challenges. Using OTRS as an example, this document lays out how to configure a help desk system like OTRS to interface with NSX to gain network … Read more

Hopefully you’ve heard the good news that VMware has acquired VeloCloud, including SD-WAN into the software-defined portfolio. This is especially exciting to me, as I get to branch out a little more into the WAN space, being in the Networking & Security BU. For me, it also means NEW TOYS! 🙂

VeloCloud primarily runs on hardware in a few flavors (no software without hardware), but they also have a VM form factor (which I’m sure will get extra attention in the future). I managed to get a hold of an OVA to run in my lab. While you … Read more

There was a line in the NSX 6.4 release notes that caught my eye: “Support for BGP and static routing over GRE tunnels.” – First thought was “awesome, dynamic routing over a VPN”. But then I realized that that GRE tunnel in itself is a new feature as well, which the release notes don’t really mention. The VMware Docs website also doesn’t mention anything about it.

After a bit of digging, it appears that this feature has been added primarily to support the VMware on AWS architecture and connectivity towards that platform. But that doesn’t mean us mortals can’t use … Read more

After attending CiscoLive EMEA in Barcelona last week, I wanted to get the break-out presentations for reference and to revisit sessions I couldn’t make it to. While the CiscoLive website isn’t bad, it’s not great either and I found myself spending too much time to search and go through the available presentations.

Luckily, the content catalogue seemed to use an open API with a central repository of all session data (including the session id, title and PDF url). I was able to grab it and parse it into a simple list of session id, title, type and category with a … Read more