After attending CiscoLive EMEA in Barcelona last week, I wanted to get the break-out presentations for reference and to revisit sessions I couldn’t make it to. While the CiscoLive website isn’t bad, it’s not great either and I found myself spending too much time to search and go through the available presentations.
Luckily, the content catalogue seemed to use an open API with a central repository of all session data (including the session id, title and PDF url). I was able to grab it and parse it into a simple list of session id, title, type and category with a … Read more
Just as the title says, NSX-v 6.4 has just dropped. I my opinion, they should’ve called it NSX-v 7.0 though, considering the amount of new and cool stuff that is in there. I’ll go through the most prolific new and shiny features below.
Distributed Firewall Layer 7 Functionality – App ID
Traditionally the DFW could handle layer 2 to layer 4 rules. With NSX 6.4, there is some layer 7 functionality which becomes available. This is done by pushing a new VIB to ESXi hosts which looks inside the traffic flows. This new module will recognise App ID inside network … Read more
NSX Manager has a backup and restore functionality. That process creates a backup of the entire NSX fabric and puts that backup on a remote (s)FTP server. All configuration is available within that backup, the Edge configuration is not separate. Being a good IT-citizen, of course the backup is one of the configurations you do during the installation, so you always have a backup available.
I have a couple points for this post:
- You can restore a NSX Manager backup non-disruptively (*),
- When you restore a NSX Manager backup, existing NSX Edges are not effected and continue to operate,
… Read more
With the release of vRealize Network Insight 3.6, the flow analyser inside vRNI now supports external sources for NetFlow. This means you can perform micro segmentation planning on physical servers (before you migrate them to virtual) and create deep insight into what network traffic is going through your entire network (and not just limited to what’s happening in your virtual network).
Currently, NetFlow versions 5, 7, 9 and IPFIX are supported. Getting started with NetFlow in vRNI is pretty easy, but it is slightly more complicated than regular data sources.
I say it’s slightly more complicated, because … Read more
VMware NSX 6.3.5 was released last week. This is a maintenance release and addresses 32 issues in previous versions. You can find the release notes here.
One thing caught my eye which is a very welcome addition to 6.3.5;
- Host prep now has troubleshooting enhancements, including additional information for “not ready” errors
As the release notes don’t go into detail what that exactly means, I did some digging. From 6.3.5 and above, the NSX UI will now show the failure messages from EAM when the host preparation fails. For instance, you’ll see if the communication between EAM and the … Read more
Sorry, you actually can’t configure two Netflow targets in vSphere. 😉
HOWEVER! There’s a way around this limitation. Currently, the VDS only supports one Netflow target IP address to send NetFlow to. This limitation can cause some issues when you want to employ multiple Netflow collectors, for instance an existing Network Management System (NMS) and do a vRealize Network Insight Assessment.
What is Netflow?
I’m not going to explain Netflow in depth, but just to set the stage here’s a small summary. Netflow is a protocol that allows you to collect information about what traffic flows are going through … Read more
The VMware Fling labs is one of my favourite things, as it brings some awesome new tech straight from VMware R&D. Some of these flings flow to the product cycles (remember the HTML5 client, now default in vCenter?). And they did it again!
Ever since I’ve seen an internal session about this product, I’ve been anxiously waiting for it to be released (one way or another). Autopology just dropped on the Flings website. Autopology is a translator between your network drawings and the real-life configuration. It is a what-you-see-is-what-you-get editor where you can create drawings of a network topology and … Read more