CategoryVMware

GRE Tunnels & Dynamic Routing in NSX 6.4

There was a line in the NSX 6.4 release notes that caught my eye: “Support for BGP and static routing over GRE tunnels.” – First thought was “awesome, dynamic routing over a VPN”. But then I realized that that GRE tunnel in itself is a new feature as well, which the release notes don’t really mention. The VMware Docs website also doesn’t mention anything about it.

After a bit of digging, it appears that this feature has been added primarily to support the VMware on AWS architecture and connectivity towards that platform. But that doesn’t mean us mortals can’t use … Read more

Using PowervRNI to Quickly Add Applications

This is the second post in a series on how to use PowervRNI to manage Applications within your vRealize Network Insight environment. If you’d like to learn about managing Data Sources with PowervRNI, check here.

Applications

Introduced in vRealize Network Insight 3.2 in the begin of 2017, Applications are logical containers which can contain the structure of applications (including tiering). You can use these application containers to better visualize what network flows are going between specific applications or even application tiers. Next to insights into your applications, you can also use it to take a per-application approach to micro-segmentation, … Read more

Using PowervRNI to Quickly Add Data Sources

This is the first post in a series on how to use PowervRNI to manage your vRealize Network Insight environment. Starting with Data Sources.

Data Sources

Brief background; data sources in vRNI are endpoints from which vRNI retrieves information from. Examples are: vCenter, NSX, Switches, Routers, Firewalls, an AWS account or converged infrastructure systems like Cisco UCS or HP OneView.

Adding data sources is usually only performed when vRNI is installed into the environment and every time a new endpoint is added to your environment (for example a new vCenter environment, or when a new switch is plugged in).… Read more

NSX for vSphere 6.4 is here (and it’s massive!)

Just as the title says, NSX-v 6.4 has just dropped. I my opinion, they should’ve called it NSX-v 7.0 though, considering the amount of new and cool stuff that is in there. I’ll go through the most prolific new and shiny features below.

Distributed Firewall Layer 7 Functionality – App ID

Traditionally the DFW could handle layer 2 to layer 4 rules. With NSX 6.4, there is some layer 7 functionality which becomes available. This is done by pushing a new VIB to ESXi hosts which looks inside the traffic flows. This new module will recognise App ID inside network … Read more

Introducing PowervRNI

I am excited to introduce PowervRNI to the world! In the 3.6 release of vRealize Network Insight (vRNI) in November, there was a public API added. Through this API, you can offload certain tedious tasks like creating applications and managing data sources. I was using the private API for a couple of things already, like importing data sources. With the release of the public API, I could move those things to use the public (and supported) API. Ever since then, I’ve been working on PowervRNI.

PowervRNI

The first release of PowervRNI is on GitHub here. With this … Read more

Restoring a NSX Edge Gateway

NSX Manager has a backup and restore functionality. That process creates a backup of the entire NSX fabric and puts that backup on a remote (s)FTP server. All configuration is available within that backup, the Edge configuration is not separate. Being a good IT-citizen, of course the backup is one of the configurations you do during the installation, so you always have a backup available.

I have a couple points for this post:

  1. You can restore a NSX Manager backup non-disruptively (*),
  2. When you restore a NSX Manager backup, existing NSX Edges are not effected and continue to operate,
  3. If
Read more

NetFlow on Physical switches with vRealize Network Insight

With the release of vRealize Network Insight 3.6, the flow analyser inside vRNI now supports external sources for NetFlow. This means you can perform micro segmentation planning on physical servers (before you migrate them to virtual) and create deep insight into what network traffic is going through your entire network (and not just limited to what’s happening in your virtual network).

Currently, NetFlow versions 5, 7, 9 and IPFIX are supported. Getting started with NetFlow in vRNI is pretty easy, but it is slightly more complicated than regular data sources.

Getting Started

I say it’s slightly more complicated, because … Read more

© 2018 Lostdomain

Theme by Anders NorénUp ↑