NSX Data Center Archives - Page 3 of 10

VMware NSX 6.3 is here!

February 2, 2017 / Martijn / 0 Comments

NSX 6.3 has just been made generally available and it’s a humongous one. The changes in this new version reflect a new maturation phase in which NSX is now in. Here are my top picks, for the entire list of changes go here.

Controller Disconnect Operation (CDO) Mode

The control plane and data plane in SDN are inherently separated from each other. The control plane can be shut down without affecting the data plane, at least, affecting it immediately. Once the control plane is down, no changes can be made and the data plane operators (in NSXs case, the … Read more

Using VMware NSX to get IPv6 connectivity at home

December 18, 2016 / Martijn / 0 Comments

IPv6 is here and IPv4 is definitely running out of time. Here in the Netherlands, the consumer internet providers have been “working on it” for years. I’ve been lobbying for IPv6 connectivity for years, without much luck. After a time of experimenting with IPv6-over-IPv4 tunnels and Teredo, I basically gave up on those technologies due to various reasons; high latency, complexity & subnet reputation (a lot of shady stuff was going on those free IPv6 subnets).

Recently, I finalized my IPv6 implementation in my hosted environment (couple of websites, other apps/databases), which also contains a NSX testlab. Considering … Read more

Connecting a VPN between AWS and VMware NSX

November 8, 2016 / Martijn / 2 Comments

Amazon Web Services has a few ways of giving you connectivity: internet, Direct Connect (a physical line) and VPN. While AWS has a ton of examples for firewall/VPN vendors, there is none for connecting with NSX. I needed to connect a NSX network with AWS for a proof of concept and had to figure out how to configure AWS and what settings to use on the NSX Edge VPN. Behold, the fruits of my labor!

This is what we are going to be building in this post. Compute resources inside AWS connected with a VPN towards VMware NSX for corporate … Read more

Monitoring Firewall Rules with vRealize Network Insight

October 24, 2016 / Martijn / 0 Comments

vRealize Network Insight (vRNI) is most famous for its ability to help you with getting insight into your virtual traffic flows. Using that information you have all you need to configure micro-segmentation. vRNI is much more than that though and this post is the first of a series going into depth of some of the awesome capabilities of vRNI.

All Your Firewall Rules Belong to vRNI

One thing vRNI does, is inventory all the network configuration of the data sources (devices such as switches, routers, firewalls) you add to it. Among those data sources, NSX and Palo Alto Network devices … Read more

PowerCLI for OS X & Linux Fling

October 19, 2016 / Martijn / 0 Comments

Just before all the buzz started from VMworld (such as the vSphere 6.5 release), the VMware fling team dropped a huge release. The first version of PowerCLI for OS X and Linux is available!

PowerCLI – Current State

While this is a fling, a lot of work has gone into making the proper cmdlets available for your everyday vSphere management duties. But there’s still a lot of work to be done. The comparison table between the PowerCLI version for Windows and the fling that has just been released is below:

This is the beginning of an awesome cross-platform experience for … Read more

NSX SpoofGuard Automatic Approvals through your IPAM

October 4, 2016 / Martijn / 0 Comments

VMware NSX provides a (heavily underestimated) SpoofGuard functionality, which prevents virtual machines to use IP addresses that are not approved by the network engineers. It guards for, guess what, IP spoofs. Virtual machines will not be able to change their IP addresses without administrative approval, which prevents issues with unauthorized changes or duplicate IPs.

SpoofGuard in NSX

SpoofGuard can operate in 3 modes:

– Approve everything (the default);
– Automatically approve first detected IP, manual approve changes;
– Manually approve all first detected IPs and changes.

While having control of the IP address changes in the virtual network is pretty … Read more

Please stop stretching your VLANs, virtualize your network

August 9, 2016 / Martijn / 0 Comments

Network admins hate stretching VLANs across data centers, we absolutely hate it. It causes potential instability on a inter-data center scope, destroys our isolated fault domains; something happens with VLAN X on site A, it also can take down site B (unless you take special precautions). I spent a few hours last week and the week before to help out customers that had that exact issue, which triggered this post.

The entire idea of stretching VLANs between data centers is about virtual machine mobility. You can do a failover between sites and don’t have to make adjustments to your applications … Read more

Lostdomain

Tagcloud

CategoryNSX Data Center