Book Image

VMware NSX Cookbook

By : Bayu Wibowo, Tony Sangha
Book Image

VMware NSX Cookbook

By: Bayu Wibowo, Tony Sangha

Overview of this book

This book begins with a brief introduction to VMware's NSX for vSphere Network Virtualization solutions and how to deploy and configure NSX components and features such as Logical Switching, Logical Routing, layer 2 bridging and the Edge Services Gateway. Moving on to security, the book shows you how to enable micro-segmentation through NSX Distributed Firewall and Identity Firewall and how to do service insertion via network and guest introspection. After covering all the feature configurations for single-site deployment, the focus then shifts to multi-site setups using Cross-vCenter NSX. Next, the book covers management, backing up and restoring, upgrading, and monitoring using built-in NSX features such as Flow Monitoring, Traceflow, Application Rule Manager, and Endpoint Monitoring. Towards the end, you will explore how to leverage VMware NSX REST API using various tools from Python to VMware vRealize Orchestrator.
Table of Contents (19 chapters)
Title Page
Packt Upsell
Foreword
Contributors
Preface
Index

Introduction


The NSX ESG comes in a virtual machine form factor that is managed solely by NSX. The ESG has many different functionalities in addition to routing, which provide the advanced functionalities of the NSX for vSphere platform. Each ESG can run one or more of these application services, but an ESG can also be deployed for a single purpose, which is very common in many enterprise deployments. This is done for many reasons, as an ESG used for load balancing in one-armed mode may be tied to the application, therefore it should be commissioned with the application and decommissioned with the application.

The services that can be run on the NSX ESG are as follows:

  • DNS relay
  • DHCP server
  • Network Address Translation (DNAT and SNAT)
  • Load Balancing (layer 4 and layer 7)
  • Routing:
    • BGP
    • OSPF
    • Static
  • VPN services:
    • Layer 2 VPN (L2VPN)
    • IPSEC VPN
    • SSL VPN

We will explore these core services in this chapter. For the layer 2 VPN service, which is not covered in this chapter, please refer to the NSX Administration...