Book Image

VMware NSX Network Essentials

By : sreejith c
Book Image

VMware NSX Network Essentials

By: sreejith c

Overview of this book

VMware NSX is at the forefront of the software-defined networking revolution. It makes it even easier for organizations to unlock the full benefits of a software-defined data center – scalability, flexibility – while adding in vital security and automation features to keep any sysadmin happy. Software alone won’t power your business – with NSX you can use it more effectively than ever before, optimizing your resources and reducing costs. Getting started should be easy – this guide makes sure it is. It takes you through the core components of NSX, demonstrating how to set it up, customize it within your current network architecture. You’ll learn the principles of effective design, as well as some things you may need to take into consideration when you’re creating your virtual networks. We’ll also show you how to construct and maintain virtual networks, and how to deal with any tricky situations and failures. By the end, you’ll be confident you can deliver, scale and secure an exemplary virtualized network with NSX.
Table of Contents (15 chapters)
VMware NSX Network Essentials
Credits
Foreword
About the Author
About the Reviewer
www.PacktPub.com
Preface

NSX routing design decisions


Assume that we have already decided what routing protocol is required for a particular use case. Design factors are key in ensuring that they work flawlessly:

  • If we are a service provider, and multi tenancy is required for DLR control VM and Edge Services Gateway (ESG), we should deploy a separate instance, which would ease the management. We can also achieve true isolation between the tenants.

  • Area Border Router (ABR) should be a physical router.

  • If we are not leveraging the High Availability (HA) feature for ESG and DLR, ensure that tenant ESG and DLR VM are not residing on the same ESXi host. However, recommended practice would be to leverage HA for DLR control VM and ESG with vSphere HA.

  • If there is a shortage of interfaces in ESG, we should leverage the trunk interface so that multiple DLR can be connected to the same ESG.

  • DLR to DLR peering is not possible.

  • IPsec with dynamic routing is not supported.

  • Use route summarization wherever we can.

  • DLR control VM doesn...