Book Image

VMware NSX Network Essentials

By : sreejith c
Book Image

VMware NSX Network Essentials

By: sreejith c

Overview of this book

VMware NSX is at the forefront of the software-defined networking revolution. It makes it even easier for organizations to unlock the full benefits of a software-defined data center – scalability, flexibility – while adding in vital security and automation features to keep any sysadmin happy. Software alone won’t power your business – with NSX you can use it more effectively than ever before, optimizing your resources and reducing costs. Getting started should be easy – this guide makes sure it is. It takes you through the core components of NSX, demonstrating how to set it up, customize it within your current network architecture. You’ll learn the principles of effective design, as well as some things you may need to take into consideration when you’re creating your virtual networks. We’ll also show you how to construct and maintain virtual networks, and how to deal with any tricky situations and failures. By the end, you’ll be confident you can deliver, scale and secure an exemplary virtualized network with NSX.
Table of Contents (15 chapters)
VMware NSX Network Essentials
Credits
Foreword
About the Author
About the Reviewer
www.PacktPub.com
Preface

NSX Distributed Firewall


NSX Distributed Firewall (DFW) focuses on East-West traffic and NSX Edge firewall focuses on North-South traffic. Those of us who remember the vCloud network security days will feel like this is an enhancement of the vShield app. Okay! For now, I would certainly agree with that; it is certainly an enhanced feature-rich version of the vShield app firewall. But the app demands that you run a dedicated firewall VM for each host and the virtual machine remains protected irrespective of where they are moving. Apart from the fact that it demands a hypervisor-specific firewall (FW) virtual machine, it was a featureless firewall and installation and troubleshooting was also slightly tedious. NSX Distributed Firewall is a hypervisor kernel-embedded firewall and policies are totally virtualization-aware. What does that mean? We can apply policies on vCenter objects such as data centers and clusters and virtual machine names and tags, and network constructs such as IP/VLAN...