VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink!...
Transcript of VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink!...
![Page 1: VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink! The Software Defined Datacenter . There are two approaches Hardware Defined OR Data](https://reader033.fdocuments.net/reader033/viewer/2022050603/5faaef502b63ac7f477ee7a5/html5/thumbnails/1.jpg)
© 2014 VMware Inc. All rights reserved.
VMware NSX overview
Geordy Korte
Keep calm and don’t blink!
![Page 2: VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink! The Software Defined Datacenter . There are two approaches Hardware Defined OR Data](https://reader033.fdocuments.net/reader033/viewer/2022050603/5faaef502b63ac7f477ee7a5/html5/thumbnails/2.jpg)
The Software Defined Datacenter
![Page 3: VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink! The Software Defined Datacenter . There are two approaches Hardware Defined OR Data](https://reader033.fdocuments.net/reader033/viewer/2022050603/5faaef502b63ac7f477ee7a5/html5/thumbnails/3.jpg)
There are two approaches
Hardware Defined
Data Center (HDDC)
Any Application
HDDC Platform
Integrated x86
Integrated Storage
Vendor Specific
Network
Ve
rtic
al In
teg
ratio
n
Software Defined
Data Center (SDDC)
Any Application
SDDC Platform
Any x86
Any Storage
Any IP network
Data Center Virtualization
OR
Software
Controller
![Page 4: VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink! The Software Defined Datacenter . There are two approaches Hardware Defined OR Data](https://reader033.fdocuments.net/reader033/viewer/2022050603/5faaef502b63ac7f477ee7a5/html5/thumbnails/4.jpg)
Component requirements
![Page 5: VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink! The Software Defined Datacenter . There are two approaches Hardware Defined OR Data](https://reader033.fdocuments.net/reader033/viewer/2022050603/5faaef502b63ac7f477ee7a5/html5/thumbnails/5.jpg)
Building an SDDC
![Page 6: VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink! The Software Defined Datacenter . There are two approaches Hardware Defined OR Data](https://reader033.fdocuments.net/reader033/viewer/2022050603/5faaef502b63ac7f477ee7a5/html5/thumbnails/6.jpg)
A data center network…
Internet
![Page 7: VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink! The Software Defined Datacenter . There are two approaches Hardware Defined OR Data](https://reader033.fdocuments.net/reader033/viewer/2022050603/5faaef502b63ac7f477ee7a5/html5/thumbnails/7.jpg)
Compute infrastructure….
Internet
![Page 8: VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink! The Software Defined Datacenter . There are two approaches Hardware Defined OR Data](https://reader033.fdocuments.net/reader033/viewer/2022050603/5faaef502b63ac7f477ee7a5/html5/thumbnails/8.jpg)
Hypervisors and vSwitches…
Internet
![Page 9: VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink! The Software Defined Datacenter . There are two approaches Hardware Defined OR Data](https://reader033.fdocuments.net/reader033/viewer/2022050603/5faaef502b63ac7f477ee7a5/html5/thumbnails/9.jpg)
NSX | The “Network Hypervisor”
Internet
![Page 10: VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink! The Software Defined Datacenter . There are two approaches Hardware Defined OR Data](https://reader033.fdocuments.net/reader033/viewer/2022050603/5faaef502b63ac7f477ee7a5/html5/thumbnails/10.jpg)
Virtual Networks – Like Virtual Machines for the Network
Internet
![Page 11: VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink! The Software Defined Datacenter . There are two approaches Hardware Defined OR Data](https://reader033.fdocuments.net/reader033/viewer/2022050603/5faaef502b63ac7f477ee7a5/html5/thumbnails/11.jpg)
What is a virtual network?
![Page 12: VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink! The Software Defined Datacenter . There are two approaches Hardware Defined OR Data](https://reader033.fdocuments.net/reader033/viewer/2022050603/5faaef502b63ac7f477ee7a5/html5/thumbnails/12.jpg)
What is a virtual network?
![Page 13: VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink! The Software Defined Datacenter . There are two approaches Hardware Defined OR Data](https://reader033.fdocuments.net/reader033/viewer/2022050603/5faaef502b63ac7f477ee7a5/html5/thumbnails/13.jpg)
What is a virtual network?
![Page 14: VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink! The Software Defined Datacenter . There are two approaches Hardware Defined OR Data](https://reader033.fdocuments.net/reader033/viewer/2022050603/5faaef502b63ac7f477ee7a5/html5/thumbnails/14.jpg)
Programmatically Provisioned
![Page 15: VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink! The Software Defined Datacenter . There are two approaches Hardware Defined OR Data](https://reader033.fdocuments.net/reader033/viewer/2022050603/5faaef502b63ac7f477ee7a5/html5/thumbnails/15.jpg)
Physical Workloads and Legacy VLANs
![Page 16: VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink! The Software Defined Datacenter . There are two approaches Hardware Defined OR Data](https://reader033.fdocuments.net/reader033/viewer/2022050603/5faaef502b63ac7f477ee7a5/html5/thumbnails/16.jpg)
Security – Complete Isolation
![Page 17: VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink! The Software Defined Datacenter . There are two approaches Hardware Defined OR Data](https://reader033.fdocuments.net/reader033/viewer/2022050603/5faaef502b63ac7f477ee7a5/html5/thumbnails/17.jpg)
Central Policies, Distributed Enforcement, Move with VMs
Internet
Security Policy Security Policy
![Page 18: VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink! The Software Defined Datacenter . There are two approaches Hardware Defined OR Data](https://reader033.fdocuments.net/reader033/viewer/2022050603/5faaef502b63ac7f477ee7a5/html5/thumbnails/18.jpg)
Inner workings
![Page 19: VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink! The Software Defined Datacenter . There are two approaches Hardware Defined OR Data](https://reader033.fdocuments.net/reader033/viewer/2022050603/5faaef502b63ac7f477ee7a5/html5/thumbnails/19.jpg)
Architecture
vCD/vCAC
vCenter Server NSX Manager 1:1
Management Plane
Control Plane
NSX Edge
Distributed
Router
Controller
Data Plane
NSX Edge
Services Router
VXLAN DR DFW Security VXLAN DR DFW Security
1:Many
VXLAN DR DFW Security
![Page 20: VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink! The Software Defined Datacenter . There are two approaches Hardware Defined OR Data](https://reader033.fdocuments.net/reader033/viewer/2022050603/5faaef502b63ac7f477ee7a5/html5/thumbnails/20.jpg)
Management Plane
Self service and on-demand Provisioning of Infrastructure
Abstracted pool of services (Compute/Storage/Network)
Catalogue of applications
vCD/vCAC
vCenter Server NSX Manager 1:1
Management Plane
Provisioning and
Management of
Compute/Memory
Storage
Virtual Switch
Provisioning and
Management of Network and
Network services
VXLAN Preparation
Logical Network Consumption
Network Services
Configuration
vCD/vCAC vCenter Server NSX Manager
![Page 21: VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink! The Software Defined Datacenter . There are two approaches Hardware Defined OR Data](https://reader033.fdocuments.net/reader033/viewer/2022050603/5faaef502b63ac7f477ee7a5/html5/thumbnails/21.jpg)
Control Plane
Dynamic Routing
VXLAN – VLAN Bridging
Scale Out
VXLAN - no Multicast
ARP suppression
Distributed Routing
Control Plane
NSX Edge
Distributed
Router
Controller
NSX Edge Distributed Router Controller
![Page 22: VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink! The Software Defined Datacenter . There are two approaches Hardware Defined OR Data](https://reader033.fdocuments.net/reader033/viewer/2022050603/5faaef502b63ac7f477ee7a5/html5/thumbnails/22.jpg)
Dataplane
Kernel Modules
Message Bus
User World Agent
NAT
DHCP
LB
VPN
Data Plane
NSX Edge
Services Router
ESX Host NSX Edge Services Router
VXLAN DR DFW Security VXLAN DR DFW Security VXLAN DR DFW Security
![Page 23: VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink! The Software Defined Datacenter . There are two approaches Hardware Defined OR Data](https://reader033.fdocuments.net/reader033/viewer/2022050603/5faaef502b63ac7f477ee7a5/html5/thumbnails/23.jpg)
Communications
vCD/vCAC
vCenter Server NSX Manager
Management Plane
Control Plane
NSX Edge
Distributed
Router
Controller
Data Plane
NSX Edge
Services Router
VXLAN DR DFW Security VXLAN DR DFW Security VXLAN DR DFW Security
vSphere API
REST API vSphere API
REST API
VIX
A
PI
vS
ph
ere
A
PI
REST API
REST API
Messag
e B
us
![Page 24: VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink! The Software Defined Datacenter . There are two approaches Hardware Defined OR Data](https://reader033.fdocuments.net/reader033/viewer/2022050603/5faaef502b63ac7f477ee7a5/html5/thumbnails/24.jpg)
Distributed Services
![Page 25: VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink! The Software Defined Datacenter . There are two approaches Hardware Defined OR Data](https://reader033.fdocuments.net/reader033/viewer/2022050603/5faaef502b63ac7f477ee7a5/html5/thumbnails/25.jpg)
….
Firewall
Load Balancer
VPN
Routing
L3 Gateway L3
Gateway
VM VM VM VM VM
![Page 26: VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink! The Software Defined Datacenter . There are two approaches Hardware Defined OR Data](https://reader033.fdocuments.net/reader033/viewer/2022050603/5faaef502b63ac7f477ee7a5/html5/thumbnails/26.jpg)
Routing & Firewalling • OSPF/eBGP/iBGP
• Virtualization and identity context firewall
Features
• Remove hairpins and bottlenecks
• Line rate performance with distributed scale out architecture
Scale & Performance
• Create on demand networks to speed up application provisioning
Use Cases
L2
L2
Tenant A
Tenant B
L2
L2
L2 Tenant C
L2
L2
L2
![Page 27: VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink! The Software Defined Datacenter . There are two approaches Hardware Defined OR Data](https://reader033.fdocuments.net/reader033/viewer/2022050603/5faaef502b63ac7f477ee7a5/html5/thumbnails/27.jpg)
Load Balancing
Web 1 Web 3 Web 2
• TCP, HTTP, HTTPS with Stateful HA
• Multiple Virtual IPs each with separate server pool and configurations
• Multiple load balancing algorithms
• Multiple Session Persistence methods
• Configurable health checks
• Application Rules
• SSL Termination with Certificate Management
• Transparent/Full Proxy Mode
• IPv6
Features
• 10Gb/s throughput
• 50,000 CPS
• 1M Concurrent Connections
Scale & Performance
• Per Tenant Cloud LB
• Dynamic VIP for applications
Use Cases
![Page 28: VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink! The Software Defined Datacenter . There are two approaches Hardware Defined OR Data](https://reader033.fdocuments.net/reader033/viewer/2022050603/5faaef502b63ac7f477ee7a5/html5/thumbnails/28.jpg)
VPN services • Interoperable IPsec tested with major
vendors
• Clients on all major OS (Win, Apple, Linux)
• Remote Authentication via Active Directory, RSA Secure ID, LDAP, Radius
• TCP Acceleration
• Encryption – 3DES, AES128, AES256
• AESNI H/W Offload
• NAT & Perimeter Firewall Traversal
Features
• High Performance – AES-NI acceleration
• 2 Gb/s throughput per tenant
Scale and Performance
• Cloud to Corporate
• Cloud On-boarding
• Remote Office/Branch Office
• Remote Management
Use Cases Internet/
WAN
Internet/
WAN
![Page 29: VMware NSX overview - NLVMUG€¦ · VMware NSX overview Geordy Korte Keep calm and don’t blink! The Software Defined Datacenter . There are two approaches Hardware Defined OR Data](https://reader033.fdocuments.net/reader033/viewer/2022050603/5faaef502b63ac7f477ee7a5/html5/thumbnails/29.jpg)
IP
Transport Network
NSX
Controller Cluster
Northbound REST API
11.1.1.10
Gateway Service
Appliance/VM
Virtual
Network VM1
VM2
VM1
VM2
10.2.2.10
Data Plane
Control Plane
VM1 VM1
VM2
Cloud Management
Platform
1 2
10.1.1.10
VM3
192.168.1.0/24
Corpnet
20.1.1.2
VM3
Corpnet
20.1.1.2
10.97.110.10
VM2
VLAN 9
SRV4 SRV5
VLAN 9
SRV4 SRV5
1 2
Existing
DC
Network(s)