Any body has used Traffic filtering and markingfor traffic filtering, such as dropping traffic, creating port groups restrictions per vm's, or creating dmz like rule sets, etc?
Correct, you don't need NSX, this is a core feature of the distributed vSwitch available since vSphere 5.5, it allows you to create layer 2 and layer 3/4 firewall rules on distributed port groups or distributed ports.
I've used it to isolate VMs on DMZ networks similar to what a PVLAN setup would achieve and I would say it works good enough, at least on a small scale.
Thanks for the info, I'm aware of NSX, and that's actually one of the reason i'm asking (NSX is not cheap), I don't need per vm, per port group would be fine.
Correct, you don't need NSX, this is a core feature of the distributed vSwitch available since vSphere 5.5, it allows you to create layer 2 and layer 3/4 firewall rules on distributed port groups or distributed ports.
I've used it to isolate VMs on DMZ networks similar to what a PVLAN setup would achieve and I would say it works good enough, at least on a small scale.
