We have VMware in AWS SDDC. We are trying to capture traffic with an ExtraHop device. Whenever we span the NSX, it spikes the CPU on the underlying NSX. Then everytime we have a networking issue, VMware tells us to stop spanning and sends a doc about not mirroring, more then 6 VMs. What is the proper way to capture data in NSX, especially in VMware AWS, so it can be ingested by IDS? The outside vendor we bought through mentioned throwing more CPU at the NSX, but there is no guarantee.
