Content in VMware Communities

VMware® NSX-T Reference Design

communities-emailer@vmware.com — Thu, 10 Oct 2019 17:21:25 GMT

Authors: VMware NSX Technical Product Management Team

This is the NSX-T Reference Design 2.0 based on NSX-T release 2.5. It is the foundational overhaul to design guidance and leading best practices. The key changes are:

Platform enhancements
Enterprise to Service Provider scale routing
Resilient, Optimized and Simplified Edge Node Functionality
Native Load Balancer
Performance
Design enhancements – Small to Cloud-scale

The design chapter evaluate various deployment form factors and provides best practices. It offers guidance for a variety of factors including physical infrastructure considerations, compute node requirements, and variably-sized environments from small to enterprise scale data centers.

Finally, in this version of design guide we have a chapter on performance. This chapter has been introduced on public demand from our loyal customer base and aims at clarifying the myths vs facts on NSX-T based SDN.

Starting with this design guide, readers are encouraged to send a feedback to NSXDesignFeedback@groups.vmware.com.

We will continually updating this document so please re-download this document.

--The VMware NSX Product Management

NSX-V Multi-site Options and Cross-VC NSX Design Guide

hahmed@vmware.com — Thu, 03 Oct 2019 20:37:01 GMT

NSX-T LB Encyclopedia

communities-emailer@vmware.com — Tue, 01 Oct 2019 00:37:54 GMT

NSX-T Data Center and EUC Design Guide

communities-emailer@vmware.com — Tue, 24 Sep 2019 16:02:12 GMT

This is the first iteration of the NSX-T Data Center and EUC Design Guide

Authors: VMware NSBU and EUC Technical Product Management Teams

This document is targeted toward end-user computing, virtualization, network, and security architects interested in deploying VMware® NSX in a Horizon 7 virtual desktop infrastructure environment.

Version 1.0 provides guidance around the following :

1. NSX Network Virtualization for Horizon

2. NSX Micro-segmentation for Horizon

3. NSX Load-balancing for Horizon

4. NSX and Horizon Example Architectures for Small, Medium, and Large Deployments

Feedback and Comments to the Authors and the NSX Solution Team are highly appreciated.

--The VMware NSX Solution Team

NSX-T LB ToI

communities-emailer@vmware.com — Fri, 20 Sep 2019 04:19:59 GMT

NSX-v 6.4 - Load Balancing ToI

communities-emailer@vmware.com — Mon, 19 Aug 2019 20:05:24 GMT

This document highlights NSX-v 6.4 LB capabilities and provide detailed NSX LB configuration examples list such as:

Healthchecks
- ICMP
- UDP
- TCP
- HTTP
- HTTPS
L4 VIP (using L4-LB-Engine)
- with no persistence
- with src-IP persistence
- with SNAT (Proxy Mode)
- without SNAT (Transparent Mode)
- with Port Range
- FTP
L7 HTTP VIP (using L7-LB-Engine)
- Insert client IP@ in header
- with cookie persistence
- with redirect to HTTPS site
- with AppRules
  - block specific URLs
  - redirect specific URL/Host to specific pools
  - redirect to default page
  - redirect non authent clients
  - HTTP response header rewrite
  - sorry server
  - NTLM authentication server
- with IPv6 VIP / servers IPv4
L7 HTTPS VIP (using L7-LB-Engine)
- with HTTPS passthrough
- with HTTPS off-load
- with HTTPS end-to-end
- with HTTPS off-load + selection of ciphers
- with HTTPS Client Authentication

In addition to detailed configuration examples, you can also find:

Log format
API calls examples
Deep Troubleshooting

Dimitri

OpenStack&NSX-T - Network Topologies Configuration Guide

communities-emailer@vmware.com — Fri, 26 Jul 2019 16:10:16 GMT

The goal of that document is to give a very deep technical understanding on

. How to configure the different network and security services in OpenStack

. How OpenStack/NSX-T works

It is based on OpenStack Queens.

Note: It also highlights the specifics with VIO.

Dimitri

NSX-T Manager Cluster External LB by NSX-T

communities-emailer@vmware.com — Thu, 25 Jul 2019 21:54:04 GMT

Service-defined Firewall Security Benchmark

communities-emailer@vmware.com — Mon, 15 Jul 2019 01:43:09 GMT

Attached is the Service-defined Firewall Benchmark document from Coalfire. The Service-defined Firewall is the industry’s first purpose-built internal firewall. It delivers intrinsic stateful layer 7 firewall protection to prevent lateral movement and other attack vectors specific to the internal network of on-prem, hybrid, and multi-cloud environments. Coalfire’s examination and testing of the Service-defined Firewall solution utilized simulated real-world exploits. The methodology used simulated attacks that begin with the successful compromise of a vulnerable and exploitable machine within the network and then follow with attack propagation to other machines that share network access with the exploited VM.

Service-defined Firewall Solution Architecture

communities-emailer@vmware.com — Mon, 15 Jul 2019 01:16:30 GMT

Attached is the Service-defined Firewall Solution Architecture document from the networking and security group at VMware. The Service-defined Firewall is the industry’s first purpose-built internal firewall. It delivers intrinsic stateful layer 7 firewall protection to prevent lateral movement and other attack vectors specific to the internal network of on-prem, hybrid, and multi-cloud environments.

NSX-T 2.4 - Load Balancing ToI

communities-emailer@vmware.com — Tue, 11 Jun 2019 18:54:09 GMT

This document highlights NSX-T LB capabilities and its latest NSX-T 2.4 enhancements.

NSX-T Data Center Logging Options and Configuration

communities-emailer@vmware.com — Mon, 07 Jan 2019 17:13:10 GMT

The following document covers logging options and configuration for NSX-T Data Center and it's components.

Logging options include:

API
cURL
CLI
vRealize Log Insight
Splunk

Current version - NSX-T Data Center 2.3

NSX-T Multisite Lite

communities-emailer@vmware.com — Thu, 02 May 2019 23:00:19 GMT

NSX Security Configuration Guide

communities-emailer@vmware.com — Sat, 30 Mar 2019 20:03:52 GMT

Following are the links to the NSX Security configuration guides for different software version.

NSX-T 2.4:

NSX-T 2.4 Security Configuration Guide

NSX-T 2.2:

NSX-T Secure Configuration Guide

NSX for vSphere 6.4:

NSX-v Secure Configuration Guide

NSX for vSphere 6.3:

https://communities.vmware.com/docs/DOC-28142

https://communities.vmware.com/docs/DOC-27674

--The VMware NSX PM/TPM Team

NSX-T 2.4 Security Configuration Guide

communities-emailer@vmware.com — Sat, 30 Mar 2019 20:02:36 GMT

This is the VMware® NSX-T 2.4 Security Configuration Guide.This guide provides prescriptive guidance for customers on how to deploy and operate VMware® NSX-T in a secure manner.

Guide is provided in an easy to consume spreadsheet format, with rich metadata (i.e. similar to existing NSX for vSPhere & VMware vSphere Security Configuration Guides) to allow for guideline classification and risk assessment.

Feedback and Comments to the Authors and the NSX Solution Team can be posted as comments to this community Post (Note: users must login on vmware communities before posting a comment).

Other related NSX Security Guide can be found @ https://communities.vmware.com/docs/DOC-37726

--The VMware NSX PM/TPM Team

VMware® NSX for vSphere Network Virtualization Design Guide ver 3.0

communities-emailer@vmware.com — Thu, 06 Apr 2017 22:29:52 GMT

Public Resources for Customer and Partners to learn NSX-T

communities-emailer@vmware.com — Thu, 14 Feb 2019 18:45:29 GMT

NSX-T Secure Configuration Guide

communities-emailer@vmware.com — Thu, 07 Jun 2018 04:46:37 GMT

This is the VMware® NSX-T Security Configuration Guide.This guide provides prescriptive guidance for customers on how to deploy and operate VMware® NSX-T in a secure manner.

Feedback and Comments to the Authors and the NSX Solution Team can be posted as comments to this community Post (Note: users must login on vmware communities before posting a comment).

Other related NSX Security Guide can be found @ https://communities.vmware.com/docs/DOC-37726

--The VMware NSX PM/TPM Team

Reference Design Guide for PAS and PKS with VMware NSX-T Data Center

communities-emailer@vmware.com — Fri, 24 Aug 2018 14:56:44 GMT

VMware NSX-V: Control Plane Resiliency with CDO Mode

hahmed@vmware.com — Fri, 04 Aug 2017 15:05:58 GMT

Author: Humair Ahmed

Please send feedback to hahmed@vmware.com

Some of the information provided in this technical white paper has also been posted prior on the VMware Network Virtualization Blog post here describing CDO mode generally and the benefits.

NSX-V 6.3 introduced many new features. On the VMware Network Virtualization blog post, NSX-V 6.3: Cross-VC NSX Security Enhancements, several new Cross-VC NSX security features are discussed. In this paper, another new feature called Controller Disconnected Operation (CDO) mode, which provides additional resiliency for the NSX control plane, is discussed. The features discussed in the mentioned blog posts and within this document become especially important in multi-site deployments. Note, in NSX-V 6.3.1, CDO mode is a tech preview feature. The feature GA’ed in NSX-V 6.3.2.

VIO&NSX-v - Network Topologies Configuration Guide

communities-emailer@vmware.com — Tue, 04 Dec 2018 01:40:22 GMT

NSX-v Secure Configuration Guide

communities-emailer@vmware.com — Fri, 19 Oct 2018 20:54:29 GMT

Here is the update for VMware® NSX for vSphere Security Configuration Guide with update up to NSX for vSphere 6.4.0 release. This guide provides prescriptive guidance for customers on how to deploy and operate VMware® NSX in a secure manner.

The similar docs for prior releases of NSX for vSphere can be found at the following links:

https://communities.vmware.com/docs/DOC-28142

https://communities.vmware.com/docs/DOC-27674

--The VMware NSX Solution Team

Deploying NSX Data Center with Cisco ACI Underlay Design Guide 2.0

communities-emailer@vmware.com — Tue, 25 Sep 2018 19:24:30 GMT

Technical_White_Paper_L2Gateway_VMware_Juniper.pdf

communities-emailer@vmware.com — Fri, 31 Aug 2018 18:52:55 GMT

NSX-T-VMworld2018-Sessions

communities-emailer@vmware.com — Fri, 24 Aug 2018 16:34:07 GMT

NSX-V_CCP-MP-LCP-Interaction_Banner

communities-emailer@vmware.com — Tue, 21 Aug 2018 11:05:08 GMT

New NSX Icons (CY2017) + Visio templates

communities-emailer@vmware.com — Wed, 20 Jun 2018 21:43:58 GMT

These icons and templates have been deprecated.

NSX-v Operations Guide, rev 1.5

communities-emailer@vmware.com — Wed, 06 Apr 2016 18:32:33 GMT

VMware® NSX for vSphere End-User Computing Design Guide 1.2

communities-emailer@vmware.com — Wed, 10 Jan 2018 22:22:51 GMT

This is the updated edition of the VMware® NSX for vSphere End-User Computing Design Guide

Authors: Geoff Wilmington, Wade Holmes, and the VMware NSX and EUC Technical Product Management Teams

This document is targeted toward end-user computing, virtualization, network, and security architects interested in deploying VMware® NSX in a Horizon 7 virtual desktop infrastructure environment.

Version 1.2 provides guidance around the following :

1. NSX Network Virtualization for Horizon

2. NSX Micro-segmentation for Horizon

3. NSX Load-balancing for Horizon

Thanks to all the contributors and reviewers to various sections of the document.

A final version of this Reference Guide will be posted soon on our NSX Technical Resources website (link below):

http://www.vmware.com/products/nsx/resources.html

Feedback and Comments to the Authors and the NSX Solution Team are highly appreciated.

--The VMware NSX Solution Team

VMware NSX Cookbook by Packt

communities-emailer@vmware.com — Tue, 08 May 2018 15:54:08 GMT

'VMware NSX Cookbook' authored by Bayu Wibowo, Tony Sangha helps with network virtualization at your fingertips.

This book begins with a brief introduction to VMware's NSX for vSphere Network Virtualization solutions and how to deploy and configure NSX components and features such as Logical Switching, Logical Routing, layer 2 bridging and the Edge Services Gateway. Moving on to security, the book shows you how to enable micro-segmentation through NSX Distributed Firewall and Identity Firewall and how to do service insertion via network and guest introspection. After covering all the feature configurations for single-site deployment, the focus then shifts to multi-site setups using Cross-vCenter NSX.

Next, the book covers management, backing up and restoring, upgrading, and monitoring using built-in NSX features such as Flow Monitoring, Traceflow, Application Rule Manager, and Endpoint Monitoring. Towards the end, you will explore how to leverage VMware NSX REST API using various tools from Python to VMware vRealize Orchestrator.

What You Will Learn:

Understand, install, and configure VMware NSX for vSphere solutions
Configure logical switching, routing, and Edge Services Gateway in VMware NSX for vSphere
Learn how to plan and upgrade VMware NSX for vSphere
Learn how to use built-in monitoring tools such as Flow Monitoring, Traceflow, Application Rule Manager, and Endpoint Monitoring
Learn how to leverage the NSX REST API for management and automation using various tools from Python to VMware vRealize Orchestrator

Author Bio:

Bayu Wibowo

Bayu Wibowo is a seasoned network virtualization consultant in the APJ arena. With over 10 years of industry experience, he has rapidly earned reputation and awards for his community involvement as Cisco Champion, VMware vExpert NSX, and VMTN Community Warrior. Working as a network virtualization consultant for Datacom, he now plays an integral part in the implementation of multiple innovative technologies, including VMware NSX, Open Networking, and numerous more. Follow him on Twitter @bayupw.

Tony Sangha

Tony Sangha is a senior consulting architect at VMware Professional Services with over 12 years of experience in networking and security roles, who has worked for a systems integrator across various industry verticals. He guides customers across Australia and New Zealand to design and implement a Software Defined Datacenter using VMware technologies and specializes in VMware NSX. He has presented at multiple VMUG and vForum events across ANZ and is an active community contributor via his blog and open source projects on GitHub. You can follow him on Twitter at @tsangha.