Welcome to the final and Part 4 of the blog series on NSX Application Platform Automation Appliance (NAPP-AA) where we demonstrate NAPP Scale-Out. NAPP scale-out is supported only on advanced form factor and also requires the TKGS guest cluster to be scaled out with the appropriate number of worker nodes. As stated earlier, NSX Automation Appliance only deploys NAPP in the advanced form factor. NAPP automation appliance can scale out the TKGS guest cluster which it deployed, with additional worker nodes. However, NAPP scale out need to be performed from the NSX Application ..read more

Welcome to Part 3 of the blog series on NSX Application Platform Automation Appliance (NAPP-AA). In this article, we will deploy a second NAPP instance for the additional compute workload domain using the NAPP automation appliance. If you were not following along, please check out the previous articles of the blog series below: Part 1 : Topology and Appliance Deployment – https://vxplanet.com/2024/04/16/nsx-application-platform-automation-appliance-napp-aa-part-1-topology-and-appliance-deployment/ Part 2 : NAPP Instance Deployment – https://vxplanet.com/2024/04/18/nsx-application-platform-aut ..read more

Welcome back!!! We are at Part 2 of the blog series on NSX Application Platform Automation Appliance (NAPP-AA). In the previous article, we discussed about the NAPP topology deployed by the automation appliance and the deployment of automation appliance into the management vSphere cluster. If you missed it, please check it out below: Part 1 : Topology and Appliance Deployment – https://vxplanet.com/2024/04/16/nsx-application-platform-automation-appliance-napp-aa-part-1-topology-and-appliance-deployment/ In this blog post, we will deploy the first NAPP instance of the compute workload domain N ..read more

If you aren’t aware, NSX 4.1.1 introduced VLAN filtering capability on the VLAN Transport zones. This feature is important especially when you don’t want your NSX tenants to create segments on VLANs that are meant for infrastructure traffic. Please check out the release notes here: https://docs.vmware.com/en/VMware-NSX/4.1.1/rn/vmware-nsx-411-release-notes/index.html VLAN filtering can also be done on the overlay transport zones to control the VLANs used for guest VLAN tagging (VGT) on the overlay segments, but I think this functionality already existed. In this article, we will discuss both ..read more

Welcome to the final part of the blog series on NSX multitenancy. In this article, we will discuss the  integration with NSX Advanced Load balancer to offer advanced load balancing as a service (ALBaaS) to the NSX tenants. Lets’ get started: If you were not following along, please check out the previous articles of this blog series below: Part 1 : Introduction & Multitenancy models : https://vxplanet.com/2023/10/24/nsx-multitenancy-part-1-introduction-multitenancy-models/ Part 2 : NSX Projects : https://vxplanet.com/2023/10/24/nsx-multitenancy-part-2-nsx-projects/ Part 3 : Virtual Pr ..read more

Welcome back!!! We are at Part 5 of the blog series on NSX multitenancy. In this article, we will discuss edge cluster considerations for NSX projects based on a few parameters like topologies, resource guarantees, traffic patterns and throughput. We will also discuss failure domains and their support in NSX projects. If you were not following along, please check out the previous articles of this series below: Part 1 – Introduction & Multitenancy models : https://vxplanet.com/2023/10/24/nsx-multitenancy-part-1-introduction-multitenancy-models/ Part 2 – NSX Projects : https://vxplanet.com ..read more

Welcome to Part 3 of the blog series on NSX Multitenancy. In this article, we will discuss NSX Virtual Private Clouds (VPCs) that is an extension to NSX projects (discussed in Part 2) by offering an additional management plane isolation within the context of an NSX project. Using VPCs, we segment the management plane even further and we offer the consumers (who are mainly application owners or developers), a simplified self-service portal where they can consume the networking and security objects independently in their own private space. If you were not following along, please check out the p ..read more

Let’s continue with our blog series on NSX multitenancy. This is Part 2 where we will cover the creation and configuration of projects including RBAC policies, applying quotas, creating networking and security objects, sharing resources to projects, and applying route filtering for projects. If you missed Part 1 where we discussed about the multitenancy models, please check out below: Part 1 : https://vxplanet.com/2023/10/24/nsx-multitenancy-part-1-introduction-multitenancy-models/ Let’s get started and configure our first NSX project (tenant). Background and current environment We have a tea ..read more

NSX introduced multitenancy through the concept of projects in version 4.0.1 (API only). Multitenancy was enhanced with project UI options in NSX 4.1 and with Virtual Private Clouds (VPCs) in NSX 4.1.1. NSX projects are a way to isolate networking and security objects across tenants within the same NSX deployment. Prior to projects, we dealt with networking and security configurations in the default space which was owned by the NSX Enterprise Administrator. Each tenant (project) has RBAC policies enforced by the Enterprise administrator from the default space, and as such each project has one ..read more

In my previous blog post, we discussed the new version release of my community python project – NSX ALB Virtual Service Migrator v1.3 where we introduced a new capability to migrate TLS-SNI and Enhanced Virtual Hosting (EVH) across cloud accounts in NSX ALB. If you missed it, please check it out below: My Python Project – NSX ALB Virtual Service Migrator – Release update v1.3 If you would like to understand TLS SNI hosting in NSX ALB, please check out my two-part series which I wrote earlier last year. Part 1: https://vxplanet.com/2022/01/21/tls-sni-virtual-service-hosting-in-nsx-advan ..read more