Tag: Nsx

As part of the VMware Cloud Foundation (VCF) 9.1.1 release, consuming NSX Virtual Private Cloud (VPC) has gotten simpler, especially for environments using traditional VLAN-backed networks. In VCF …

How I deployed a complete VCF 9.1 management domain in a nested homelab, recovered orphaned NSX transport nodes, and fixed VCF Automation.

When converging or importing a vCenter Server environment that does not already include NSX, VMware Cloud Foundation (VCF) will automatically deploy NSX as part of the converge or import workflow. …

We run NSX with Avi Load Balancer, and every so often the Avi Controller manages to lock the NSX admin account. Usually it is credential drift somewhere. The Controller keeps…

Welcome back!!! We are at Part 2 of the blog series on VMware vDefend License Hub where we focus on the transition process from legacy License Hub 5.1.2 to version 2.0 in a brownfield environment. …

Starting with VCF 9.1, activation of vDefend components no longer accepts the 25-character license keys and requires subscription-based license files with periodic reporting of license usage inform…

With VMware Cloud Foundation (VCF) 9.1, the Distributed Transit Gateway (DTGW) connectivity model now supports NSX stateful network services through the Virtual Network Appliance (VNA) cluster. Thi…

AMD Zen4/Zen5 processors have been known to have slower entropy generation, which can lead to higher CPU utilization for workloads that depend on random number generation. I recently learned from a…

Compare VCF 9.1 import, convergence, and side-by-side rebuild paths for brownfield vSphere, with NSX, storage, rollback, and validation guidance.

The Core Pain Point: Centralized Bridging BottlenecksThe Architectural ChallengeThe VCF 9.1 Solution: Out-of-Path Distributed BridgingPerformance & Resource DividendsThe Modern Fix: VNA-Driven …

IntroductionFeature Progression: VCF 9.0 vs. VCF 9.1 EVPN ArchitectureControl Plane Mechanics: The Interface-less IP-VRF ProcessingPhysical Interoperability & Platform Deployment PrerequisitesD…

IntroductionVNA Stateful Services SeriesArchitectural Dependencies Checklist Supported NAT Capabilities Matrix in VCF 9.1 VNADeep Dive: Default Auto SNAT vs. User-Defined SNATThe Default SNAT Verif…

If you’re managing Kubernetes alongside traditional virtual machines, vSphere Supervisor in vSphere 9.0+ and VMware Cloud Foundation (VCF) 9.0+ serves as your unified control plane. But when it comes to setting up the infrastructure, one question always comes up from teams designing these environments:  “Which load balancers are supported, and how do I choose the … Continued

In this article, I’ll take another look at VPCs and the VNA. This time, the VNA acts as the route controller, and the VPC is connected via VXLAN/EVPN using Type 5 routes.

VCF Automation (VCFA) is the new cloud management layer on top of VCF. Which brings the question how can you import legacy VM workloads under VCF Automation management? VCFA provides infrastructure…

IntroductionArchitectural Shift: VCF 9.0 vs. VCF 9.1The Four Connectivity PosturesA. Community Policy (Group-Based Segmentation)B. Promiscuous Policy (Shared Services Baseline)C. Isolated Policy (S…

Here's a description of how to configure TGWEVPN/VXLAN in the new VCF 9.1 version. I encourage you to read on. Implementing this isn't difficult.

A post dedicated to configuring NSX-t EVPN inline mode in NSX-T. The MP-BGP session with Juniper vMX. Step-by-step setup description.

IntroductionArchitectural Pillar: The 9.0 vs. 9.1A. Distributed Model: VCF 9.0 vs. VCF 9.1B. Centralized Model: VCF 9.0 vs. VCF 9.1Deep Dive: The Virtual Network Appliance (VNA)Decentralizing State…

For resource constrained environments, deploying VMware Cloud Foundation (VCF) can take longer, especially when deploying on top of a Nested ESXi configuration. However, the VCF Installer does prov…

An hour after celebrating a successful validation in the VCF 9.0 installer and getting ready for real deployment testing (which I made a short LinkedIn post about yesterday), things went sideways. …

Note: this blog is about mapping VLAN tags to NSX segments. The same functionality is described for VPC subnets in this post. Guest VLAN Tagging alone… not great with NSX By default, a virtual machine sends traffic to its vNIC untagged. The virtual switch then receives that traffic into a single VLAN or NSX segment. … Continued

This post is part of a short series that builds on our minimal VMware Cloud Foundation (VCF) 9.0 deployment (2x Minisforum MS-A2) and showcases how to fully leverage the exciting new capabilities i…

This post is part of a short series that builds on our minimal VMware Cloud Foundation (VCF) 9.0 deployment (2x Minisforum MS-A2) and showcases how to fully leverage the exciting new capabilities i…

you can control access between clients and databases through the use of NSX DFW rules

Introduction K8s is already a crucial part in the VMware ecosystem for many years and the level of integration in other products like NSX and AVI changed a lot in the past. That is also true for the naming like “vSphere with Tanzu”, “vSphere IaaS” and “VKS” and perhaps more changes in the future. For this blog post we will bring some spotlight to the integration for VKS with NSX VPCs, which is from my point of view a great enhancement from tenancy point of view.

A short article about VPCs in NSX 9 and VCF 9 Part 2.

A short article about VPCs in NSX 9 and VCF 9.

Lors d’une nouvelle installation de NSX Intelligence (ou plutôt Security Intelligence maintenant), j’ai rencontré un petit problème inattendu !

With the new Broadcom licensing changes related to NSX only the stateless firewall is included in the base VCF/NSX license while statefull firewall needs to be licensed separately. VMware Cloud Dir…

Todays post is about configuring Jumbo frames in NSX for VM to VM communication (East / West) and for upstream connectivity (North / South). NSX supports switching and routing of Jumbo frames. We’re t