Welcome back!!! We are at Part 2 of the blog series on TLS SNI Virtual Service hosting in NSX Advanced Load balancer. In Part 1, we discussed about the current SNI application hosting without ALB and the ALB pre-requisite configurations – vSphere cloud account, IPAM profiles, DNS virtual service, DNS profile, DNS delegation and application…… Continue reading TLS SNI Virtual Service Hosting in NSX Advanced Loadbalancer (AVI Vantage) – Part 2

Server Name Indication (SNI) is an extension of TLS protocol and is included in the SSL/TLS handshake process to make sure that the client request’s host header matches the website’s hostname and certificate to which the client is connecting to. Using SNI matching, client will be able to specify the website’s domain name during the…… Continue reading TLS SNI Virtual Service Hosting in NSX Advanced Loadbalancer (AVI Vantage) – Part 1

NSX Advanced Load balancer (ALB – formerly AVI Vantage Platform) is now natively integrated with VMware Cloud Director. VCD 10.2 was the first version to support the integration and that was with ALB 20.1.1. In the current VCD version 10.3 (which is, at the time of writing this article), NSX ALB versions 20.1.3 and 20.1.4…… Continue reading NSX Advanced Load Balancer (AVI) Integration with VMware Cloud Director 10.3

Welcome to the final and Part 11 of the blog series on NSX-T Federation. In this article, we will take a look at site failure scenarios, Global manager Active/Standby switchover, site switchover and stretched network recovery with three different Tier 0 Gateway topologies. I have given links to the previous ten parts of this Federation…… Continue reading NSX-T Federation – Part 11 – Site Failures and Network Recovery

Welcome back!!! We are at Part 10 of the blog series on NSX-T Federation. In all the previous articles, we leveraged a shared edge cluster for stretched T0/T1 gateways and packet walks. Now let’s introduce a dedicated edge cluster for stretched Tier 1 Gateways and see how the northbound routing and ECMP gets influenced with…… Continue reading NSX-T Federation – Part 10 – Dedicated Edge Cluster for Stretched Tier 1 Gateways

Welcome to Part 9 of the blog series on NSX-T Federation where we will discuss about the Federation Control Plane. In a non-federated NSX-T infrastructure (single site or multi-site), we mostly deal with three control plane tables for networking – MAC table, ARP table and VTEP table. In federation we have four additional tables -…… Continue reading NSX-T Federation – Part 9 – Federation Control Plane Explained

Welcome to Part 8 of the blog series on NSX-T federation. In the previous articles, we have gone through the configuration of different stretched Tier 0 Gateway topologies and explanation of north-south and east-west traffic patterns including packet walks. Now let’s take a look at how the traffic patterns are influenced by the placement of…… Continue reading NSX-T Federation – Part 8 – Tier 1 Gateway Placement Considerations

Now that we covered Part 6 where we discussed about the configuration and routing of stretched Active-Active Tier 0 Gateway with location All-Primary, let’s do a packet walk to understand the North-South and East-West traffic flow in more detail. If you missed Part 6, you can read it here: Part 6 : https://vxplanet.com/2021/05/24/nsx-t-federation-part-6-stretched-a-a-tier-0-gateway-with-location-all-primary/ In Part…… Continue reading NSX-T Federation – Part 7 – Stretched A/A Tier 0 Gateway with location All-Primary – Packet Walk

Welcome back!!! We are at Part 6 of the blog series on NSX-T federation. In this article we will take a look at the configuration and routing of a stretched Active-Active Tier 0 Gateway with location All-Primary. Unlike the previous Tier 0 topologies, we don’t have a secondary location here. All sites are primary and…… Continue reading NSX-T Federation – Part 6 – Stretched A/A Tier 0 Gateway with location All-Primary

Let’s continue with our blog series on NSX-T Federation, this is Part 5 and we are going to take a closer look at northbound and east-west traffic patterns for segments on different Tier 1 Gateways (stretched/unstretched with and without SR) attached to stretched Active-Active Tier 0 Gateway with location Primary and Secondary which we discussed…… Continue reading NSX-T Federation – Part 5 – Stretched A/A Tier 0 Gateway with location Primary/Secondary – Packet Walk