VCF 9 Architecture

  Hi Readers! It was a long break and I myself got engaged in new dynamic skill upgrades that result in a long delay. It’s been a while since my last deep dive here — the IT landscape doesn’t wait, and neither should we! So, Let’s pick up with one of the most important shifts in VMware’s networking and security stack: NSX 4. Simplified Lifecycle Management NSX 4 integrates more tightly with vSphere Lifecycle Manager, making upgrades and patching smoother. Enhanced Security Features Distributed Firewall improvements, including L7 application ID enhancements and context‑aware microsegmentation . Deeper integration with VMware Threat Prevention and IDS/IPS. Networking Enhancements Better support for IPv6 , multi‑tier routing, and federation improvements for multi‑site deployments. Operational Visibility Expanded NSX Intelligence for real‑time flow visualization and policy recommendations. Container &...

  Hello everyone! Let’s continue our discussions about Site Resiliency model offered by NSX not through Multisite but through federation. What benefits we may have and what improvements we may have. This is all what we are going to discuss here in this topic. NSX Federation (a Quick Brief) Unlike Multisite NSX architecture, NSX Federation does not require to configure MTU over WAN or at provider side to be changed from typical (Default) value to 1700+. It’s a big change at infrastructure configuration or requirement level. NSX Managers can be on different geographical locations despite of 10ms RTT problem. Because, the global objects will penetrate into local NSX Managers through Async Replicator Service through Application Proxy Hub (APH) offered by Global NSX Managers. It only replicates Clusters with other site clusters not amongst the nodes of one cluster (or inside a cluster).  Whereas the distance in between Global managers (within same NSX Manager Cluster)  (Active...