
8 Network Virtualization with Dell Infrastructure and VMware NSX | Version 1.2
used by cloud management systems such as vCloud Automation Center for additional automation,
monitoring, and management.
NSX Perimeter Edge (NSX Services Gateway):
A logical component installed on an edge server that provides connectivity to external uplinks and allows
for logical networks to connect and peer with external networks while also providing network services
such as DHCP, NAT, VPN, firewall, dynamic routing, and load balancing.
NSX Distributed Logical Router (DLR):
A logical component that provides routing and distributed forwarding within the logical network. Routing
modules are installed within the kernel on each hypervisor and provide for East-West distributed routing.
The DLR is managed via special purpose VM called the DLR Control VM that can also be used to bridge
between logical (VXLAN) and physical (VLAN) networks.
Logical Switch:
Distributed logical broadcast domain/segment that can span across multiple clusters and to which a VM
can be logically connected/wired to. This allows for VM mobility without concern for traditional physical
layer 2 boundaries.
Logical Firewall:
The distributed firewall allows for a logical firewall that can segment virtual entities within the logical
network; this is a hypervisor kernel-embedded distributed firewall. The perimeter edge firewall allows for
perimeter security while also allowing for services on the perimeter edge such as DHCP, NAT, VPN,
dynamic routing, and load balancing.
Transport Zone:
A transport zone defines the span of a logical network and is installed at the cluster level. A logical switch
can span only across the hosts/clusters which are part of the transport zone.
VXLAN:
Standard network overlay technology where MAC frames are encapsulated into a VXLAN and UDP header
and communication occurs between two endpoints called Virtual Tunnel Endpoints (VTEPs). VMware
NSX uses VXLAN to build logical L2 networks over any L2/L3 physical IP infrastructure.
Virtual Tunnel Endpoints (VTEPs):
vmkernel IP interfaces that are the endpoints for VXLAN communication. During the VXLAN configuration
process, a VTEP is configured on every vSphere ESXi host that will be participating within a logical
network. The IP addresses of the source and destination VTEP are used in the outer header of the VXLAN
encapsulated packet; these are the IP addresses used for routing the packet through the physical underlay
network.
VXLAN Network Identifier (VNI):
A logical switch is defined with a VXLAN unique identifier called a VNI which represents a logical segment.
Comentarios a estos manuales