{"id":9011,"date":"2016-07-22T18:51:47","date_gmt":"2016-07-23T01:51:47","guid":{"rendered":"http:\/\/humairahmed.com\/blog\/?p=9011"},"modified":"2019-12-08T20:35:34","modified_gmt":"2019-12-09T04:35:34","slug":"nsx-v-multi-site-options-and-cross-vc-nsx-design-guide","status":"publish","type":"post","link":"https:\/\/humairahmed.com\/blog\/?p=9011","title":{"rendered":"NSX-V: Multi-site Options and Cross-VC NSX Design Guide"},"content":{"rendered":"
\n\t\t\t\t\tTweet<\/a>\n\t\t\t\t<\/div><\/div>

I also published this blog post about mult-site options and Cross-VC NSX design on the VMware NSX Network Virtualization Blog<\/a> on July 22, 2016. The full blog post is provided below and can also be seen on the VMware NSX Network Virtualization Blog<\/a> site. <\/p>\n

VMware NSX Network Virtualization Blog<\/a><\/strong>
\nTitle:<\/strong> NSX-V: Multi-site Options and Cross-VC NSX Design Guide
\nAuthor:<\/strong> Humair Ahmed
\nDate Published:<\/strong> July 22, 2016<\/p>\n

\"\"<\/a><\/p>\n

Check-out the new NSX-V Multi-site Options and Cross-VC NSX Design Guide<\/a>. Feel free to provide me any feedback you may have.<\/p>\n

The goal of this design guide is to outline several NSX solutions available for multi-site data center connectivity before digging deeper into the details of the Cross-VC NSX multi-site solution. Learn how Cross-VC NSX enables logical networking and security across multiple vCenter domains\/sites and how it provides enhanced solutions for specific use cases. No longer is logical networking and security constrained to a single vCenter domain. Cross-VC NSX use cases, architecture, functionality, design, and failure\/recovery scenarios are discussed in detail. <\/p>\n

\"Cross-VC<\/a>

Cross-VC NSX: Logical Networking and Security Across vCenter Domains and Sites<\/p><\/div>\n

Outlined briefly below are several important use cases that Cross-VC NSX enables in regards to Application Continuity. For additional details on Cross-VC NSX and multi-site data center solutions see the NSX-V Multi-site Options and Cross-VC NSX Design Guide<\/a>.<\/p>\n


\nUse Case 1: Workload Mobility<\/span><\/strong><\/p>\n

Since logical networking and security can span multiple vCenter domains and multiple sites, Cross-VC NSX allows for enhanced workload mobility which can not only span multiple sites but also multiple vCenter domains across Active-Active data centers. Workloads can now move between vCenter domains\/sites on demand for tasks such as data center migration, data center upgrades\/security patches, disaster avoidance, etc. Workload mobility boundaries are no longer constrained by artificial vCenter boundaries as the IP address and security policies for the workload remain consistent across vCenter domains\/sites.<\/p>\n

\"Workload<\/a>

Workload Mobility Across vCenter Domains with Consistent Networking and Security Policies<\/p><\/div>\n


\nUse Case 2: Resource Pooling<\/span><\/strong><\/p>\n

By enabling logical networking and security across multiple vCenters, Cross-VC NSX allows for the ability to access and pool resources from multiple vCenter domains. This allows for better utilization of resources across multiple vCenter domains or sites. If resources such as storage, CPU, or memory are low at one site, the workload can be deployed or migrated to another site while still utilizing the same logical networking and security. Resources are no longer isolated based on vCenter boundaries and idle capacity within another vCenter domain\/site can be leveraged for better overall resource utilization.<\/p>\n

\"Resource<\/a>

Resource Pooling and Better Utilization of Idle Capacity Across vCenter Domains\/Sites<\/p><\/div>\n


\nUse Case 3: Unified Logical Networking and Security Policy<\/span><\/strong><\/p>\n

Cross-VC NSX enables a consistent security policy across vCenter boundaries and sites. NSX provides centralized management on the primary NSX manager for security rules across all vCenter domains\/sites. Users are no longer required to manually replicate security policies across different domains\/sites. The NSX Rest API can also be leveraged so that only one call to the primary NSX Manager at Site 1 results in a consistent security policy across all sites for the application; this is demonstrated in the figure below.<\/p>\n

\"Security<\/a>

Security Policy Automation and Consistent Security Across vCenter Domains<\/p><\/div>\n


\nUse Case 4: Disaster Recovery<\/strong><\/span><\/p>\n

By enabling the span of logical networks and security across sites, Cross-VC NSX inherently provides features desired for disaster recovery. Since logical networking and security spans across sites, applications can recover at the recovery site upon a disaster recovery (DR) event and maintain their IP addresses. Further, security enforcement for the application is maintained due to the universal distributed firewall and security policies.<\/p>\n

Also, using the Local Egress feature, NSX provides advanced control over egress traffic with cluster or host level granularity. This allows the selection of which set of ESGs are used for egress by traffic from the respective workloads. This can be a very powerful tool for various partial failure scenarios.<\/p>\n

Additionally, Cross-VC NSX also improves upon the DR use case typically provided by VMware Site Recovery Manager (SRM). SRM has a 1:1 relationship to vCenter server and utilizes an active\/standby model. All workloads are running on the active site with placeholder VMs at the standby recovery site in-case of failover.<\/p>\n

NSX has tight product integration with SRM. For example, the source and destination networks for the VMs are automatically mapped if they\u2019re connected to Cross-VC NSX networks. There is no longer a need to do any manual mapping as all networking and security services are synchronized across sites; NSX also ensures that workloads maintain their IP addresses when recovered. See this prior blog post<\/a> for more information on DR with Cross-VC NSX and SRM.<\/p>\n

\"VMware<\/a>

VMware SRM DR Solution Leveraging Cross-VC NSX<\/p><\/div>\n

Check-out the NSX-V Multi-site Options and Cross-VC NSX Design Guide<\/a> for more details.
\n
Follow me on Twitter: @Humair_Ahmed<\/a>
<\/p>\n","protected":false},"excerpt":{"rendered":"

I also published this blog post about mult-site options and Cross-VC NSX design on the VMware NSX Network Virtualization Blog on July 22, 2016. The full blog post is provided below and can also be seen on the VMware NSX … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1505,1356,295,3012,3,210,2515,3555,632],"tags":[3763,3747,3768,3767,3765,3441,3750,3753,3757,3439,3440,3639,3627,3679,3449,3738,3628,3751,3733,3739,3732,3752,2120,2119,3748,3774,3742,3741,3620,3171,3769,3759,3740,3744,3773,2771,3734,3764,3766,3624,3622,3445,3454,3444,3743,3761,3754,3758,3735,3756,3755,2121,3749,2767,3770,3760,3736,3745,2770,3737,2590,3625,3623,3771,3772,3746,3762],"class_list":["post-9011","post","type-post","status-publish","format-standard","hentry","category-network-architecture","category-network_security","category-networking","category-security-technology","category-technology","category-virtualization-and-cloud-computing","category-vmware-virtualization-and-cloud-computing","category-vmware-security-technology","category-vmware-networking","tag-active-active-data-centers","tag-application-continuity","tag-consistent-security-across-sites","tag-consistent-security-across-vcenter-domains","tag-consistent-security-policy","tag-cross-vc-nsx","tag-cross-vc-nsx-and-multi-site-data-center-solutions","tag-cross-vc-nsx-multi-site-solutions","tag-cross-vc-nsx-use-cases","tag-cross-vcenter","tag-cross-vcenter-networking-and-security","tag-cross-vcenter-nsx","tag-disaster-recovery","tag-dr","tag-local-egress","tag-logical-networking-and-security","tag-multi-site","tag-multi-site-nsx-design-guide","tag-multi-site-options-and-cross-vc-nsx-design-guide","tag-multi-vcenter","tag-multisite","tag-multisite-nsx-design-guide","tag-network-virtualization","tag-nsx","tag-nsx-application-continuity","tag-nsx-consistent-security","tag-nsx-deployment-guide","tag-nsx-design-guide","tag-nsx-disaster-recovery","tag-nsx-distributed-firewall","tag-nsx-local-egress","tag-nsx-logical-networking-and-security-across-vcenter-domains-and-sites","tag-nsx-multi-site-design-guide","tag-nsx-vmsc","tag-nsx-workload-mobility","tag-nsx-v","tag-nsx-v-multi-site-options-and-cross-vc-nsx-design-guide","tag-resource-pooling","tag-security-policy-automation","tag-site-recovery-manager","tag-srm","tag-universal-distributed-firewall","tag-universal-dlr","tag-universal-logical-switch","tag-vmsc","tag-vmware-cross-vc-nsx-and-multi-site-data-center-solutions","tag-vmware-cross-vc-nsx-multi-site-solutions","tag-vmware-cross-vc-nsx-use-cases","tag-vmware-mult-site","tag-vmware-multi-site-solutions","tag-vmware-multisite-solutions","tag-vmware-nsx","tag-vmware-nsx-application-continuity","tag-vmware-nsx-distributed-firewall","tag-vmware-nsx-local-egress","tag-vmware-nsx-logical-networking-and-security-across-vcenter-domains-and-sites","tag-vmware-nsx-mult-site","tag-vmware-nsx-vmsc","tag-vmware-nsx-v","tag-vmware-nsx-v-mult-site","tag-vmware-nsx-vsphere","tag-vmware-site-recovery-manager","tag-vmware-srm","tag-vmware-srm-dr-solution","tag-vmware-srm-dr-solution-leveraging-cross-vc-nsx","tag-vsphere-metro-storage-cluster","tag-workload-mobility"],"_links":{"self":[{"href":"https:\/\/humairahmed.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/9011","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/humairahmed.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/humairahmed.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/humairahmed.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/humairahmed.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=9011"}],"version-history":[{"count":20,"href":"https:\/\/humairahmed.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/9011\/revisions"}],"predecessor-version":[{"id":10156,"href":"https:\/\/humairahmed.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/9011\/revisions\/10156"}],"wp:attachment":[{"href":"https:\/\/humairahmed.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=9011"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/humairahmed.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=9011"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/humairahmed.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=9011"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}