Hi,
As many of you will be aware its VMworld 2013 this week and VMware have taken this opportunity to announce VMware NSX (http://cto.vmware.com/introducing-vmware-nsx-the-platform-for-network-virtualization/ and https://www.vmware.com/products/nsx/).
‘The VMware NSX platform delivers the entire networking and security model in software, decoupled from traditional networking hardware, representing a transformative leap forward in data center networking architecture.’
Introducing VMware NSX
Today, we are announcing the VMware NSX platform and products that deliver on the above mission, unleashing the power of network virtualization. The team has re-created the network and security model in software, taking advantage of the benefits of virtualization. This realizes a significant leap forward in capability across the stack, and includes several industry firsts. Before delving into the product itself, here are the key highlights:
Logical switching & routing: Routing functions have been integrated with switching in the hypervisor, enabling direct one-hop connectivity for east-west traffic in the data center, and decoupled from the underlying network fabric using overlays. Also included are optimizations to decouple multicast, unknown unicast and ARP broadcasts from the network. Net effect is efficient, fast packet delivery in the logical plane, and minimizing control traffic in the physical fabric.
Bridging to physical: A logical view of virtual and physical devices is presented, leveraging integration between the NSX Controller and agents in Arista, Brocade, Cumulus, Dell, HP and Juniper network devices. Also included are translational bridging between logical overlays and VLANs to enable seamless interconnection of physical and virtual without re-addressing.
Distributed Firewall: Stateful firewall capability is built into the hypervisor, delivering distributed, scale-out, high-performance firewall inspection at each virtual switch port, while tracking VM adds, moves and changes. Firewall management is dramatically simplified by enabling rules, audits and monitoring based on virtual infrastructure containers, applications, AD users/identity, and yet richer, using network virtualization and VM introspection. The distributed firewall capability also enables stateful, logical insertion of partner devices/agents e.g. F5, McAfee, Palo Alto Networks, Symantec and Trend.
Logical Edge Services: The NSX Edge Services router provides the critical network services required to on-ramp/off-ramp traffic to/from the data center, including perimeter routing (BGP, OSPF, IS-IS), firewalls, user & site VPNs, elastic load balancers and DNS/DHCP/IP services. We also take advantage of virtualization to provide flexible placement, N+1 redundancy, runtime load balancing, and per-tenant resource management. These logical, scale-out services are programmatically deployed on a per-tenant or app basis, solving the choke point and provisioning issues commonly seen in current architectures.
By Paul Wood
Tags: News, NSX, vmware, VMworld, Xtravirt