VMware NSX Traffic Flow — East-West & North-South

Understanding how traffic is flowing in NSX environment is an important aspect to successfully maintain and troubleshoot networks having NSX. In this post we'll understand hop-by-hop flow of traffic in East-West and North-South directions.


East-West: VMs on Same Subnet, Same Host

VM-1 has IP address 172.16.20.6 and VM-2 has IP address 172.16.20.7


VM-1 vNIC èLogical Switch (Segment ID 5002) è VM-2 vNIC




East-West: VMs on Same Subnet, Different Hosts

VM-1 has IP address 172.16.10.4 and VM-2 has IP address 172.16.10.5


VM-1 vNIC èLogical Switch (Segment ID 5001) è ESXiHost-01 VTEP [VXLAN encapsulation] è ESXiHost-01 NIC èPhysical Switch è ESXiHost-02 NIC è ESXiHost-02 VTEP [VXLAN decapsulation] èLogical Switch (Segment ID 5001) è VM-2 vNIC





East-West: VMs on Different Subnets, Same Host

VM-1 has IP address 172.16.10.4 and VM-2 has IP address 172.16.20.7


VM-1 vNIC èLogical Switch (Segment ID 5001) è DLR (internal LIF) [inter-VLAN routing] èLogical Switch (Segment ID 5002] è VM-2 vNIC




East-West: VMs on Different Subnets, Different Hosts

VM-1 has IP address 172.16.10.4 and VM-2 has IP address 172.16.20.7


VM-1 vNIC èLogical Switch (Segment ID 5001) è DLR (internal LIF) [Inter-VLAN  routing] è Logical Switch (Segment ID 5002) è ESXi Host-01 VTEP [VXLAN encapsulation] è ESXi Host-01 NIC è Physical Switch è ESXi Host-02 NIC è ESXi Host-02 VTEP [VXLAN decapsulation] è Logical Switch (Segment ID 5002) è VM-2 vNIC




North-South: ESG and VM on same Host

VM-2 has an IP address 172.16.20.7 and File Server has IP address 172.16.30.8


VM-2 vNIC èLogical Switch (Segment ID 5002) è DLR (internal LIF >> uplink interface) è Logical Switch (Segment ID 5100) è Edge Services Gateway è ESXi Host-02 NIC èPhysical switch [inter-VLAN Routing] è File Server




North-South: ESG and VM on different Hosts

VM-2 has an IP address 172.16.20.7 and File Server has IP address 172.16.30.8


VM-2 vNIC èLogical Switch (Segment ID 5002) è DLR (internal LIF >> uplink interface) è Logical Switch (Segment ID 5100) è ESXi Host VTEP (VXLAN encapsulation) è ESXi Host-01 NIC è Physical Switch è ESXi Host-02 NIC è ESXi Host-02 VTEP [VXLAN decapsulation] è Logical Switch (segment ID 5100) è  Edge Services Gateway è ESXihost-02 NIC èPhysical switch [inter-VLAN routing] è File Server




Learn more about VMware NSX here


Comments

  1. This article is way too Awesome and clarified my doubts related to NSX V traffic flow. Thank you so much :)

    ReplyDelete

Post a Comment

Popular posts from this blog

Specifying SSH port in Ansible Inventory

Ansible-Playbook to display output of multiple show commands (using stdout_lines with Loop)

Filtering Routes in BGP using Route-maps and Prefix-list

Ansible Playbook for Network OS Upgrade with pre and post checks

Bypassing Proxy Server in Google Chrome

Ansible-playbook for backing up running config of Cisco IOS

Export or Backup Azure Network Security Groups into CSV using PowerShell