VMware NSX Traffic Flow — East-West & North-South

Understanding how traffic is flowing in NSX environment is an important aspect to successfully maintain and troubleshoot networks having NSX. In this post we'll understand hop-by-hop flow of traffic in East-West and North-South directions.


East-West: VMs on Same Subnet, Same Host

VM-1 has IP address 172.16.20.6 and VM-2 has IP address 172.16.20.7


VM-1 vNIC è Logical Switch (Segment ID 5002) è VM-2 vNIC




East-West: VMs on Same Subnet, Different Hosts

VM-1 has IP address 172.16.10.4 and VM-2 has IP address 172.16.10.5


VM-1 vNIC è Logical Switch (Segment ID 5001) è ESXi Host-01 VTEP [VXLAN encapsulation] è ESXi Host-01 NIC è Physical Switch è ESXi Host-02 NIC è ESXi Host-02 VTEP [VXLAN decapsulation] è Logical Switch (Segment ID 5001) è VM-2 vNIC





East-West: VMs on Different Subnets, Same Host

VM-1 has IP address 172.16.10.4 and VM-2 has IP address 172.16.20.7


VM-1 vNIC è Logical Switch (Segment ID 5001) è DLR (internal LIF) [inter-VLAN routing] è Logical Switch (Segment ID 5002] è VM-2 vNIC




East-West: VMs on Different Subnets, Different Hosts

VM-1 has IP address 172.16.10.4 and VM-2 has IP address 172.16.20.7


VM-1 vNIC è Logical Switch (Segment ID 5001) è DLR (internal LIF) [Inter-VLAN  routing] è Logical Switch (Segment ID 5002) è ESXi Host-01 VTEP [VXLAN encapsulation] è ESXi Host-01 NIC è Physical Switch è ESXi Host-02 NIC è ESXi Host-02 VTEP [VXLAN decapsulation] è Logical Switch (Segment ID 5002) è VM-2 vNIC




North-South: ESG and VM on same Host

VM-2 has an IP address 172.16.20.7 and File Server has IP address 172.16.30.8


VM-2 vNIC è Logical Switch (Segment ID 5002) è DLR (internal LIF >> uplink interface) è Logical Switch (Segment ID 5100) è Edge Services Gateway è ESXi Host-02 NIC è Physical switch [inter-VLAN Routing] è File Server




North-South: ESG and VM on different Hosts

VM-2 has an IP address 172.16.20.7 and File Server has IP address 172.16.30.8


VM-2 vNIC è Logical Switch (Segment ID 5002) è DLR (internal LIF >> uplink interface) è Logical Switch (Segment ID 5100) è ESXi Host VTEP (VXLAN encapsulation) è ESXi Host-01 NIC è Physical Switch è ESXi Host-02 NIC è ESXi Host-02 VTEP [VXLAN decapsulation] è Logical Switch (segment ID 5100) è  Edge Services Gateway è ESXi host-02 NIC è Physical switch [inter-VLAN routing] è File Server




Learn more about VMware NSX here


Comments

Popular posts from this blog

Anyconnect SSL-Client VPN with Self-signed Certificate on Cisco ASA

Filtering Routes in BGP using Route-maps and Prefix-list

Open Shortest Path First (OSPF)

IKEv2 IPsec Site-to-Site VPN configuration on Cisco ASA 8.4(x)

IPsec VPN as a Backup for Point-to-Point Link using IP SLA

Border Gateway Protocol (BGP)

Bypassing Proxy Server in Google Chrome

Cisco ASA Active/Active Failover Configuration

Cisco ASA Active/Standby Failover Configuration