VMware NSX Traffic Flow — East-West & North-South

Understanding how traffic is flowing in NSX environment is an important aspect to successfully maintain and troubleshoot networks having NSX. In this post we'll understand hop-by-hop flow of traffic in East-West and North-South directions.


East-West: VMs on Same Subnet, Same Host

VM-1 has IP address 172.16.20.6 and VM-2 has IP address 172.16.20.7


VM-1 vNIC èLogical Switch (Segment ID 5002) è VM-2 vNIC




East-West: VMs on Same Subnet, Different Hosts

VM-1 has IP address 172.16.10.4 and VM-2 has IP address 172.16.10.5


VM-1 vNIC èLogical Switch (Segment ID 5001) è ESXiHost-01 VTEP [VXLAN encapsulation] è ESXiHost-01 NIC èPhysical Switch è ESXiHost-02 NIC è ESXiHost-02 VTEP [VXLAN decapsulation] èLogical Switch (Segment ID 5001) è VM-2 vNIC





East-West: VMs on Different Subnets, Same Host

VM-1 has IP address 172.16.10.4 and VM-2 has IP address 172.16.20.7


VM-1 vNIC èLogical Switch (Segment ID 5001) è DLR (internal LIF) [inter-VLAN routing] èLogical Switch (Segment ID 5002] è VM-2 vNIC




East-West: VMs on Different Subnets, Different Hosts

VM-1 has IP address 172.16.10.4 and VM-2 has IP address 172.16.20.7


VM-1 vNIC èLogical Switch (Segment ID 5001) è DLR (internal LIF) [Inter-VLAN  routing] è Logical Switch (Segment ID 5002) è ESXi Host-01 VTEP [VXLAN encapsulation] è ESXi Host-01 NIC è Physical Switch è ESXi Host-02 NIC è ESXi Host-02 VTEP [VXLAN decapsulation] è Logical Switch (Segment ID 5002) è VM-2 vNIC




North-South: ESG and VM on same Host

VM-2 has an IP address 172.16.20.7 and File Server has IP address 172.16.30.8


VM-2 vNIC èLogical Switch (Segment ID 5002) è DLR (internal LIF >> uplink interface) è Logical Switch (Segment ID 5100) è Edge Services Gateway è ESXi Host-02 NIC èPhysical switch [inter-VLAN Routing] è File Server




North-South: ESG and VM on different Hosts

VM-2 has an IP address 172.16.20.7 and File Server has IP address 172.16.30.8


VM-2 vNIC èLogical Switch (Segment ID 5002) è DLR (internal LIF >> uplink interface) è Logical Switch (Segment ID 5100) è ESXi Host VTEP (VXLAN encapsulation) è ESXi Host-01 NIC è Physical Switch è ESXi Host-02 NIC è ESXi Host-02 VTEP [VXLAN decapsulation] è Logical Switch (segment ID 5100) è  Edge Services Gateway è ESXihost-02 NIC èPhysical switch [inter-VLAN routing] è File Server




Learn more about VMware NSX here


Comments

Popular posts from this blog

Filtering Routes in BGP using Route-maps and Prefix-list

Ansible-playbook for backing up running config of Cisco IOS

Ansible-Playbook to display output of multiple show commands (using stdout_lines with Loop)

Export or Backup Azure Virtual Networks or Subnet information into CSV using PowerShell

Ansible Playbook for Network OS Upgrade with pre and post checks

Export or Backup Azure Route Table into CSV using PowerShell

Cisco ASA Active/Active Failover Configuration

Get Model Number and Serial number of Cisco devices using ios_facts module

Download Visio Stencils for Network Topology