After being back from the holidays, I decided to catch up on some internal webinars I missed in the last part of 2020. While listening to one of the recordings, I grasped an exciting piece of information about a tool to migrate from NVDS to VDS 7.0 in NSX-T 3.1. I've been waiting on this … Continue reading NSX-T 3.1 NVDS to NSX on VDS Assisted Migration
Exporting the NSX-T DFW configuration via the Policy API
Some times it's useful to export the entire distributed firewall configuration. It could be used as an offline backup before applying configuration changes, provided to personnel who does not have direct access to the NSX manager for auditing or information, or leveraged as a starting point for a migration to a new environment. Unfortunately, NSX-T … Continue reading Exporting the NSX-T DFW configuration via the Policy API
Adding Terraform NSX configurations to a multibranch CI/CD Pipeline
Managing our network with an infrastructure as code (IaC) approach means using the same methodologies and processes we would use for the application code. Even better would be to treat the network configurations required to support the application as an integral part of the app itself. But, what does it exactly mean in practice? An … Continue reading Adding Terraform NSX configurations to a multibranch CI/CD Pipeline
Network & Security as a service via the NSX Policy API, Git, and Jenkins
When getting started with infrastructure automation, it is common to put together a script that sequentially performs the steps we would have done through the UI or the CLI. There is nothing wrong with that. Still, the more I played with APIs and Automation tools, the more I realized that to really treat my infrastructure … Continue reading Network & Security as a service via the NSX Policy API, Git, and Jenkins
NSX-T Multitenancy – Object-Based RBAC with Principal Identities and Policy API
In this post, I will explore the possibility of leveraging NSX-T Principal Identities in lieu of a proper object-based RBAC functionality not available in the current 2.4 version. This solution may be appealing in some multi-tenant scenarios. What is multitenancy? Since I started working at VMware, I learned that any time I talk about multitenancy … Continue reading NSX-T Multitenancy – Object-Based RBAC with Principal Identities and Policy API
NSX-T and Ansible – Some tips
I was planning to write an introductory post about how to get started with Ansible with NSX-T. I then realized that I could not do a better job than what Madhukar Krishnarao did here. I suggest you go through his blog post if you want to get started with Ansible for NSX-T. In this post, … Continue reading NSX-T and Ansible – Some tips
NSX-T and Ansible – An Overview
I spent the last few blog posts covering the basics of the Policy API introduced in NSX-T 2.4. I will be back to that topic soon with more examples, but for now, I would instead move to a different tool that I have been heavily leveraging when automating NSX-T, Ansible. VMware R&D has provided us … Continue reading NSX-T and Ansible – An Overview
NSX-T Simplified vs Advanced UI
The most noticeable change in NSX-T 2.4 is the updated user interfaces. Specifically the option to perform the same configuration trough two very different UIs. In this post, I will provide some information that I hope will help in dealing with this UI split-brain. Overview The familiar UI available in version 2.3 has been moved … Continue reading NSX-T Simplified vs Advanced UI
Interacting with the NSX-T Policy API
For an overview of the NSX-T Policy API available in version 2.4 and how it relates to the older management plane API, you can take a look at my previous posts. In this post, I will try to provide some insight on how to leverage the NSX-T policy API at its full potential. The Data … Continue reading Interacting with the NSX-T Policy API
NSX-T two APIs. How do they relate?
In this post, I will review how the new NSX-T policy API interacts with the old management plane API. If you want an overview of the benefits and properties of the new Policy API first, you can review my previous post. The Policy API endpoint resides on the same appliance as the Management Plane API, … Continue reading NSX-T two APIs. How do they relate?