{"id":30009,"date":"2019-10-31T21:33:10","date_gmt":"2019-10-31T18:33:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1\/"},"modified":"2019-10-31T21:33:10","modified_gmt":"2019-10-31T18:33:10","slug":"vmware-nsx-dlya-samyh-malenkih-chast-1","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1","title":{"rendered":"VMware NSX za najmanje. Dio 1","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"VMware NSX za najmanje. Dio 1\" src=\"\/wp-content\/uploads\/2019\/03\/22caedbcfd1d6fa4e19bc5b0fe71e0c9.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAko pogledate konfiguraciju bilo kojeg vatrozida, vjerojatno \u0107ete vidjeti duga\u010dak popis s mno\u0161tvom IP adresa, portova, protokola i podmre\u017ea. Tako se klasi\u010dno implementiraju politike mre\u017ene sigurnosti za pristup korisnika resursima. Isprva se u konfiguraciji nastoji odr\u017eati red, no potom zaposlenici po\u010dinju prelaziti iz odjela u odjel, poslu\u017eitelji se razmno\u017eavaju i mijenjaju svoje uloge, pojavljuju se pristupi za razli\u010dite projekte na mjestima gdje obi\u010dno ne bi trebali biti, a rezultira stotinama nepoznatih staza.<\/p>\n<p>Oko nekih pravila, ako imamo sre\u0107e, postoje komentari \"Zamolio Vasja da to napravi\" ili \"Ovo je prolaz u DMZ\". Mre\u017eni administrator odlazi, i sve postaje potpuno nejasno. Potom netko odlu\u010di o\u010distiti konfiguraciju od Vasje, i sru\u0161i se SAP, jer je nekad Vasja tra\u017eio taj pristup za rad s operativnim SAP-om.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX za najmanje. Dio 1\" src=\"\/wp-content\/uploads\/2019\/03\/f79759ed590ad9b3a1f4878abdb47e6c.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDanas \u0107u govoriti o rje\u0161enju VMware NSX, koje poma\u017ee precizno primjenjivati politike mre\u017ene interakcije i sigurnosti bez zbrke u konfiguracijama vatrozida. Pokazat \u0107u koje su nove funkcije uvedene u odnosu na ono \u0161to je ranije bilo dostupno u VMware-u u ovoj oblasti. <noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>VMWare NSX \u2013 platforma za virtualizaciju i osiguranje sigurnosti mre\u017enih usluga. NSX rje\u0161ava zadatke usmjeravanja, prebacivanja, balansiranja optere\u0107enja, vatrozida i jo\u0161 mnogo drugih zanimljivih funkcija. <\/p>\n<p>NSX je nasljednik vlastitog proizvoda VMware vCloud Networking and Security (vCNS) i kupljenog Nicira NVP-a.<\/p>\n<h3>Od vCNS-a do NSX-a<\/h3>\n<p>\nRanije je klijent u oblaku, izgra\u0111enom na VMware vCloud, imao poseban virtualni stroj vCNS vShield Edge. Igrao je ulogu grani\u010dnog prolaza gdje se moglo konfigurirati mno\u0161tvo mre\u017enih funkcija: NAT, DHCP, Vatrozid, VPN, balansiranje optere\u0107enja itd. vShield Edge je ograni\u010davao interakciju virtualnog stroja s vanjskim svijetom prema pravilima navedenim u Vatrozidu i NAT-u. Unutar mre\u017ee virtualni strojevi su slobodno komunicirali jedni s drugima unutar podmre\u017ea. Ako \u017eelite jako da razdvojite i kontrolirate promet, mo\u017eete napraviti posebnu mre\u017eu za razli\u010dite dijelove aplikacija (razli\u010dite virtualne strojeve) i definirati odgovaraju\u0107a pravila u vatrozidu za njihovu mre\u017enu interakciju. No, to je dugo, slo\u017eeno i nije zanimljivo, posebno kada imate nekoliko desetaka virtualnih strojeva.<\/p>\n<p>U NSX VMware je implementirala koncept mikrosegmentacije pomo\u0107u distribuiranog vatrozida, koji je ugra\u0111en u jezgru hipervizora. U njemu se definiraju sigurnosne politike i mre\u017ene interakcije ne samo za IP i MAC adrese, ve\u0107 i za druge objekte: virtualne strojeve, aplikacije. Ako je NSX implementiran unutar organizacije, takvi objekti mogu postati korisnici ili grupe korisnika iz Active Directory. Svaki takav objekt pretvara se u mikrosegment u svom sigurnosnom okviru, u potrebnoj podmre\u017ei, sa svojom udobnom DMZ. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX za najmanje. Dio 1\" src=\"\/wp-content\/uploads\/2019\/03\/67ab3d12da30a0fcfad4f2b4f14368f5.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Prije je postojala jedna sigurnosna granica za cijeli resursni bazen, koja je bila za\u0161ti\u0107ena grani\u010dnim preklopnikom, dok s NSX-om mo\u017eemo izolirati pojedina\u010dni virtualni stroj \u010dak i unutar jedne mre\u017ee. <\/i><\/p>\n<p>Sigurnosne politike i mre\u017ene interakcije prilago\u0111avaju se ako objekt pre\u0111e u drugu mre\u017eu. Na primjer, ako premjestimo stroj s bazom podataka u drugi mre\u017eni segment ili \u010dak u drugi povezani virtualni podatkovni centar, pravila definirana za taj virtualni stroj \u0107e i dalje vrijediti bez obzira na njegovu novu lokaciju. Poslu\u017eitelj aplikacija i dalje \u0107e mo\u0107i komunicirati s bazom podataka.<\/p>\n<p>Na mjesto samog grani\u010dnog prolaza vCNS vShield Edge do\u0161ao je NSX Edge. On ima cijeli paket starih zna\u010dajki Edge-a plus nekoliko novih korisnih funkcija. O njima \u0107e biti rije\u010di u nastavku.<\/p>\n<h3>\u0160to je novo u NSX Edge?<\/h3>\n<p>\nFunkcionalnost NSX Edge ovisi o <noindex><a rel=\"nofollow\" href=\"https:\/\/www.vmware.com\/content\/dam\/digitalmarketing\/vmware\/en\/pdf\/products\/nsx\/vmware-nsx-compare-editions.pdf\">izdanju<\/a><\/noindex> NSX-a. Ukupno ih ima pet: Standard, Professional, Advanced, Enterprise, Plus Remote Branch Office. Sve novo i zanimljivo mo\u017ee se vidjeti tek od Advanced. Uklju\u010duju\u0107i i novi su\u010delje, koje se do potpune tranzicije vCloud-a na HTML5 (VMware obe\u0107ava ljeto 2019.) otvara u novoj kartici.<\/p>\n<p><b>Vatrozid.<\/b> Kao objekti za koje \u0107e se primjenjivati pravila, mo\u017eete odabrati IP adrese, mre\u017ee, su\u010delja prolaza i virtualne strojeve. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX za najmanje. Dio 1\" src=\"\/wp-content\/uploads\/2019\/03\/fa05b6c018bea8f968df340693d1eeab.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"VMware NSX za najmanje. Dio 1\" src=\"\/wp-content\/uploads\/2019\/03\/3b5844efa756f46f47e3ebf2b876a790.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>DHCP.<\/b> Osim postavljanja raspona IP adresa koje \u0107e se automatski dodijeliti virtualnim strojevima ove mre\u017ee, NSX Edge je omogu\u0107io funkcije <b>Binding<\/b> i <b>Relay<\/b>.<\/p>\n<p>Na kartici <b>Bindings<\/b> mo\u017eete povezati MAC adresu virtualnog stroja s IP adresom, ako je potrebno da IP adresa ostane nepromijenjena. Va\u017eno je da ta IP adresa ne ulazi u DHCP Pool.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX za najmanje. Dio 1\" src=\"\/wp-content\/uploads\/2019\/03\/da013f13cd762936df173ff601590f8b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNa kartici <b>Relay<\/b> Pode\u0161ava se prosljevanje DHCP poruka DHCP poslu\u017eiteljima koji se nalaze izvan va\u0161e organizacije u vCloud Director, uklju\u010duju\u0107i i DHCP poslu\u017eitelje fizi\u010dke infrastrukture. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX za najmanje. Dio 1\" src=\"\/wp-content\/uploads\/2019\/03\/c5b8762d49364db13cccd0c79f2692a8.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Routiranje.<\/b> Na vShield Edge bilo je mogu\u0107e postaviti samo stati\u010dko rutiranje. Ovdje se pojavilo dinami\u010dko rutiranje s podr\u0161kom za protokole OSPF i BGP. Tako\u0111er, postavke ECMP (Aktivno-aktivno) su postale dostupne, \u0161to omogu\u0107ava i preklapanje u slu\u010daju kvara s fizi\u010dkim usmjeriva\u010dima.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX za najmanje. Dio 1\" src=\"\/wp-content\/uploads\/2019\/03\/cc4a6a30f8ab130766009ed250e2e514.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Postavka OSPF-a<\/i><\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX za najmanje. Dio 1\" src=\"\/wp-content\/uploads\/2019\/03\/efdf3f78b3b7123aaca6b017c7507827.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Postavljanje BGP-a<\/i><\/p>\n<p>Jo\u0161 jedna novost \u2013 pode\u0161avanje preno\u0161enja ruta izme\u0111u razli\u010ditih protokola,<br \/>\nredistribucija ruta (route redistribution). <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX za najmanje. Dio 1\" src=\"\/wp-content\/uploads\/2019\/03\/c0a5c7b3055ba80b0c4fcda4c03e7d4c.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>L4\/L7 Balansiranje optere\u0107enja.<\/b> Pojavio se X-Forwarded-For za HTTPs zaglavlje. Bez njega su svi plakala. Na primjer, imate web stranicu koju balansirate. Bez proslje\u0111ivanja ovog zaglavlja sve radi, ali u statistici web poslu\u017eitelja niste vidjeli IP adrese posjetitelja, ve\u0107 IP adresu balansira\u010da. Sada se sve ispravno prikazuje. <\/p>\n<p>Tako\u0111er na kartici Aplikacijska pravila sada mo\u017eete dodavati skripte koje \u0107e izravno upravljati balansiranjem prometa.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX za najmanje. Dio 1\" src=\"\/wp-content\/uploads\/2019\/03\/8f28ba0a4e870cca84a295af68f90c02.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>VPN. <\/b>Osim IPSec VPN, NSX Edge podr\u017eava:<\/p>\n<ul>\n<li>L2 VPN, koji omogu\u0107ava pro\u0161irenje mre\u017ea izme\u0111u geografski udaljenih lokacija. Ova VPN je potrebna, na primjer, da kada se preselite na drugu lokaciju virtualna ma\u0161ina ostane u istoj podmre\u017ei i zadr\u017ei IP adresu.\n<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"VMware NSX za najmanje. Dio 1\" src=\"\/wp-content\/uploads\/2019\/03\/688ce2e7d26f63ea5cf9c9525294388b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<ul>\n<li>SSL VPN Plus, koji omogu\u0107ava korisnicima da se daljinski pove\u017eu na korporativnu mre\u017eu. Na razini vSphere ova funkcija je postojala, ali za vCloud Director ovo je novina. \n<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"VMware NSX za najmanje. Dio 1\" src=\"\/wp-content\/uploads\/2019\/03\/e624c7c61b1954e78a37fc512d121140.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>SSL certifikati.<\/b> Na NSX Edge sada mo\u017eete instalirati certifikate. To se ponovno odnosi na pitanje kome je potreban balansirni ure\u0111aj bez certifikata za https.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX za najmanje. Dio 1\" src=\"\/wp-content\/uploads\/2019\/03\/7dca479fbc19be397d3666980def43d3.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Grupe objekata (Grouping Objects).<\/b> Na ovoj kartici se definiraju grupe objekata na koje \u0107e se primjenjivati odre\u0111ena pravila mre\u017ene interakcije, na primjer pravila vatrozida. <\/p>\n<p>Ovi objekti mogu biti IP i MAC adrese. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX za najmanje. Dio 1\" src=\"\/wp-content\/uploads\/2019\/03\/8a28bdb82f8dd982c1edf9af99c5e6b7.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n\u00a0<br \/>\n<img decoding=\"async\" alt=\"VMware NSX za najmanje. Dio 1\" src=\"\/wp-content\/uploads\/2019\/03\/d67a661168e8dbe0a457f55843637ec4.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nOvdje je tako\u0111er naveden popis servisa (kombinacija protokol-port) i aplikacija koje se mogu koristiti prilikom sastavljanja pravila vatrozida. Nove servise i aplikacije mo\u017ee dodavati samo administrator vCD portala. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX za najmanje. Dio 1\" src=\"\/wp-content\/uploads\/2019\/03\/c282c7918004a9bab2084e4eadae1062.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n\u00a0<br \/>\n<img decoding=\"async\" alt=\"VMware NSX za najmanje. Dio 1\" src=\"\/wp-content\/uploads\/2019\/03\/95fd637be49655d7467f49218b32751b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Statistika.<\/b> Statistika o vezama: promet koji prolazi kroz prolaz, vatrozid i balansirnik. <\/p>\n<p>Status i statistika za svaki IPSEC VPN i L2 VPN tunel. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX za najmanje. Dio 1\" src=\"\/wp-content\/uploads\/2019\/03\/af05223598fb569f74a4e6aa0c8f5595.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Logiranje.<\/b> Na stranici Edge Settings mo\u017eete postaviti poslu\u017eitelj za zapisivanje logova. Zapisivanje radi za DNAT\/SNAT, DHCP, vatrozid, usmjeravanje, uravnote\u017eenje optere\u0107enja, IPsec VPN, SSL VPN Plus.<br \/>\n\u00a0<br \/>\nZa svaki objekt\/uslugu dostupni su sljede\u0107i tipovi obavijesti: <\/p>\n<p> \u2014 Debug<br \/>\n \u2014 Alert<br \/>\n \u2014 Critical<br \/>\n \u2014 Error<br \/>\n \u2014 Warning<br \/>\n \u2014 Notice<br \/>\n \u2014 Info<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX za najmanje. Dio 1\" src=\"\/wp-content\/uploads\/2019\/03\/ccd8345e8756004f1fbf2e2935ea5499.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Veli\u010dine NSX Edge <\/h3>\n<p>\nOvisno o zadacima i optere\u0107enjima VMware <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.vmware.com\/en\/VMware-NSX-Data-Center-for-vSphere\/6.3\/com.vmware.nsx.install.doc\/GUID-311BBB9F-32CC-4633-9F91-26A39296381A.html\">preporu\u010duje <\/a><\/noindex>mo\u017eete stvoriti NSX Edge sljede\u0107ih veli\u010dina:<\/p>\n<p><b>NSX Edge<br \/>\n(Compact)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(Large)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(Quad-Large)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(X-Large)<\/b><\/p>\n<p>vCPU<\/p>\n<p>1<\/p>\n<p>2<\/p>\n<p>4<\/p>\n<p>6<\/p>\n<p>Memorija<\/p>\n<p>512MB<\/p>\n<p>1GB<\/p>\n<p>1GB<\/p>\n<p>8GB<\/p>\n<p>Disk<\/p>\n<p>512MB<\/p>\n<p>512MB<\/p>\n<p>512MB<\/p>\n<p>4.5GB + 4GB<\/p>\n<p>Namjena<\/p>\n<p>Jedna<br \/>\naplikacija, testni<br \/>\ndata centar<\/p>\n<p>Mali <br \/>\nili srednji<br \/>\ndata centar<\/p>\n<p>Optere\u0107en<br \/>\nvatrozid<\/p>\n<p>Uravnote\u017eenje<br \/>\noptere\u0107enja na razini L7<\/p>\n<p>U nastavku u tablici \u2013 radne metrike mre\u017enih usluga ovisno o veli\u010dini NSX Edge.<\/p>\n<p><b>NSX Edge<br \/>\n(Compact)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(Large)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(Quad-Large)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(X-Large)<\/b><\/p>\n<p>Interfejsi<\/p>\n<p>10<\/p>\n<p>10<\/p>\n<p>10<\/p>\n<p>10<\/p>\n<p>Sub Interfaces (Trunk)<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>NAT pravila<\/p>\n<p>2,048<\/p>\n<p>4,096<\/p>\n<p>4,096<\/p>\n<p>8,192<\/p>\n<p>ARP unosi<br \/>\nDo prepisivanja<\/p>\n<p>1,024<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>FW pravila<\/p>\n<p>2000<\/p>\n<p>2000<\/p>\n<p>2000<\/p>\n<p>2000<\/p>\n<p>FW performanse<\/p>\n<p>3Gbps<\/p>\n<p>9.7Gbps<\/p>\n<p>9.7Gbps<\/p>\n<p>9.7Gbps<\/p>\n<p>DHCP grijali\u0161ta<\/p>\n<p>20,000<\/p>\n<p>20,000<\/p>\n<p>20,000<\/p>\n<p>20,000<\/p>\n<p>ECMP putevi<\/p>\n<p>8<\/p>\n<p>8<\/p>\n<p>8<\/p>\n<p>8<\/p>\n<p>Stati\u010dke rute<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>LB grijali\u0161ta<\/p>\n<p>64<\/p>\n<p>64<\/p>\n<p>64<\/p>\n<p>1,024<\/p>\n<p>LB virtualni poslu\u017eitelji<\/p>\n<p>64<\/p>\n<p>64<\/p>\n<p>64<\/p>\n<p>1,024<\/p>\n<p>LB poslu\u017eitelj \/ grijali\u0161te<\/p>\n<p>32<\/p>\n<p>32<\/p>\n<p>32<\/p>\n<p>32<\/p>\n<p>LB provjere zdravlja<\/p>\n<p>320<\/p>\n<p>320<\/p>\n<p>320<\/p>\n<p>3,072<\/p>\n<p>LB pravila aplikacije<\/p>\n<p>4,096<\/p>\n<p>4,096<\/p>\n<p>4,096<\/p>\n<p>4,096<\/p>\n<p>L2VPN klijenti Hub to Spoke<\/p>\n<p>5<\/p>\n<p>5<\/p>\n<p>5<\/p>\n<p>5<\/p>\n<p>L2VPN mre\u017ee po klijentu\/poslu\u017eitelju<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>IPSec tuneli<\/p>\n<p>512<\/p>\n<p>1,600<\/p>\n<p>4,096<\/p>\n<p>6,000<\/p>\n<p>SSLVPN tuneli<\/p>\n<p>50<\/p>\n<p>100<\/p>\n<p>100<\/p>\n<p>1,000<\/p>\n<p>SSLVPN privatne mre\u017ee<\/p>\n<p>16<\/p>\n<p>16<\/p>\n<p>16<\/p>\n<p>16<\/p>\n<p>Paralelne sesije<\/p>\n<p>64,000<\/p>\n<p>1,000,000<\/p>\n<p>1,000,000<\/p>\n<p>1,000,000<\/p>\n<p>Sesije\/u sekundi<\/p>\n<p>8,000<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>LB propusnost L7 proxy)<\/p>\n<p>2.2Gbps<\/p>\n<p>2.2Gbps<\/p>\n<p>3Gbps<\/p>\n<p>LB propusnost L4 mod)<\/p>\n<p>6Gbps<\/p>\n<p>6Gbps<\/p>\n<p>6Gbps<\/p>\n<p>LB veze\/s (L7 proxy)<\/p>\n<p>46,000<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>LB paralelne veze (L7 proxy)<\/p>\n<p>8,000<\/p>\n<p>60,000<\/p>\n<p>60,000<\/p>\n<p>LB veze\/s (L4 mod)<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>LB paralelne veze (L4 mod)<\/p>\n<p>600,000<\/p>\n<p>1,000,000<\/p>\n<p>1,000,000<\/p>\n<p>BGP rute<\/p>\n<p>20,000<\/p>\n<p>50,000<\/p>\n<p>250,000<\/p>\n<p>250,000<\/p>\n<p>BGP susjedi<\/p>\n<p>10<\/p>\n<p>20<\/p>\n<p>100<\/p>\n<p>100<\/p>\n<p>BGP rute redistribuirane<\/p>\n<p>Bez ograni\u010denja<\/p>\n<p>Bez ograni\u010denja<\/p>\n<p>Bez ograni\u010denja<\/p>\n<p>Bez ograni\u010denja<\/p>\n<p>OSPF rute<\/p>\n<p>20,000<\/p>\n<p>50,000<\/p>\n<p>100,000<\/p>\n<p>100,000<\/p>\n<p>OSPF LSA unosi Max 750 Tip-1<\/p>\n<p>20,000<\/p>\n<p>50,000<\/p>\n<p>100,000<\/p>\n<p>100,000<\/p>\n<p>OSPF susjedstva<\/p>\n<p>10<\/p>\n<p>20<\/p>\n<p>40<\/p>\n<p>40<\/p>\n<p>OSPF rute redistribuirane<\/p>\n<p>2000<\/p>\n<p>5000<\/p>\n<p>20,000<\/p>\n<p>20,000<\/p>\n<p>Ukupno ruta<\/p>\n<p>20,000<\/p>\n<p>50,000<\/p>\n<p>250,000<\/p>\n<p>250,000<\/p>\n<p>\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/anthonyspiteri.net\/nsx-bytes-updated-nsx-edge-feature-and-performance-matrix-2\/\"><i>Izvor<\/i><\/a><\/noindex><\/p>\n<p>Iz tablice je vidljivo da se uravnote\u017eenje na NSX Edge za produkcijske scenarije preporu\u010duje organizirati, tek po\u010dev\u0161i od veli\u010dine Large. <\/p>\n<p>Za sada imam sve. U sljede\u0107im dijelovima detaljno \u0107u pro\u0107i kroz postavku svake mre\u017ene usluge NSX Edge.<br \/>\n<br \/>Izvor: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dataline\/blog\/432980\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0415\u0441\u043b\u0438 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433 \u043b\u044e\u0431\u043e\u0433\u043e \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u0430, \u0442\u043e, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u043c\u044b \u0443\u0432\u0438\u0434\u0438\u043c \u043f\u0440\u043e\u0441\u0442\u044b\u043d\u044e \u0441 \u043a\u0443\u0447\u0435\u0439 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u043f\u043e\u0440\u0442\u043e\u0432, \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0438 \u043f\u043e\u0434\u0441\u0435\u0442\u0435\u0439. \u0422\u0430\u043a \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0442\u0441\u044f \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043a \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c. \u0421\u043d\u0430\u0447\u0430\u043b\u0430 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0435 \u0441\u0442\u0430\u0440\u0430\u044e\u0442\u0441\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u043f\u043e\u0440\u044f\u0434\u043e\u043a, \u043d\u043e \u043f\u043e\u0442\u043e\u043c \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442\u044c \u0438\u0437 \u043e\u0442\u0434\u0435\u043b\u0430 \u0432 \u043e\u0442\u0434\u0435\u043b, \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0440\u0430\u0437\u043c\u043d\u043e\u0436\u0430\u0442\u044c\u0441\u044f \u0438 \u043c\u0435\u043d\u044f\u0442\u044c \u0441\u0432\u043e\u0438 \u0440\u043e\u043b\u0438, \u043f\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u044b \u0434\u043b\u044f \u0440\u0430\u0437\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-30009","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hr\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"hr_HR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47VMware NSX \u0434\u043b\u044f \u0441\u0430\u043c\u044b\u0445 \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u0438\u0445. \u0427\u0430\u0441\u0442\u044c 1 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hr\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:33:10+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:33:10+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47VMware NSX za najmanje. Dio 1 | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47VMware NSX \u0434\u043b\u044f \u0441\u0430\u043c\u044b\u0445 \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u0438\u0445. \u0427\u0430\u0441\u0442\u044c 1 | ProHoster","og:url":"https:\/\/prohoster.info\/hr\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:33:10+00:00","article:modified_time":"2019-10-31T18:33:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30009","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-20 23:24:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:44:38","updated":"2026-01-20 23:24:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/30009","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=30009"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/30009\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=30009"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=30009"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=30009"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}