{"id":30009,"date":"2019-10-31T21:33:10","date_gmt":"2019-10-31T18:33:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1\/"},"modified":"2019-10-31T21:33:10","modified_gmt":"2019-10-31T18:33:10","slug":"vmware-nsx-dlya-samyh-malenkih-chast-1","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1","title":{"rendered":"VMware NSX a legkisebbeknek. 1. r\u00e9sz","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"VMware NSX a legkisebbeknek. 1. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/03\/22caedbcfd1d6fa4e19bc5b0fe71e0c9.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nHa megn\u00e9zz\u00fck b\u00e1rmelyik t\u0171zfal konfigur\u00e1ci\u00f3j\u00e1t, val\u00f3sz\u00edn\u0171leg egy nagy t\u00f6mb IP-c\u00edmet, portokat, protokollokat \u00e9s alh\u00e1l\u00f3zatokat fogunk l\u00e1tni. \u00cdgy val\u00f3sulnak meg klasszikusan a h\u00e1l\u00f3zati biztons\u00e1gi politik\u00e1k, amelyek a felhaszn\u00e1l\u00f3k hozz\u00e1f\u00e9r\u00e9s\u00e9t szab\u00e1lyozz\u00e1k az er\u0151forr\u00e1sokhoz. El\u0151sz\u00f6r a konfigur\u00e1ci\u00f3ban igyekeznek rendet tartani, de azt\u00e1n a munkat\u00e1rsak \u00e1tj\u00e1rnak egyik oszt\u00e1lyb\u00f3l a m\u00e1sikba, a szerverek megszaporodnak \u00e9s megv\u00e1ltoztatj\u00e1k funkci\u00f3ikat, hozz\u00e1f\u00e9r\u00e9sek jelennek meg k\u00fcl\u00f6nb\u00f6z\u0151 projektekhez, amelyekhez \u00e1ltal\u00e1ban nem lenne szabad hozz\u00e1f\u00e9rni, \u00e9s sz\u00e1z ismeretlen, bonyolult \u00fatvonal keletkezik.<\/p>\n<p>N\u00e9h\u00e1ny szab\u00e1ly k\u00f6r\u00fcl, ha szerencs\u00e9nk van, tal\u00e1lunk megjegyz\u00e9seket, mint p\u00e9ld\u00e1ul: \u201eVasja k\u00e9rte, hogy csin\u00e1lja\u201d vagy \u201eEz a DMZ-be vezet\u0151 \u00e1tj\u00e1r\u00f3\u201d. A h\u00e1l\u00f3zati adminisztr\u00e1tor t\u00e1vozik, \u00e9s minden teljesen \u00e9rthetetlenn\u00e9 v\u00e1lik. Azut\u00e1n valaki \u00fagy d\u00f6nt\u00f6tt, hogy megtiszt\u00edtja a konfigur\u00e1ci\u00f3t Vasj\u00e1t\u00f3l, \u00e9s le\u00e1llt a SAP, mert valaha Vasja k\u00e9rte ezt a hozz\u00e1f\u00e9r\u00e9st a m\u0171k\u00f6d\u0151 SAP-hoz.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX a legkisebbeknek. 1. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/03\/f79759ed590ad9b3a1f4878abdb47e6c.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nMa bemutatom a VMware NSX megold\u00e1s\u00e1t, amely seg\u00edt c\u00e9lzottan alkalmazni a h\u00e1l\u00f3zati k\u00f6lcs\u00f6nhat\u00e1sok \u00e9s biztons\u00e1gi politik\u00e1kat an\u00e9lk\u00fcl, hogy z\u0171rzavar lenne a t\u0171zfal konfigur\u00e1ci\u00f3kban. Megmutatom, milyen \u00faj funkci\u00f3k jelentek meg az el\u0151z\u0151 VMware verzi\u00f3khoz k\u00e9pest ezen a ter\u00fcleten. <noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>A VMWare NSX \u2013 a h\u00e1l\u00f3zati szolg\u00e1ltat\u00e1sok virtualiz\u00e1ci\u00f3j\u00e1nak \u00e9s biztons\u00e1g\u00e1nak platformja. Az NSX feladatai k\u00f6z\u00e9 tartozik a routing, switching, terhel\u00e9seloszt\u00e1s, t\u0171zfal \u00e9s m\u00e9g sok m\u00e1s \u00e9rdekes funkci\u00f3. <\/p>\n<p>Az NSX a VMware saj\u00e1t term\u00e9k\u00e9nek, a vCloud Networking and Security (vCNS) ut\u00f3dja, valamint a Nicira NVP megv\u00e1s\u00e1rl\u00e1s\u00e1nak eredm\u00e9nye.<\/p>\n<h3>vCNS-t\u0151l az NSX-ig<\/h3>\n<p>\nR\u00e9gebben a felhaszn\u00e1l\u00f3nak a VMware vCloud-on fel\u00e9p\u00edtett felh\u0151j\u00e9ben egy k\u00fcl\u00f6n virtu\u00e1lis g\u00e9pe volt, a vCNS vShield Edge. Ez hat\u00e1r\u00e1tj\u00e1r\u00f3k\u00e9nt m\u0171k\u00f6d\u00f6tt, ahol sz\u00e1mos h\u00e1l\u00f3zati funkci\u00f3t be lehetett \u00e1ll\u00edtani: NAT, DHCP, t\u0171zfal, VPN, terhel\u00e9seloszt\u00f3 stb. A vShield Edge korl\u00e1tozta a virtu\u00e1lis g\u00e9p kapcsolat\u00e1t a k\u00fclvil\u00e1ggal a t\u0171zfalban \u00e9s az NAT-ban r\u00f6gz\u00edtett szab\u00e1lyok szerint. A h\u00e1l\u00f3zaton bel\u00fcl a virtu\u00e1lis g\u00e9pek szabadon kommunik\u00e1lhattak egym\u00e1ssal az alh\u00e1l\u00f3zatokon bel\u00fcl. Ha nagyon szeretn\u00e9nk megosztani \u00e9s ir\u00e1ny\u00edtani a forgalmat, l\u00e9trehozhatunk k\u00fcl\u00f6n h\u00e1l\u00f3zatot az alkalmaz\u00e1sok k\u00fcl\u00f6nb\u00f6z\u0151 r\u00e9szei sz\u00e1m\u00e1ra (k\u00fcl\u00f6nb\u00f6z\u0151 virtu\u00e1lis g\u00e9pek) \u00e9s be\u00edrhatjuk a megfelel\u0151 szab\u00e1lyokat a t\u0171zfalba az azok h\u00e1l\u00f3zati k\u00f6lcs\u00f6nhat\u00e1s\u00e1hoz. De ez hosszadalmas, bonyolult \u00e9s unalmas, k\u00fcl\u00f6n\u00f6sen, ha t\u00f6bb tucat virtu\u00e1lis g\u00e9p\u00fcnk van.<\/p>\n<p>Az NSX-szel a VMware megval\u00f3s\u00edtotta a mikroszegment\u00e1ci\u00f3 koncepci\u00f3j\u00e1t egy elosztott t\u0171zfal (distributed firewall) seg\u00edts\u00e9g\u00e9vel, amely be\u00e9p\u00edtett a hipervizor magj\u00e1ba. Itt \u00edrj\u00e1k el\u0151 a biztons\u00e1gi politik\u00e1kat \u00e9s a h\u00e1l\u00f3zati interakci\u00f3kat nem csak IP- \u00e9s MAC-c\u00edmekre, hanem m\u00e1s objektumokra is: virtu\u00e1lis g\u00e9pekre, alkalmaz\u00e1sokra. Ha az NSX a szervezet belsej\u00e9ben van telep\u00edtve, akkor ezeket az objektumokat felhaszn\u00e1l\u00f3k vagy felhaszn\u00e1l\u00f3i csoportok az Active Directory-b\u00f3l is v\u00e1laszthatja. Minden ilyen objektum saj\u00e1t biztons\u00e1gi kont\u00farj\u00e1ban mikroszegmensk\u00e9nt m\u0171k\u00f6dik, a megfelel\u0151 alh\u00e1l\u00f3zatban, a saj\u00e1t kis DMZ-j\u00e9vel :). <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX a legkisebbeknek. 1. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/03\/67ab3d12da30a0fcfad4f2b4f14368f5.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Kor\u00e1bban a biztons\u00e1gi perem egy volt az \u00f6sszes er\u0151forr\u00e1sk\u00e9szlet sz\u00e1m\u00e1ra, a hat\u00e1reloszt\u00f3 kapcsol\u00f3 v\u00e9dte, m\u00edg az NSX-szel ak\u00e1r egyetlen virtu\u00e1lis g\u00e9pet is el lehet k\u00fcl\u00f6n\u00edteni a felesleges interakci\u00f3kt\u00f3l m\u00e9g egy h\u00e1l\u00f3zaton bel\u00fcl is. <\/i><\/p>\n<p>A biztons\u00e1gi politik\u00e1k \u00e9s a h\u00e1l\u00f3zati interakci\u00f3k alkalmazkodnak, ha az objektum m\u00e1sik h\u00e1l\u00f3zatra k\u00f6lt\u00f6zik. P\u00e9ld\u00e1ul, ha egy adatb\u00e1zis g\u00e9pet \u00e1tvisz\u00fcnk egy m\u00e1sik h\u00e1l\u00f3zati szegmensbe vagy ak\u00e1r egy m\u00e1sik kapcsolt virtu\u00e1lis adatk\u00f6zpontba, a virtu\u00e1lis g\u00e9pre vonatkoz\u00f3 szab\u00e1lyok tov\u00e1bbra is \u00e9rv\u00e9nyesek maradnak f\u00fcggetlen\u00fcl az \u00faj helyzet\u00e9t\u0151l. Az alkalmaz\u00e1sszerver tov\u00e1bbra is tud kapcsolatba l\u00e9pni az adatb\u00e1zissal.<\/p>\n<p>Az eddigi hat\u00e1rol\u00f3 \u00e1tj\u00e1r\u00f3, a vCNS vShield Edge helyett az NSX Edge l\u00e9pett a sz\u00ednre. Ez rendelkezik az el\u0151z\u0151 Edge minden alapvet\u0151 funkci\u00f3j\u00e1val, plusz n\u00e9h\u00e1ny \u00faj hasznos funkci\u00f3val. Ezekr\u0151l fogunk besz\u00e9lni a tov\u00e1bbiakban.<\/p>\n<h3>Mi az \u00fajdons\u00e1g az NSX Edge-n\u00e9l?<\/h3>\n<p>\nAz NSX Edge funkcionalit\u00e1sa a <noindex><a rel=\"nofollow\" href=\"https:\/\/www.vmware.com\/content\/dam\/digitalmarketing\/vmware\/en\/pdf\/products\/nsx\/vmware-nsx-compare-editions.pdf\">kiad\u00e1son<\/a><\/noindex> alapul \u00e1ll. \u00d6sszesen \u00f6t k\u00fcl\u00f6nb\u00f6z\u0151 kiad\u00e1s l\u00e9tezik: Standard, Professional, Advanced, Enterprise, Plus Remote Branch Office. Mindezt az \u00fajdons\u00e1got csak az Advanced-t\u00f3l kezdve l\u00e1tjuk. P\u00e9ld\u00e1ul az \u00faj fel\u00fclet, amely a vCloud teljes HTML5-\u00f6s \u00e1t\u00e1ll\u00edt\u00e1sa el\u0151tt (a VMware 2019 nyar\u00e1t \u00edg\u00e9r) \u00faj f\u00fcl\u00f6n ny\u00edlik meg.<\/p>\n<p><b>T\u0171zfal.<\/b> Az alkalmazand\u00f3 szab\u00e1lyokhoz v\u00e1laszthat\u00f3k IP-c\u00edmek, h\u00e1l\u00f3zatok, \u00e1tj\u00e1r\u00f3i interf\u00e9szek \u00e9s virtu\u00e1lis g\u00e9pek. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX a legkisebbeknek. 1. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/03\/fa05b6c018bea8f968df340693d1eeab.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"VMware NSX a legkisebbeknek. 1. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/03\/3b5844efa756f46f47e3ebf2b876a790.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>DHCP.<\/b> A virtu\u00e1lis g\u00e9pek automatikus IP-c\u00edm kioszt\u00e1s\u00e1hoz be\u00e1ll\u00edtott tartom\u00e1ny mellett az NSX Edge-kel el\u00e9rhet\u00f3k a <b>Binding<\/b> \u00e9s <b>Relay<\/b>.<\/p>\n<p>A <b>Bindings<\/b> f\u00fcl alatt \u00f6sszekapcsolhatjuk a virtu\u00e1lis g\u00e9p MAC-c\u00edm\u00e9t az IP-c\u00edmmel, ha azt szeretn\u00e9nk, hogy az IP-c\u00edm ne v\u00e1ltozzon. A l\u00e9nyeg, hogy ez az IP-c\u00edm ne ker\u00fclj\u00f6n be a DHCP Pool-ba.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX a legkisebbeknek. 1. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/03\/da013f13cd762936df173ff601590f8b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nA <b>Relay<\/b> A DHCP \u00fczenetek DHCP-szerverekre t\u00f6rt\u00e9n\u0151 tov\u00e1bb\u00edt\u00e1sa konfigur\u00e1l\u00e1sa, amelyek a szervezet\u00e9n k\u00edv\u00fcl tal\u00e1lhat\u00f3k a vCloud Directorban, bele\u00e9rtve a fizikai infrastrukt\u00fara DHCP-szervereit is. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX a legkisebbeknek. 1. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/03\/c5b8762d49364db13cccd0c79f2692a8.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>\u00datv\u00e1laszt\u00e1s.<\/b> A vShield Edge eset\u00e9ben csak statikus \u00fatvonalv\u00e1laszt\u00e1s volt be\u00e1ll\u00edthat\u00f3. Mostant\u00f3l el\u00e9rhet\u0151 a dinamikus \u00fatvonalv\u00e1laszt\u00e1s OSPF \u00e9s BGP protokollokkal. Ezenk\u00edv\u00fcl el\u00e9rhet\u0151v\u00e9 v\u00e1ltak az ECMP (Akt\u00edv-akt\u00edv) be\u00e1ll\u00edt\u00e1sok, ami lehet\u0151v\u00e9 teszi az akt\u00edv-akt\u00edv t\u00edpus\u00fa hibaelh\u00e1r\u00edt\u00e1st a fizikai \u00fatv\u00e1laszt\u00f3k eset\u00e9ben.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX a legkisebbeknek. 1. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/03\/cc4a6a30f8ab130766009ed250e2e514.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>OSPF be\u00e1ll\u00edt\u00e1sa<\/i><\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX a legkisebbeknek. 1. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/03\/efdf3f78b3b7123aaca6b017c7507827.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>BGP be\u00e1ll\u00edt\u00e1sa<\/i><\/p>\n<p>Egy \u00faj funkci\u00f3 - \u00fatvonalak \u00e1tvitele k\u00fcl\u00f6nb\u00f6z\u0151 protokollok k\u00f6z\u00f6tt,<br \/>\n\u00fatvonalak \u00fajraeloszt\u00e1sa (route redistribution). <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX a legkisebbeknek. 1. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/03\/c0a5c7b3055ba80b0c4fcda4c03e7d4c.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>L4\/L7 Terhel\u00e9seloszt\u00f3.<\/b> Megjelent az X-Forwarded-For HTTPs fejl\u00e9chez. N\u00e9lk\u00fcle mindenki s\u00edrt. P\u00e9ld\u00e1ul, ha van egy weboldala, amelyet terhel\u00e9seloszt\u00e1ssal kezel, akkor an\u00e9lk\u00fcl, hogy ezt a fejl\u00e9cet \u00e1tadn\u00e1, minden rendben m\u0171k\u00f6dik, de a webszerver statisztik\u00e1iban nem a l\u00e1togat\u00f3k IP-c\u00edmeit, hanem a terhel\u00e9seloszt\u00f3 IP-c\u00edm\u00e9t l\u00e1tta. Most minden helyes lett. <\/p>\n<p>Az Application Rules f\u00fcl\u00f6n most m\u00e1r olyan szkripteket is lehet hozz\u00e1adni, amelyek k\u00f6zvetlen\u00fcl ir\u00e1ny\u00edtj\u00e1k a forgalom terhel\u00e9seloszt\u00e1s\u00e1t.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX a legkisebbeknek. 1. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/03\/8f28ba0a4e870cca84a295af68f90c02.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>VPN. <\/b>Az IPSec VPN mellett az NSX Edge t\u00e1mogatja:<\/p>\n<ul>\n<li>L2 VPN, amely lehet\u0151v\u00e9 teszi a h\u00e1l\u00f3zatok kiterjeszt\u00e9s\u00e9t f\u00f6ldrajzilag t\u00e1voli helysz\u00ednek k\u00f6z\u00f6tt. Ez a VPN p\u00e9ld\u00e1ul akkor sz\u00fcks\u00e9ges, hogy a virtu\u00e1lis g\u00e9p ugyanabban az alh\u00e1l\u00f3zatban maradjon \u00e9s meg\u0151rizze az IP-c\u00edm\u00e9t, amikor egy m\u00e1sik helysz\u00ednre k\u00f6lt\u00f6zik.\n<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"VMware NSX a legkisebbeknek. 1. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/03\/688ce2e7d26f63ea5cf9c9525294388b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<ul>\n<li>SSL VPN Plus, amely lehet\u0151v\u00e9 teszi a felhaszn\u00e1l\u00f3k t\u00e1voli csatlakoz\u00e1s\u00e1t a v\u00e1llalati h\u00e1l\u00f3zathoz. A vSphere szinten m\u00e1r volt ilyen funkci\u00f3, de a vCloud Director sz\u00e1m\u00e1ra ez \u00fajdons\u00e1g. \n<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"VMware NSX a legkisebbeknek. 1. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/03\/e624c7c61b1954e78a37fc512d121140.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>SSL-tan\u00fas\u00edtv\u00e1nyok.<\/b> Az NSX Edge-en most m\u00e1r tan\u00fas\u00edtv\u00e1nyokat lehet telep\u00edteni. Ez ism\u00e9t arra a k\u00e9rd\u00e9sre vezethet\u0151 vissza, kinek volt sz\u00fcks\u00e9ge terhel\u00e9seloszt\u00f3ra SSL-tan\u00fas\u00edtv\u00e1ny n\u00e9lk\u00fcl az https eset\u00e9n.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX a legkisebbeknek. 1. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/03\/7dca479fbc19be397d3666980def43d3.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Objektumcsoportok (Grouping Objects).<\/b> Ez a f\u00fcl a h\u00e1l\u00f3zati interakci\u00f3s szab\u00e1lyok \u00e9rv\u00e9nyes\u00edt\u00e9s\u00e9re szolg\u00e1l\u00f3 objektumcsoportokat hat\u00e1rozza meg, p\u00e9ld\u00e1ul t\u0171zfal-szab\u00e1lyokat. <\/p>\n<p>Ezek az objektumok lehetnek IP- \u00e9s MAC-c\u00edmek. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX a legkisebbeknek. 1. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/03\/8a28bdb82f8dd982c1edf9af99c5e6b7.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n\u00a0<br \/>\n<img decoding=\"async\" alt=\"VMware NSX a legkisebbeknek. 1. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/03\/d67a661168e8dbe0a457f55843637ec4.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nItt tal\u00e1lhat\u00f3 a szolg\u00e1ltat\u00e1sok (protokoll-port kombin\u00e1ci\u00f3) \u00e9s alkalmaz\u00e1sok list\u00e1ja is, amelyeket a t\u0171zfalszab\u00e1lyok megalkot\u00e1sakor felhaszn\u00e1lhatunk. \u00daj szolg\u00e1ltat\u00e1sokat \u00e9s alkalmaz\u00e1sokat csak a vCD port\u00e1l adminisztr\u00e1tora adhat hozz\u00e1. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX a legkisebbeknek. 1. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/03\/c282c7918004a9bab2084e4eadae1062.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n\u00a0<br \/>\n<img decoding=\"async\" alt=\"VMware NSX a legkisebbeknek. 1. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/03\/95fd637be49655d7467f49218b32751b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Statisztika.<\/b> Statisztika a csatlakoz\u00e1sokr\u00f3l: forgalom, amely \u00e1thalad a kapun, a t\u0171zfalon \u00e9s a terhel\u00e9seloszt\u00f3n. <\/p>\n<p>Az IPSEC VPN \u00e9s L2 VPN alag\u00fat st\u00e1tusza \u00e9s statisztik\u00e1ja. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX a legkisebbeknek. 1. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/03\/af05223598fb569f74a4e6aa0c8f5595.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Napl\u00f3z\u00e1s.<\/b> Az Edge Be\u00e1ll\u00edt\u00e1sok f\u00fcl\u00f6n be\u00e1ll\u00edthatja a napl\u00f3z\u00e1si szervert. A napl\u00f3z\u00e1s a DNAT\/SNAT, DHCP, t\u0171zfal, \u00fatv\u00e1laszt\u00e1s, terhel\u00e9seloszt\u00f3, IPsec VPN, SSL VPN Plus eset\u00e9ben m\u0171k\u00f6dik.<br \/>\n\u00a0<br \/>\nMinden objektum\/szolg\u00e1ltat\u00e1s sz\u00e1m\u00e1ra a k\u00f6vetkez\u0151 \u00e9rtes\u00edt\u00e9si t\u00edpusok \u00e1llnak rendelkez\u00e9sre: <\/p>\n<p> \u2014 Debug<br \/>\n \u2014 Figyelmeztet\u00e9s<br \/>\n \u2014 Kritikus<br \/>\n \u2014 Hib\u00e1s<br \/>\n \u2014 Figyelmeztet\u00e9s<br \/>\n \u2014 \u00c9rtes\u00edt\u00e9s<br \/>\n \u2014 Inform\u00e1ci\u00f3<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX a legkisebbeknek. 1. r\u00e9sz\" src=\"\/wp-content\/uploads\/2019\/03\/ccd8345e8756004f1fbf2e2935ea5499.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>NSX Edge m\u00e9retei <\/h3>\n<p>\nA VMware \u00e1ltal megoldand\u00f3 feladatok \u00e9s volumek f\u00fcggv\u00e9ny\u00e9ben <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.vmware.com\/en\/VMware-NSX-Data-Center-for-vSphere\/6.3\/com.vmware.nsx.install.doc\/GUID-311BBB9F-32CC-4633-9F91-26A39296381A.html\">aj\u00e1nlja <\/a><\/noindex>a k\u00f6vetkez\u0151 m\u00e9ret\u0171 NSX Edge l\u00e9trehoz\u00e1s\u00e1t:<\/p>\n<p><b>NSX Edge<br \/>\n(Kompakt)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(Nagy)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(Quad-Nagy)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(X-Nagy)<\/b><\/p>\n<p>vCPU<\/p>\n<p>1<\/p>\n<p>2<\/p>\n<p>4<\/p>\n<p>6<\/p>\n<p>Mem\u00f3ria<\/p>\n<p>512MB<\/p>\n<p>1GB<\/p>\n<p>1GB<\/p>\n<p>8GB<\/p>\n<p>Lemez<\/p>\n<p>512MB<\/p>\n<p>512MB<\/p>\n<p>512MB<\/p>\n<p>4.5GB + 4GB<\/p>\n<p>C\u00e9l<\/p>\n<p>Egy<br \/>\nalkalmaz\u00e1s, teszt<br \/>\nadatk\u00f6zpont<\/p>\n<p>Kis <br \/>\nvagy k\u00f6zepes<br \/>\nadatk\u00f6zpont<\/p>\n<p>Megterhelt<br \/>\nt\u0171zfal<\/p>\n<p>Terhel\u00e9s<br \/>\nL7 szint\u0171 terhel\u00e9seloszt\u00e1s<\/p>\n<p>Az al\u00e1bbi t\u00e1bl\u00e1zatban a h\u00e1l\u00f3zati szolg\u00e1ltat\u00e1sok munkametrik\u00e1i tal\u00e1lhat\u00f3k az NSX Edge m\u00e9reteit\u0151l f\u00fcgg\u0151en.<\/p>\n<p><b>NSX Edge<br \/>\n(Kompakt)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(Nagy)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(Quad-Nagy)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(X-Nagy)<\/b><\/p>\n<p>Interfaces<\/p>\n<p>10<\/p>\n<p>10<\/p>\n<p>10<\/p>\n<p>10<\/p>\n<p>Alh\u00e1l\u00f3zati interf\u00e9szek (Trunk)<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>NAT szab\u00e1lyok<\/p>\n<p>2,048<\/p>\n<p>4,096<\/p>\n<p>4,096<\/p>\n<p>8,192<\/p>\n<p>ARP bejegyz\u00e9sek<br \/>\nFel\u00fcl\u00edr\u00e1sig<\/p>\n<p>1,024<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>FW szab\u00e1lyok<\/p>\n<p>2000<\/p>\n<p>2000<\/p>\n<p>2000<\/p>\n<p>2000<\/p>\n<p>FW teljes\u00edtm\u00e9ny<\/p>\n<p>3Gbps<\/p>\n<p>9.7Gbps<\/p>\n<p>9.7Gbps<\/p>\n<p>9.7Gbps<\/p>\n<p>DHCP tartom\u00e1nyok<\/p>\n<p>20,000<\/p>\n<p>20,000<\/p>\n<p>20,000<\/p>\n<p>20,000<\/p>\n<p>ECMP utak<\/p>\n<p>8<\/p>\n<p>8<\/p>\n<p>8<\/p>\n<p>8<\/p>\n<p>Statikus \u00fatvonalak<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>LB tartom\u00e1nyok<\/p>\n<p>64<\/p>\n<p>64<\/p>\n<p>64<\/p>\n<p>1,024<\/p>\n<p>LB virtu\u00e1lis szerverek<\/p>\n<p>64<\/p>\n<p>64<\/p>\n<p>64<\/p>\n<p>1,024<\/p>\n<p>LB szerver \/ tartom\u00e1ny<\/p>\n<p>32<\/p>\n<p>32<\/p>\n<p>32<\/p>\n<p>32<\/p>\n<p>LB eg\u00e9szs\u00e9g\u00fcgyi ellen\u0151rz\u00e9sek<\/p>\n<p>320<\/p>\n<p>320<\/p>\n<p>320<\/p>\n<p>3,072<\/p>\n<p>LB alkalmaz\u00e1s szab\u00e1lyok<\/p>\n<p>4,096<\/p>\n<p>4,096<\/p>\n<p>4,096<\/p>\n<p>4,096<\/p>\n<p>L2VPN Kliensek Hubb\u0151l Keszty\u0171be<\/p>\n<p>5<\/p>\n<p>5<\/p>\n<p>5<\/p>\n<p>5<\/p>\n<p>L2VPN H\u00e1l\u00f3zatok kliens\/serverenk\u00e9nt<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>IPSec Tunnellek<\/p>\n<p>512<\/p>\n<p>1,600<\/p>\n<p>4,096<\/p>\n<p>6,000<\/p>\n<p>SSLVPN Tunnellek<\/p>\n<p>50<\/p>\n<p>100<\/p>\n<p>100<\/p>\n<p>1,000<\/p>\n<p>SSLVPN Priv\u00e1t H\u00e1l\u00f3zatok<\/p>\n<p>16<\/p>\n<p>16<\/p>\n<p>16<\/p>\n<p>16<\/p>\n<p>P\u00e1rhuzamos munkamenetek<\/p>\n<p>64,000<\/p>\n<p>1,000,000<\/p>\n<p>1,000,000<\/p>\n<p>1,000,000<\/p>\n<p>Munkamenetek\/m\u00e1sodperc<\/p>\n<p>8,000<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>LB \u00c1tviteli teljes\u00edtm\u00e9ny L7 Proxy)<\/p>\n<p>2.2Gbps<\/p>\n<p>2.2Gbps<\/p>\n<p>3Gbps<\/p>\n<p>LB \u00c1tviteli teljes\u00edtm\u00e9ny L4 M\u00f3d)<\/p>\n<p>6Gbps<\/p>\n<p>6Gbps<\/p>\n<p>6Gbps<\/p>\n<p>LB Kapcsolatok\/s (L7 Proxy)<\/p>\n<p>46,000<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>LB P\u00e1rhuzamos Kapcsolatok (L7 Proxy)<\/p>\n<p>8,000<\/p>\n<p>60,000<\/p>\n<p>60,000<\/p>\n<p>LB Kapcsolatok\/s (L4 M\u00f3d)<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>LB P\u00e1rhuzamos Kapcsolatok (L4 M\u00f3d)<\/p>\n<p>600,000<\/p>\n<p>1,000,000<\/p>\n<p>1,000,000<\/p>\n<p>BGP \u00datvonalak<\/p>\n<p>20,000<\/p>\n<p>50,000<\/p>\n<p>250,000<\/p>\n<p>250,000<\/p>\n<p>BGP Szomsz\u00e9dok<\/p>\n<p>10<\/p>\n<p>20<\/p>\n<p>100<\/p>\n<p>100<\/p>\n<p>BGP \u00datvonalak \u00dajraosztva<\/p>\n<p>Nincs korl\u00e1t<\/p>\n<p>Nincs korl\u00e1t<\/p>\n<p>Nincs korl\u00e1t<\/p>\n<p>Nincs korl\u00e1t<\/p>\n<p>OSPF \u00datvonalak<\/p>\n<p>20,000<\/p>\n<p>50,000<\/p>\n<p>100,000<\/p>\n<p>100,000<\/p>\n<p>OSPF LSA Bejegyz\u00e9sek Max 750 T\u00edpus-1<\/p>\n<p>20,000<\/p>\n<p>50,000<\/p>\n<p>100,000<\/p>\n<p>100,000<\/p>\n<p>OSPF Szomsz\u00e9ds\u00e1gok<\/p>\n<p>10<\/p>\n<p>20<\/p>\n<p>40<\/p>\n<p>40<\/p>\n<p>OSPF \u00datvonalak \u00dajraosztva<\/p>\n<p>2000<\/p>\n<p>5000<\/p>\n<p>20,000<\/p>\n<p>20,000<\/p>\n<p>\u00d6sszes \u00datvonal<\/p>\n<p>20,000<\/p>\n<p>50,000<\/p>\n<p>250,000<\/p>\n<p>250,000<\/p>\n<p>\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/anthonyspiteri.net\/nsx-bytes-updated-nsx-edge-feature-and-performance-matrix-2\/\"><i>Forr\u00e1s<\/i><\/a><\/noindex><\/p>\n<p>A t\u00e1bl\u00e1zatb\u00f3l l\u00e1that\u00f3, hogy a termel\u00e9si szcen\u00e1ri\u00f3kra az NSX Edge terhel\u00e9seloszt\u00e1s\u00e1t csak a Nagy m\u00e9rett\u0151l aj\u00e1nlott megszervezni. <\/p>\n<p>Ma ennyi. A k\u00f6vetkez\u0151 r\u00e9szekben r\u00e9szletesen v\u00e9gigvezetem az NSX Edge minden h\u00e1l\u00f3zati szolg\u00e1ltat\u00e1s\u00e1nak be\u00e1ll\u00edt\u00e1sain.<br \/>\n<br \/>Forr\u00e1s: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dataline\/blog\/432980\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0415\u0441\u043b\u0438 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433 \u043b\u044e\u0431\u043e\u0433\u043e \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u0430, \u0442\u043e, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u043c\u044b \u0443\u0432\u0438\u0434\u0438\u043c \u043f\u0440\u043e\u0441\u0442\u044b\u043d\u044e \u0441 \u043a\u0443\u0447\u0435\u0439 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u043f\u043e\u0440\u0442\u043e\u0432, \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0438 \u043f\u043e\u0434\u0441\u0435\u0442\u0435\u0439. \u0422\u0430\u043a \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0442\u0441\u044f \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043a \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c. \u0421\u043d\u0430\u0447\u0430\u043b\u0430 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0435 \u0441\u0442\u0430\u0440\u0430\u044e\u0442\u0441\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u043f\u043e\u0440\u044f\u0434\u043e\u043a, \u043d\u043e \u043f\u043e\u0442\u043e\u043c \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442\u044c \u0438\u0437 \u043e\u0442\u0434\u0435\u043b\u0430 \u0432 \u043e\u0442\u0434\u0435\u043b, \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0440\u0430\u0437\u043c\u043d\u043e\u0436\u0430\u0442\u044c\u0441\u044f \u0438 \u043c\u0435\u043d\u044f\u0442\u044c \u0441\u0432\u043e\u0438 \u0440\u043e\u043b\u0438, \u043f\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u044b \u0434\u043b\u044f \u0440\u0430\u0437\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-30009","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hu\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"hu_HU\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47VMware NSX \u0434\u043b\u044f \u0441\u0430\u043c\u044b\u0445 \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u0438\u0445. \u0427\u0430\u0441\u0442\u044c 1 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hu\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:33:10+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:33:10+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47VMware NSX a legkisebbeknek. 1. r\u00e9sz | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47VMware NSX \u0434\u043b\u044f \u0441\u0430\u043c\u044b\u0445 \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u0438\u0445. \u0427\u0430\u0441\u0442\u044c 1 | ProHoster","og:url":"https:\/\/prohoster.info\/hu\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:33:10+00:00","article:modified_time":"2019-10-31T18:33:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30009","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-20 23:24:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:44:38","updated":"2026-01-20 23:24:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/30009","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=30009"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/30009\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=30009"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=30009"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=30009"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}