{"id":30009,"date":"2019-10-31T21:33:10","date_gmt":"2019-10-31T18:33:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1\/"},"modified":"2019-10-31T21:33:10","modified_gmt":"2019-10-31T18:33:10","slug":"vmware-nsx-dlya-samyh-malenkih-chast-1","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1","title":{"rendered":"VMware NSX maziem. 1. da\u013ca","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"VMware NSX maziem. 1. da\u013ca\" src=\"\/wp-content\/uploads\/2019\/03\/22caedbcfd1d6fa4e19bc5b0fe71e0c9.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nJa, apl\u016bkojot jebkura ugunsmura konfigur\u0101ciju, visticam\u0101k, m\u0113s redz\u0113sim garu sarakstu ar daudziem IP adres\u0113m, portiem, protokoliem un apak\u0161t\u012bkliem. T\u0101 tiek klasisk\u0101 veid\u0101 \u012bstenotas t\u012bkla dro\u0161\u012bbas politikas, lai lietot\u0101jiem piek\u013c\u016btu resursiem. Vispirms konfigur\u0101cij\u0101 m\u0113\u0123ina saglab\u0101t k\u0101rt\u012bbu, bet p\u0113c tam darbinieki s\u0101k p\u0101riet no noda\u013cas uz noda\u013cu, serveri pavairojas un maina savas lomas, par\u0101d\u0101s piek\u013cuves iesp\u0113jas da\u017e\u0101diem projektiem tur, kur tiem parasti nav at\u013cauts iek\u013c\u016bt, un rodas simtiem nezin\u0101mu ce\u013cu.<\/p>\n<p>Ap k\u0101d\u0101m noteikumiem, ja paveicas, ir uzrakst\u012bti koment\u0101ri \"L\u016bdza izdar\u012bt Vasilijs\" vai \"Tas ir ce\u013c\u0161 uz DMZ\". T\u012bkla administrators aiziet prom, un viss k\u013c\u016bst pavisam neskaidrs. P\u0113c tam k\u0101ds izl\u0113ma not\u012br\u012bt konfigur\u0101ciju no Vasilija, un SAP sabr\u016bk, jo k\u0101dreiz Vasilijs l\u016bdza \u0161o piek\u013cuvi, lai str\u0101d\u0101tu ar ra\u017eo\u0161anas SAP.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX maziem. 1. da\u013ca\" src=\"\/wp-content\/uploads\/2019\/03\/f79759ed590ad9b3a1f4878abdb47e6c.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\u0160odien es past\u0101st\u012b\u0161u par VMware NSX risin\u0101jumu, kas pal\u012bdz m\u0113r\u0137tiec\u012bgi piem\u0113rot t\u012bkla mijiedarb\u012bbas un dro\u0161\u012bbas politikas, nep\u0101rprotot ugunsmura konfigur\u0101cij\u0101. Par\u0101d\u012b\u0161u, k\u0101das jaunas funkcijas ir par\u0101d\u012bju\u0161\u0101s sal\u012bdzin\u0101jum\u0101 ar to, kas bija iepriek\u0161 VMware \u0161aj\u0101 jom\u0101. <noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>VMWare NSX \u2013 ir t\u012bkla pakalpojumu virtualiz\u0101cijas un dro\u0161\u012bbas platforma. NSX risina mar\u0161rut\u0113\u0161anas, sl\u0113g\u0161anas, slodzes balans\u0113\u0161anas, ugunsmura jaut\u0101jumus un pied\u0101v\u0101 daudz citu noder\u012bgu funkciju. <\/p>\n<p>NSX ir VMware pa\u0161a produkta vCloud Networking and Security (vCNS) un ieg\u0101d\u0101t\u0101 Nicira NVP p\u0113ctecis.<\/p>\n<h3>No vCNS uz NSX<\/h3>\n<p>\nAgr\u0101k klientam m\u0101ko\u0146vid\u0113, kuru veidoja VMware vCloud, bija atsevi\u0161\u0137a virtu\u0101l\u0101 ma\u0161\u012bna vCNS vShield Edge. T\u0101 pild\u012bja p\u0101rejas v\u0101rtejas lomu, kur bija iesp\u0113jams konfigur\u0113t daudzus t\u012bkla funkcijas: NAT, DHCP, ugunsmuru, VPN, slodzes balans\u0113t\u0101ju utt. vShield Edge ierobe\u017eoja virtu\u0101l\u0101s ma\u0161\u012bnas mijiedarb\u012bbu ar \u0101rpasauli saska\u0146\u0101 ar ugunsmura un NAT noteikumiem. T\u012bkla iek\u0161ien\u0113 virtu\u0101l\u0101s ma\u0161\u012bnas br\u012bvi sazin\u0101j\u0101s sav\u0101 starp\u0101 apak\u0161t\u012bklus ietvaros. Ja \u013coti v\u0113laties dal\u012bt un kontrol\u0113t datpl\u016bsmu, var izveidot atsevi\u0161\u0137u t\u012bklu atsevi\u0161\u0137\u0101m lietojumprogrammu da\u013c\u0101m (da\u017e\u0101d\u0101m virtu\u0101l\u0101m ma\u0161\u012bn\u0101m) un uzrakst\u012bt ugunsmura atbilsto\u0161os noteikumus vi\u0146u t\u012bkla mijiedarb\u012bbai. Bet tas ir laikietilp\u012bgi, sare\u017e\u0123\u012bti un neinteresanti, it \u012bpa\u0161i, ja jums ir vair\u0101ki desmiti virtu\u0101lo ma\u0161\u012bnu.<\/p>\n<p>Ar NSX VMware ir realiz\u0113jusi mikrosegment\u0101cijas koncepciju, izmantojot sadal\u012btu ugunsm\u016bri (distributed firewall), kas ir integr\u0113ts hipervizora kodol\u0101. Taj\u0101 tiek noteikti dro\u0161\u012bbas un t\u012bkla mijiedarb\u012bbas noteikumi ne tikai IP un MAC adres\u0113m, bet ar\u012b citiem objektiem: virtu\u0101l\u0101m ma\u0161\u012bn\u0101m, lietotn\u0113m. Ja NSX ir izvietots organiz\u0101cijas iek\u0161ien\u0113, tad \u0161\u0101di objekti var b\u016bt lietot\u0101js vai lietot\u0101ju grupa no Active Directory. Katrs \u0161\u0101ds objekts k\u013c\u016bst par mikrosegmentu sav\u0101 dro\u0161\u012bbas kont\u016br\u0101, nepiecie\u0161amaj\u0101 apak\u0161net\u0101, ar savu pat\u012bkamo DMZ :)). <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX maziem. 1. da\u013ca\" src=\"\/wp-content\/uploads\/2019\/03\/67ab3d12da30a0fcfad4f2b4f14368f5.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Agr\u0101k dro\u0161\u012bbas perimetrs bija viens visam resursu kopumam, ko aizsarg\u0101ja robe\u017eswitch, bet ar NSX var atdal\u012bt no nevajadz\u012bgas mijiedarb\u012bbas atsevi\u0161\u0137u virtu\u0101lo ma\u0161\u012bnu pat vien\u0101 t\u012bkl\u0101. <\/i><\/p>\n<p>Dro\u0161\u012bbas un t\u012bkla mijiedarb\u012bbas noteikumi tiek piel\u0101goti, ja objekts p\u0101rvietojas uz citu t\u012bklu. Piem\u0113ram, ja m\u0113s p\u0101rcelsim datu b\u0101zes ma\u0161\u012bnu uz citu t\u012bkla segmentu vai pat uz citu saist\u012btu virtu\u0101lo datu centru, tad noteikumi, kas ir izstr\u0101d\u0101ti \u0161ai virtu\u0101lajai ma\u0161\u012bnai, turpin\u0101s darboties neatkar\u012bgi no t\u0101s jaun\u0101s atra\u0161an\u0101s vietas. Lietojumprogrammu serveris joproj\u0101m var\u0113s mijiedarboties ar datu b\u0101zi.<\/p>\n<p>Viet\u0101 vec\u0101 robe\u017e\u0161\u0137\u0113rsot\u0101ja vCNS vShield Edge ir n\u0101cis NSX Edge. Tam ir viss vec\u0101 Edge komplekts, k\u0101 ar\u012b da\u017eas jaunas noder\u012bgas funkcijas. Par t\u0101m ar\u012b tiks run\u0101ts t\u0101l\u0101k.<\/p>\n<h3>Kas jauns NSX Edge?<\/h3>\n<p>\nNSX Edge funkcionalit\u0101te ir atkar\u012bga no <noindex><a rel=\"nofollow\" href=\"https:\/\/www.vmware.com\/content\/dam\/digitalmarketing\/vmware\/en\/pdf\/products\/nsx\/vmware-nsx-compare-editions.pdf\">redakcijas<\/a><\/noindex> NSX. Kopum\u0101 ir piecas: Standard, Professional, Advanced, Enterprise, Plus Remote Branch Office. Viss jaunais un interesantais ir pieejams tikai s\u0101kot ar Advanced. Taj\u0101 skait\u0101 ar\u012b jauns interfeiss, kas l\u012bdz piln\u012bgai p\u0101rejai uz HTML5 (VMware sola 2019. gada vasar\u0101) tiek atv\u0113rts jaun\u0101 ciln\u0113.<\/p>\n<p><b>Ugunsm\u016bris.<\/b> K\u0101 objektiem, kuriem tiks piem\u0113roti noteikumi, var izv\u0113l\u0113ties IP adreses, t\u012bklus, v\u0101rtejas saskarnes un virtu\u0101l\u0101s ma\u0161\u012bnas. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX maziem. 1. da\u013ca\" src=\"\/wp-content\/uploads\/2019\/03\/fa05b6c018bea8f968df340693d1eeab.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"VMware NSX maziem. 1. da\u013ca\" src=\"\/wp-content\/uploads\/2019\/03\/3b5844efa756f46f47e3ebf2b876a790.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>DHCP.<\/b> Papildus IP adresu diapazona iestat\u012b\u0161anai, kas tiks autom\u0101tiski pie\u0161\u0137irtas \u0161\u012bs t\u012bkla virtu\u0101laj\u0101m ma\u0161\u012bn\u0101m, NSX Edge ir pieejamas funkcijas <b>Saist\u012b\u0161ana<\/b> un <b>Relay<\/b>.<\/p>\n<p>Ciln\u0113 <b>Bindings<\/b> var piesaist\u012bt virtu\u0101l\u0101s ma\u0161\u012bnas MAC adresi IP adresei, ja ir nepiecie\u0161ams, lai IP adrese nemain\u012btos. Galvenais, lai \u0161\u012b IP adrese neb\u016btu DHCP Pool.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX maziem. 1. da\u013ca\" src=\"\/wp-content\/uploads\/2019\/03\/da013f13cd762936df173ff601590f8b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nCiln\u0113 <b>Relay<\/b> Tiek konfigur\u0113ta DHCP zi\u0146ojumu p\u0101rs\u016bt\u012b\u0161ana uz DHCP serveriem, kas atrodas \u0101rpus j\u016bsu organiz\u0101cijas vCloud Director, tostarp fizisk\u0101s infrastrukt\u016bras DHCP serveriem. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX maziem. 1. da\u013ca\" src=\"\/wp-content\/uploads\/2019\/03\/c5b8762d49364db13cccd0c79f2692a8.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Mar\u0161rut\u0113\u0161ana.<\/b> vShield Edge var\u0113ja konfigur\u0113t tikai statisko mar\u0161rut\u0113\u0161anu. Tagad ir pieejama dinamisk\u0101 mar\u0161rut\u0113\u0161ana ar OSPF un BGP protokolu atbalstu. Tika ieviesti ar\u012b ECMP (Active-active) iestat\u012bjumi, kas noz\u012bm\u0113, ka ir pieejams veiksm\u012bgs p\u0101rs\u016bt\u012b\u0161anas risin\u0101jums uz fiziskajiem mar\u0161rut\u0113t\u0101jiem.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX maziem. 1. da\u013ca\" src=\"\/wp-content\/uploads\/2019\/03\/cc4a6a30f8ab130766009ed250e2e514.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>OSPF iestat\u012b\u0161ana<\/i><\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX maziem. 1. da\u013ca\" src=\"\/wp-content\/uploads\/2019\/03\/efdf3f78b3b7123aaca6b017c7507827.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>BGP konfigur\u0101cija<\/i><\/p>\n<p>V\u0113l viens jaunums ir mar\u0161rutu p\u0101rs\u016bt\u012b\u0161anas konfigur\u0101cija starp da\u017e\u0101diem protokoliem,<br \/>\nmar\u0161rutu p\u0101rs\u016bt\u012b\u0161ana (route redistribution). <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX maziem. 1. da\u013ca\" src=\"\/wp-content\/uploads\/2019\/03\/c0a5c7b3055ba80b0c4fcda4c03e7d4c.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>L4\/L7 Slodzes balans\u0113t\u0101js.<\/b> Tagad X-Forwarded-For ir pieejams HTTPs galven\u0113. Bez t\u0101 visi nop\u016b\u0161as. Piem\u0113ram, ja jums ir m\u0101jas lapa, kuru l\u012bdzsvarojat. Bez \u0161\u012b galvenes p\u0101rs\u016bt\u012b\u0161anas viss darbojas, bet t\u012bmek\u013ca servera statistik\u0101 j\u016bs redz\u0113j\u0101t ne apmekl\u0113t\u0101ju IP, bet balans\u0113t\u0101ja IP. Tagad viss ir pareizi. <\/p>\n<p>Ar\u012b Application Rules ciln\u0113 tagad var pievienot skriptus, kas tie\u0161i p\u0101rvald\u012bs satiksmes l\u012bdzsvaro\u0161anu.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX maziem. 1. da\u013ca\" src=\"\/wp-content\/uploads\/2019\/03\/8f28ba0a4e870cca84a295af68f90c02.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>VPN. <\/b>Papildus IPSec VPN, NSX Edge atbalsta:<\/p>\n<ul>\n<li>L2 VPN, kas \u013cauj izstiept t\u012bklus starp \u0123eogr\u0101fiski at\u0161\u0137irt\u0101m viet\u0101m. \u0160is VPN ir nepiecie\u0161ams, piem\u0113ram, lai, p\u0101rvietojoties uz citu vietu, virtu\u0101lais dators paliktu taj\u0101 pa\u0161\u0101 apak\u0161t\u012bkl\u0101 un saglab\u0101tu IP adresi.\n<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"VMware NSX maziem. 1. da\u013ca\" src=\"\/wp-content\/uploads\/2019\/03\/688ce2e7d26f63ea5cf9c9525294388b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<ul>\n<li>SSL VPN Plus, kas \u013cauj lietot\u0101jiem att\u0101lin\u0101ti piesl\u0113gties korporat\u012bvai t\u012bklam. \u0160\u012b funkcija bija vSphere l\u012bmen\u012b, ta\u010du vCloud Director tas ir jaunums. \n<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"VMware NSX maziem. 1. da\u013ca\" src=\"\/wp-content\/uploads\/2019\/03\/e624c7c61b1954e78a37fc512d121140.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>SSL sertifik\u0101ti.<\/b> Tagad NSX Edge var pievienot sertifik\u0101tus. Tas atkal jaut\u0101jums par to, kam bija vajadz\u012bgs balans\u0113t\u0101js bez sertifik\u0101ta https.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX maziem. 1. da\u013ca\" src=\"\/wp-content\/uploads\/2019\/03\/7dca479fbc19be397d3666980def43d3.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Objektu grupas (Grouping Objects).<\/b> \u0160aj\u0101 ciln\u0113 tiek noteiktas objektu grupas, kur\u0101m b\u016bs piem\u0113rojami noteikti t\u012bkla mijiedarb\u012bbas noteikumi, piem\u0113ram, ugunsm\u016bra noteikumi. <\/p>\n<p>\u0160ie objekti var b\u016bt IP un MAC adreses. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX maziem. 1. da\u013ca\" src=\"\/wp-content\/uploads\/2019\/03\/8a28bdb82f8dd982c1edf9af99c5e6b7.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n\u00a0<br \/>\n<img decoding=\"async\" alt=\"VMware NSX maziem. 1. da\u013ca\" src=\"\/wp-content\/uploads\/2019\/03\/d67a661168e8dbe0a457f55843637ec4.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\u0160eit ir nor\u0101d\u012bts ar\u012b pakalpojumu saraksts (protokola-portu kombin\u0101cija) un lietojumprogrammas, kuras var izmantot, veidojot ugunsm\u016bra noteikumus. Jaunas pakalpojumu un lietojumprogrammu pievieno\u0161anai nepiecie\u0161ams port\u0101la vCD administrators. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX maziem. 1. da\u013ca\" src=\"\/wp-content\/uploads\/2019\/03\/c282c7918004a9bab2084e4eadae1062.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n\u00a0<br \/>\n<img decoding=\"async\" alt=\"VMware NSX maziem. 1. da\u013ca\" src=\"\/wp-content\/uploads\/2019\/03\/95fd637be49655d7467f49218b32751b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Statistika.<\/b> Statistika par savienojumiem: satiksme, kas pl\u016bst cauri v\u0101rtiem, ugunsm\u016brim un balans\u0113t\u0101jam. <\/p>\n<p>St\u0101voklis un statistika par katru IPSEC VPN un L2 VPN tuneli. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX maziem. 1. da\u013ca\" src=\"\/wp-content\/uploads\/2019\/03\/af05223598fb569f74a4e6aa0c8f5595.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>\u017durn\u0101lfunkcija.<\/b> Edge iestat\u012bjumu ciln\u0113 var nor\u0101d\u012bt \u017eurn\u0101lu serveri. \u017durn\u0101lfiks\u0101cija darbojas DNAT\/SNAT, DHCP, ugunsm\u016bra, mar\u0161rut\u0113\u0161anas, l\u012bdzsvaro\u0161anas, IPsec VPN, SSL VPN Plus gad\u012bjum\u0101.<br \/>\n\u00a0<br \/>\nKatram objektam\/pakalpojumam ir pieejami \u0161\u0101di br\u012bdin\u0101jumu veidi: <\/p>\n<p> \u2014 Debug<br \/>\n \u2014 Br\u012bdin\u0101jums<br \/>\n \u2014 Kritisks<br \/>\n \u2014 K\u013c\u016bda<br \/>\n \u2014 Br\u012bdin\u0101jums<br \/>\n \u2014 Pazi\u0146ojums<br \/>\n \u2014 Inform\u0101cija<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX maziem. 1. da\u013ca\" src=\"\/wp-content\/uploads\/2019\/03\/ccd8345e8756004f1fbf2e2935ea5499.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>NSX Edge izm\u0113ri <\/h3>\n<p>\nAtkar\u012bb\u0101 no risin\u0101m\u0101m probl\u0113m\u0101m un apjomiem VMware <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.vmware.com\/en\/VMware-NSX-Data-Center-for-vSphere\/6.3\/com.vmware.nsx.install.doc\/GUID-311BBB9F-32CC-4633-9F91-26A39296381A.html\">ieteic <\/a><\/noindex>var izveidot NSX Edge \u0161\u0101dos izm\u0113ros:<\/p>\n<p><b>NSX Edge<br \/>\n(Kompakts)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(Liels)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(Kvadr\u0101tveida liels)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(\u013boti liels)<\/b><\/p>\n<p>vCPU<\/p>\n<p>1<\/p>\n<p>2<\/p>\n<p>4<\/p>\n<p>6<\/p>\n<p>Atmi\u0146a<\/p>\n<p>512MB<\/p>\n<p>1GB<\/p>\n<p>1GB<\/p>\n<p>8GB<\/p>\n<p>Disk<\/p>\n<p>512MB<\/p>\n<p>512MB<\/p>\n<p>512MB<\/p>\n<p>4.5GB + 4GB<\/p>\n<p>M\u0113r\u0137is<\/p>\n<p>Viens<br \/>\nlietojums, testa<br \/>\ndatu centrs<\/p>\n<p>Mazs <br \/>\nvai vid\u0113js<br \/>\ndatu centrs<\/p>\n<p>Noslogots<br \/>\nugunsm\u016bris<\/p>\n<p>Balans\u0113jums<br \/>\nslodzes l\u012bmen\u012b L7<\/p>\n<p>Zem\u0101k tabul\u0101 \u2013 t\u012bkla pakalpojumu darba metri, atkar\u012bb\u0101 no NSX Edge izm\u0113ra.<\/p>\n<p><b>NSX Edge<br \/>\n(Kompakts)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(Liels)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(Kvadr\u0101tveida liels)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(\u013boti liels)<\/b><\/p>\n<p>Interfeisi<\/p>\n<p>10<\/p>\n<p>10<\/p>\n<p>10<\/p>\n<p>10<\/p>\n<p>Sub Interfaces (Trunk)<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>NAT noteikumi<\/p>\n<p>2,048<\/p>\n<p>4,096<\/p>\n<p>4,096<\/p>\n<p>8,192<\/p>\n<p>ARP ieraksti<br \/>\nL\u012bdz p\u0101rrakst\u012b\u0161anai<\/p>\n<p>1,024<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>Ugunsm\u016bra noteikumi<\/p>\n<p>2000<\/p>\n<p>2000<\/p>\n<p>2000<\/p>\n<p>2000<\/p>\n<p>Ugunsm\u016bra veiktsp\u0113ja<\/p>\n<p>3Gbps<\/p>\n<p>9.7Gbps<\/p>\n<p>9.7Gbps<\/p>\n<p>9.7Gbps<\/p>\n<p>DHCP baseini<\/p>\n<p>20,000<\/p>\n<p>20,000<\/p>\n<p>20,000<\/p>\n<p>20,000<\/p>\n<p>ECMP ce\u013ci<\/p>\n<p>8<\/p>\n<p>8<\/p>\n<p>8<\/p>\n<p>8<\/p>\n<p>Statiskie mar\u0161ruti<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>LB baseini<\/p>\n<p>64<\/p>\n<p>64<\/p>\n<p>64<\/p>\n<p>1,024<\/p>\n<p>LB virtu\u0101lie serveri<\/p>\n<p>64<\/p>\n<p>64<\/p>\n<p>64<\/p>\n<p>1,024<\/p>\n<p>LB serveris\/baseins<\/p>\n<p>32<\/p>\n<p>32<\/p>\n<p>32<\/p>\n<p>32<\/p>\n<p>LB vesel\u012bbas p\u0101rbaudes<\/p>\n<p>320<\/p>\n<p>320<\/p>\n<p>320<\/p>\n<p>3,072<\/p>\n<p>LB lietojumprogrammu noteikumi<\/p>\n<p>4,096<\/p>\n<p>4,096<\/p>\n<p>4,096<\/p>\n<p>4,096<\/p>\n<p>L2VPN klienti no centr\u0101l\u0101s uz katru galu<\/p>\n<p>5<\/p>\n<p>5<\/p>\n<p>5<\/p>\n<p>5<\/p>\n<p>L2VPN t\u012bkli katram klientam\/serverim<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>IPSec tun\u0146i<\/p>\n<p>512<\/p>\n<p>1,600<\/p>\n<p>4,096<\/p>\n<p>6,000<\/p>\n<p>SSLVPN tun\u0146i<\/p>\n<p>50<\/p>\n<p>100<\/p>\n<p>100<\/p>\n<p>1,000<\/p>\n<p>SSLVPN priv\u0101tie t\u012bkli<\/p>\n<p>16<\/p>\n<p>16<\/p>\n<p>16<\/p>\n<p>16<\/p>\n<p>Vienlaic\u012bgas sesijas<\/p>\n<p>64,000<\/p>\n<p>1,000,000<\/p>\n<p>1,000,000<\/p>\n<p>1,000,000<\/p>\n<p>Sesijas\/sekund\u0113<\/p>\n<p>8,000<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>LB caurlaidsp\u0113ja L7 starpnieks)<\/p>\n<p>2.2Gbps<\/p>\n<p>2.2Gbps<\/p>\n<p>3Gbps<\/p>\n<p>LB caurlaidsp\u0113ja L4 re\u017e\u012bm\u0101)<\/p>\n<p>6Gbps<\/p>\n<p>6Gbps<\/p>\n<p>6Gbps<\/p>\n<p>LB savienojumi\/s (L7 starpnieks)<\/p>\n<p>46,000<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>LB vienlaic\u012bgie savienojumi (L7 starpnieks)<\/p>\n<p>8,000<\/p>\n<p>60,000<\/p>\n<p>60,000<\/p>\n<p>LB savienojumi\/s (L4 re\u017e\u012bm\u0101)<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>LB vienlaic\u012bgie savienojumi (L4 re\u017e\u012bm\u0101)<\/p>\n<p>600,000<\/p>\n<p>1,000,000<\/p>\n<p>1,000,000<\/p>\n<p>BGP mar\u0161ruti<\/p>\n<p>20,000<\/p>\n<p>50,000<\/p>\n<p>250,000<\/p>\n<p>250,000<\/p>\n<p>BGP kaimi\u0146i<\/p>\n<p>10<\/p>\n<p>20<\/p>\n<p>100<\/p>\n<p>100<\/p>\n<p>BGP mar\u0161ruti p\u0101rdal\u012bti<\/p>\n<p>Bez ierobe\u017eojuma<\/p>\n<p>Bez ierobe\u017eojuma<\/p>\n<p>Bez ierobe\u017eojuma<\/p>\n<p>Bez ierobe\u017eojuma<\/p>\n<p>OSPF mar\u0161ruti<\/p>\n<p>20,000<\/p>\n<p>50,000<\/p>\n<p>100,000<\/p>\n<p>100,000<\/p>\n<p>OSPF LSA ieraksti maksim\u0101li 750 1. tipa<\/p>\n<p>20,000<\/p>\n<p>50,000<\/p>\n<p>100,000<\/p>\n<p>100,000<\/p>\n<p>OSPF kaimi\u0146i<\/p>\n<p>10<\/p>\n<p>20<\/p>\n<p>40<\/p>\n<p>40<\/p>\n<p>OSPF mar\u0161ruti p\u0101rdal\u012bti<\/p>\n<p>2000<\/p>\n<p>5000<\/p>\n<p>20,000<\/p>\n<p>20,000<\/p>\n<p>Kop\u0113jie mar\u0161ruti<\/p>\n<p>20,000<\/p>\n<p>50,000<\/p>\n<p>250,000<\/p>\n<p>250,000<\/p>\n<p>\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/anthonyspiteri.net\/nsx-bytes-updated-nsx-edge-feature-and-performance-matrix-2\/\"><i>Avots<\/i><\/a><\/noindex><\/p>\n<p>No tabulas ir skaidrs, ka NSX Edge l\u012bdzsvaro\u0161anas organiz\u0113\u0161ana produkt\u012bv\u0101m sh\u0113m\u0101m ieteicama, s\u0101kot ar lieluma Large. <\/p>\n<p>\u0160odien man viss. N\u0101kamaj\u0101s da\u013c\u0101s detaliz\u0113ti izst\u0101st\u012b\u0161u katra NSX Edge t\u012bkla pakalpojuma iestat\u012b\u0161anu.<br \/>\n<br \/>Avots: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dataline\/blog\/432980\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0415\u0441\u043b\u0438 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433 \u043b\u044e\u0431\u043e\u0433\u043e \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u0430, \u0442\u043e, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u043c\u044b \u0443\u0432\u0438\u0434\u0438\u043c \u043f\u0440\u043e\u0441\u0442\u044b\u043d\u044e \u0441 \u043a\u0443\u0447\u0435\u0439 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u043f\u043e\u0440\u0442\u043e\u0432, \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0438 \u043f\u043e\u0434\u0441\u0435\u0442\u0435\u0439. \u0422\u0430\u043a \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0442\u0441\u044f \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043a \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c. \u0421\u043d\u0430\u0447\u0430\u043b\u0430 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0435 \u0441\u0442\u0430\u0440\u0430\u044e\u0442\u0441\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u043f\u043e\u0440\u044f\u0434\u043e\u043a, \u043d\u043e \u043f\u043e\u0442\u043e\u043c \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442\u044c \u0438\u0437 \u043e\u0442\u0434\u0435\u043b\u0430 \u0432 \u043e\u0442\u0434\u0435\u043b, \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0440\u0430\u0437\u043c\u043d\u043e\u0436\u0430\u0442\u044c\u0441\u044f \u0438 \u043c\u0435\u043d\u044f\u0442\u044c \u0441\u0432\u043e\u0438 \u0440\u043e\u043b\u0438, \u043f\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u044b \u0434\u043b\u044f \u0440\u0430\u0437\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-30009","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/lv\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"lv_LV\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47VMware NSX \u0434\u043b\u044f \u0441\u0430\u043c\u044b\u0445 \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u0438\u0445. \u0427\u0430\u0441\u0442\u044c 1 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/lv\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:33:10+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:33:10+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47VMware NSX viss maz\u0101kajiem. 1. da\u013ca | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47VMware NSX \u0434\u043b\u044f \u0441\u0430\u043c\u044b\u0445 \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u0438\u0445. \u0427\u0430\u0441\u0442\u044c 1 | ProHoster","og:url":"https:\/\/prohoster.info\/lv\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:33:10+00:00","article:modified_time":"2019-10-31T18:33:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30009","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-20 23:24:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:44:38","updated":"2026-01-20 23:24:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/30009","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=30009"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/30009\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=30009"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=30009"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=30009"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}