{"id":30009,"date":"2019-10-31T21:33:10","date_gmt":"2019-10-31T18:33:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1\/"},"modified":"2019-10-31T21:33:10","modified_gmt":"2019-10-31T18:33:10","slug":"vmware-nsx-dlya-samyh-malenkih-chast-1","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1","title":{"rendered":"VMware NSX pentru cei mai mici. Partea 1","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"VMware NSX pentru cei mai mici. Partea 1\" src=\"\/wp-content\/uploads\/2019\/03\/22caedbcfd1d6fa4e19bc5b0fe71e0c9.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDac\u0103 privim configura\u021bia oric\u0103rui firewall, cel mai probabil vom vedea o list\u0103 lung\u0103 cu o mul\u021bime de adrese IP, porturi, protocoale \u0219i subre\u021bele. A\u0219a se implementeaz\u0103 \u00een mod clasic politicile de securitate a re\u021belei pentru accesul utilizatorilor la resurse. La \u00eenceput, se \u00eencearc\u0103 p\u0103strarea unei ordini \u00een configura\u021bie, dar apoi angaja\u021bii \u00eencep s\u0103 se mutate dintr-un departament \u00een altul, serverele se \u00eenmul\u021besc \u0219i \u00ee\u0219i schimb\u0103 rolurile, apar accesuri pentru diferite proiecte \u00een locurile unde, de obicei, nu au voie \u0219i astfel se creeaz\u0103 sute de poteci obscure.<\/p>\n<p>\u00cen jurul unor reguli, dac\u0103 avem noroc, sunt scrise comentarii precum \u201eAm cerut s\u0103 fac\u0103 Vasya\u201d sau \u201eAcesta este un drum c\u0103tre DMZ\u201d. Administratorul de re\u021bea pleac\u0103 \u0219i totul devine complet confuz. Apoi, cineva decide s\u0103 cure\u021be configura\u021bia de Vasya \u0219i SAP-ul pic\u0103, pentru c\u0103 c\u00e2ndva Vasya a cerut acest acces pentru a lucra cu SAP-ul de produc\u021bie.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX pentru cei mai mici. Partea 1\" src=\"\/wp-content\/uploads\/2019\/03\/f79759ed590ad9b3a1f4878abdb47e6c.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAst\u0103zi v\u0103 voi vorbi despre solu\u021bia VMware NSX, care ajut\u0103 la aplicarea punctual\u0103 a politicilor de interac\u021biune \u0219i securitate a re\u021belei f\u0103r\u0103 confuzie \u00een configura\u021biile firewall-ului. Voi ar\u0103ta ce func\u021bii noi au ap\u0103rut \u00een compara\u021bie cu ceea ce avea VMware \u00een aceast\u0103 zon\u0103 anterior. <noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>VMWare NSX \u2013 o platform\u0103 de virtualizare \u0219i asigurare a securit\u0103\u021bii serviciilor de re\u021bea. NSX rezolv\u0103 problemele de rutare, comutare, echilibrare a \u00eenc\u0103rc\u0103rii, firewall \u0219i multe altele interesante. <\/p>\n<p>NSX este succesorul propriului produs VMware vCloud Networking and Security (vCNS) \u0219i al achizi\u021biei Nicira NVP.<\/p>\n<h3>De la vCNS la NSX<\/h3>\n<p>\n\u00cen trecut, clientul din cloud-ul construit pe VMware vCloud avea o ma\u0219in\u0103 virtual\u0103 separat\u0103 vCNS vShield Edge. Aceasta a func\u021bionat ca un gateway de frontier\u0103, unde puteau fi configurate numeroase func\u021bii de re\u021bea: NAT, DHCP, Firewall, VPN, echilibrator de \u00eenc\u0103rcare etc. vShield Edge limita interac\u021biunea ma\u0219inii virtuale cu lumea exterioar\u0103 conform regulilor scrise \u00een Firewall \u0219i NAT. \u00cen interiorul re\u021belei, ma\u0219inile virtuale comunicau liber \u00eentre ele, \u00een limitele subre\u021belelor. Dac\u0103 dori\u021bi cu adev\u0103rat s\u0103 separa\u021bi \u0219i s\u0103 controla\u021bi traficul, se poate crea o re\u021bea separat\u0103 pentru p\u0103r\u021bi diferite ale aplica\u021biilor (ma\u0219ini virtuale diferite) \u0219i se pot scrie reguli corespunz\u0103toare \u00een firewall pentru interac\u021biunea lor de re\u021bea. Dar acest lucru este lung, complicat \u0219i neinteresant, mai ales c\u00e2nd ave\u021bi c\u00e2teva zeci de ma\u0219ini virtuale.<\/p>\n<p>\u00cen NSX, VMware a implementat conceptul de microsegmentare printr-un firewall distribuit, integrat \u00een nucleul hypervisor-ului. Aici se definesc politicile de securitate \u0219i interac\u021biune \u00een re\u021bea nu doar pentru adresele IP \u0219i MAC, ci \u0219i pentru alte obiecte: ma\u0219ini virtuale, aplica\u021bii. Dac\u0103 NSX este desf\u0103\u0219urat \u00een interiorul organiza\u021biei, atunci astfel de obiecte pot deveni utilizatorii sau grupurile de utilizatori din Active Directory. Fiecare astfel de obiect se transform\u0103 \u00eentr-un microsegment \u00een conturul s\u0103u de securitate, \u00een subre\u021beaua dorit\u0103, cu propriul DMZ confortabil :). <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX pentru cei mai mici. Partea 1\" src=\"\/wp-content\/uploads\/2019\/03\/67ab3d12da30a0fcfad4f2b4f14368f5.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Anterior, perimetrul de securitate era unic pentru \u00eentregul pool de resurse, fiind protejat de un comutator de frontier\u0103, dar cu NSX se poate izola de interac\u021biuni nedorite o ma\u0219in\u0103 virtual\u0103 separat\u0103 chiar \u0219i \u00een cadrul unei re\u021bele. <\/i><\/p>\n<p>Politicile de securitate \u0219i interac\u021biune \u00een re\u021bea se adapteaz\u0103 dac\u0103 obiectul se mut\u0103 \u00een alt\u0103 re\u021bea. De exemplu, dac\u0103 mut\u0103m o ma\u0219in\u0103 cu o baz\u0103 de date \u00een alt segment de re\u021bea sau chiar \u00eentr-un alt centru de date virtual asociat, regulile stabilesc pentru aceast\u0103 ma\u0219in\u0103 virtual\u0103 vor continua s\u0103 se aplice indiferent de noua sa pozi\u021bie. Serverul de aplica\u021bii va putea continua s\u0103 interac\u021bioneze cu baza de date.<\/p>\n<p>\u00cen locul vechiului gateway de frontier\u0103 vCNS vShield Edge a venit NSX Edge. Acesta dispune de toate func\u021biile vechi ale Edge-ului plus c\u00e2teva noi func\u021bii utile. Despre acestea va fi vorba \u00een continuare.<\/p>\n<h3>Ce nout\u0103\u021bi aduce NSX Edge?<\/h3>\n<p>\nFunc\u021bionalitatea NSX Edge depinde de <noindex><a rel=\"nofollow\" href=\"https:\/\/www.vmware.com\/content\/dam\/digitalmarketing\/vmware\/en\/pdf\/products\/nsx\/vmware-nsx-compare-editions.pdf\">edi\u021bie<\/a><\/noindex> NSX. Exist\u0103 \u00een total cinci: Standard, Professional, Advanced, Enterprise, Plus Remote Branch Office. Toate noul \u0219i interesant pot fi v\u0103zute doar \u00eencep\u00e2nd cu Advanced. Inclusiv noul interfa\u021b\u0103, care p\u00e2n\u0103 la migrarea complet\u0103 a vCloud pe HTML5 (VMware promite vara anului 2019) se deschide \u00eentr-o nou\u0103 tab.<\/p>\n<p><b>Firewall.<\/b> Ca obiecte la care se vor aplica regulile, se pot alege adrese IP, re\u021bele, interfe\u021be de gateway \u0219i ma\u0219ini virtuale. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX pentru cei mai mici. Partea 1\" src=\"\/wp-content\/uploads\/2019\/03\/fa05b6c018bea8f968df340693d1eeab.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"VMware NSX pentru cei mai mici. Partea 1\" src=\"\/wp-content\/uploads\/2019\/03\/3b5844efa756f46f47e3ebf2b876a790.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>DHCP.<\/b> Pe l\u00e2ng\u0103 configurarea intervalului de adrese IP care vor fi distribuite automat ma\u0219inilor virtuale din aceast\u0103 re\u021bea, au fost disponibile func\u021bii \u00een NSX Edge <b>Binding<\/b> \u0219i <b>Relay<\/b>.<\/p>\n<p>\u00cen tab-ul <b>Bindings<\/b> se poate lega adresa MAC a ma\u0219inii virtuale de adresa IP, dac\u0103 este necesar ca adresa IP s\u0103 r\u0103m\u00e2n\u0103 neschimbat\u0103. Principal este ca aceast\u0103 adres\u0103 IP s\u0103 nu fac\u0103 parte din DHCP Pool.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX pentru cei mai mici. Partea 1\" src=\"\/wp-content\/uploads\/2019\/03\/da013f13cd762936df173ff601590f8b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\u00cen tab-ul <b>Relay<\/b> Se configureaz\u0103 retransmiterea mesajelor DHCP c\u0103tre serverele DHCP care se afl\u0103 \u00een afara organiza\u021biei dumneavoastr\u0103 \u00een vCloud Director, inclusiv c\u0103tre serverele DHCP ale infrastructurii fizice. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX pentru cei mai mici. Partea 1\" src=\"\/wp-content\/uploads\/2019\/03\/c5b8762d49364db13cccd0c79f2692a8.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Rutare.<\/b> La vShield Edge se putea configura doar rutare static\u0103. Acum a ap\u0103rut rutare dinamic\u0103 cu suport pentru protocoalele OSPF \u0219i BGP. De asemenea, sunt disponibile set\u0103rile ECMP (Active-active), ceea ce \u00eenseamn\u0103 c\u0103 a fost introdus \u0219i comutarea de urgen\u021b\u0103 de tip \"activ-activ\" pentru routerele fizice.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX pentru cei mai mici. Partea 1\" src=\"\/wp-content\/uploads\/2019\/03\/cc4a6a30f8ab130766009ed250e2e514.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Configurarea OSPF<\/i><\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX pentru cei mai mici. Partea 1\" src=\"\/wp-content\/uploads\/2019\/03\/efdf3f78b3b7123aaca6b017c7507827.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Configurarea BGP<\/i><\/p>\n<p>O alt\u0103 noutate este configurarea transferului de rute \u00eentre diverse protocoale,<br \/>\nredistribu\u021bia rutelor (route redistribution). <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX pentru cei mai mici. Partea 1\" src=\"\/wp-content\/uploads\/2019\/03\/c0a5c7b3055ba80b0c4fcda4c03e7d4c.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Balansare de \u00eenc\u0103rcare L4\/L7.<\/b> S-a introdus X-Forwarded-For pentru antetul HTTPs. F\u0103r\u0103 acesta, toat\u0103 lumea pl\u00e2ngea. De exemplu, dac\u0103 ave\u021bi un site web pe care \u00eel balansati, f\u0103r\u0103 a trece acest antet, totul func\u021biona, dar \u00een statistica serverului web vedea\u021bi nu IP-urile vizitatorilor, ci IP-ul balansatorului. Acum este totul corect. <\/p>\n<p>De asemenea, \u00een fila Reguli de aplica\u021bie acum pute\u021bi ad\u0103uga scripturi care vor gestiona direct balansarea traficului.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX pentru cei mai mici. Partea 1\" src=\"\/wp-content\/uploads\/2019\/03\/8f28ba0a4e870cca84a295af68f90c02.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>VPN. <\/b>\u00cen plus fa\u021b\u0103 de IPSec VPN, NSX Edge suport\u0103:<\/p>\n<ul>\n<li>L2 VPN, care permite extinderea re\u021belelor \u00eentre loca\u021bii geografice separate. Acest VPN este necesar, de exemplu, pentru ca, \u00een cazul reloc\u0103rii \u00eentr-o alt\u0103 loca\u021bie, ma\u0219ina virtual\u0103 s\u0103 r\u0103m\u00e2n\u0103 \u00een aceea\u0219i subre\u021bea \u0219i s\u0103 \u00ee\u0219i p\u0103streze adresa IP.\n<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"VMware NSX pentru cei mai mici. Partea 1\" src=\"\/wp-content\/uploads\/2019\/03\/688ce2e7d26f63ea5cf9c9525294388b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<ul>\n<li>SSL VPN Plus, care permite utilizatorilor s\u0103 se conecteze de la distan\u021b\u0103 la re\u021beaua corporate. La nivel de vSphere, aceast\u0103 func\u021bie exista, iar pentru vCloud Director reprezint\u0103 o noutate. \n<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"VMware NSX pentru cei mai mici. Partea 1\" src=\"\/wp-content\/uploads\/2019\/03\/e624c7c61b1954e78a37fc512d121140.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Certificatul SSL.<\/b> Pe NSX Edge acum pot fi instalate certificate. Acesta este din nou un argument pentru cine avea nevoie de un balansator f\u0103r\u0103 certificat pentru https.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX pentru cei mai mici. Partea 1\" src=\"\/wp-content\/uploads\/2019\/03\/7dca479fbc19be397d3666980def43d3.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Grupuri de obiecte (Grouping Objects).<\/b> \u00cen aceast\u0103 fil\u0103 se definesc grupuri de obiecte, pentru care vor fi aplicate anumite reguli de interac\u021biune de re\u021bea, cum ar fi regulile de firewall. <\/p>\n<p>Aceste obiecte pot fi adrese IP \u0219i MAC. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX pentru cei mai mici. Partea 1\" src=\"\/wp-content\/uploads\/2019\/03\/8a28bdb82f8dd982c1edf9af99c5e6b7.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n\u00a0<br \/>\n<img decoding=\"async\" alt=\"VMware NSX pentru cei mai mici. Partea 1\" src=\"\/wp-content\/uploads\/2019\/03\/d67a661168e8dbe0a457f55843637ec4.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAici este de asemenea men\u021bionat o list\u0103 de servicii (combinarea protocol-port) \u0219i aplica\u021bii care pot fi utilizate la crearea regulilor de firewall. Noi servicii \u0219i aplica\u021bii pot fi ad\u0103ugate doar de c\u0103tre administratorul portalului vCD. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX pentru cei mai mici. Partea 1\" src=\"\/wp-content\/uploads\/2019\/03\/c282c7918004a9bab2084e4eadae1062.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n\u00a0<br \/>\n<img decoding=\"async\" alt=\"VMware NSX pentru cei mai mici. Partea 1\" src=\"\/wp-content\/uploads\/2019\/03\/95fd637be49655d7467f49218b32751b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Statistici.<\/b> Statistici despre conexiuni: traficul care trece prin gateway, firewall \u0219i balansator. <\/p>\n<p>Starea \u0219i statisticile fiec\u0103rui tunel IPSEC VPN \u0219i L2 VPN. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX pentru cei mai mici. Partea 1\" src=\"\/wp-content\/uploads\/2019\/03\/af05223598fb569f74a4e6aa0c8f5595.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Logare.<\/b> \u00cen tabul Edge Settings po\u021bi seta serverul pentru \u00eenregistrarea logurilor. \u00cenregistrarea func\u021bioneaz\u0103 pentru DNAT\/SNAT, DHCP, Firewall, rutare, balansare de \u00eenc\u0103rcare, IPsec VPN, SSL VPN Plus.<br \/>\n\u00a0<br \/>\nPentru fiecare obiect\/serviciu sunt disponibile urm\u0103toarele tipuri de notific\u0103ri: <\/p>\n<p> \u2014 Debug<br \/>\n \u2014 Alert\u0103<br \/>\n \u2014 Critic<br \/>\n \u2014 Eroare<br \/>\n \u2014 Avertizare<br \/>\n \u2014 Noti\u021be<br \/>\n \u2014 Informa\u021bii<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX pentru cei mai mici. Partea 1\" src=\"\/wp-content\/uploads\/2019\/03\/ccd8345e8756004f1fbf2e2935ea5499.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Dimensiunile NSX Edge <\/h3>\n<p>\n\u00cen func\u021bie de sarcinile rezolvate \u0219i de volumele VMware <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.vmware.com\/en\/VMware-NSX-Data-Center-for-vSphere\/6.3\/com.vmware.nsx.install.doc\/GUID-311BBB9F-32CC-4633-9F91-26A39296381A.html\">recomand\u0103 <\/a><\/noindex>se pot crea NSX Edge de dimensiunile urm\u0103toare:<\/p>\n<p><b>NSX Edge<br \/>\n(Compact)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(Large)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(Quad-Large)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(X-Large)<\/b><\/p>\n<p>vCPU<\/p>\n<p>1<\/p>\n<p>2<\/p>\n<p>4<\/p>\n<p>6<\/p>\n<p>Memorie<\/p>\n<p>512MB<\/p>\n<p>1GB<\/p>\n<p>1GB<\/p>\n<p>8GB<\/p>\n<p>Discul<\/p>\n<p>512MB<\/p>\n<p>512MB<\/p>\n<p>512MB<\/p>\n<p>4.5GB + 4GB<\/p>\n<p>Destina\u021bie<\/p>\n<p>Un<br \/>\naplica\u021bie, test<br \/>\ncentru de date<\/p>\n<p>Mic <br \/>\nsau mediu<br \/>\ncentru de date<\/p>\n<p>\u00cenc\u0103rcat<br \/>\nfirewall<\/p>\n<p>Balansarea<br \/>\n\u00eenc\u0103rc\u0103ri la nivel L7<\/p>\n<p>Mai jos \u00een tabel \u2013 metricile de lucru ale serviciilor de re\u021bea \u00een func\u021bie de dimensiunea NSX Edge.<\/p>\n<p><b>NSX Edge<br \/>\n(Compact)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(Large)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(Quad-Large)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(X-Large)<\/b><\/p>\n<p>Interfe\u021be<\/p>\n<p>10<\/p>\n<p>10<\/p>\n<p>10<\/p>\n<p>10<\/p>\n<p>Sub Interfe\u021be (Trunk)<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>Reguli NAT<\/p>\n<p>2,048<\/p>\n<p>4,096<\/p>\n<p>4,096<\/p>\n<p>8,192<\/p>\n<p>Intr\u0103ri ARP<br \/>\nP\u00e2n\u0103 la suprascriere<\/p>\n<p>1,024<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>Reguli FW<\/p>\n<p>2000<\/p>\n<p>2000<\/p>\n<p>2000<\/p>\n<p>2000<\/p>\n<p>Performan\u021ba FW<\/p>\n<p>3Gbps<\/p>\n<p>9.7Gbps<\/p>\n<p>9.7Gbps<\/p>\n<p>9.7Gbps<\/p>\n<p>Pool-uri DHCP<\/p>\n<p>20,000<\/p>\n<p>20,000<\/p>\n<p>20,000<\/p>\n<p>20,000<\/p>\n<p>C\u0103r\u021bile ECMP<\/p>\n<p>8<\/p>\n<p>8<\/p>\n<p>8<\/p>\n<p>8<\/p>\n<p>Rute Statice<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>Pool-uri LB<\/p>\n<p>64<\/p>\n<p>64<\/p>\n<p>64<\/p>\n<p>1,024<\/p>\n<p>Servere Virtuale LB<\/p>\n<p>64<\/p>\n<p>64<\/p>\n<p>64<\/p>\n<p>1,024<\/p>\n<p>LB Server \/ Pool<\/p>\n<p>32<\/p>\n<p>32<\/p>\n<p>32<\/p>\n<p>32<\/p>\n<p>Verific\u0103ri de Stare LB<\/p>\n<p>320<\/p>\n<p>320<\/p>\n<p>320<\/p>\n<p>3,072<\/p>\n<p>Reguli de Aplica\u021bie LB<\/p>\n<p>4,096<\/p>\n<p>4,096<\/p>\n<p>4,096<\/p>\n<p>4,096<\/p>\n<p>Clien\u021bi L2VPN Hub c\u0103tre Spoke<\/p>\n<p>5<\/p>\n<p>5<\/p>\n<p>5<\/p>\n<p>5<\/p>\n<p>Re\u021bele L2VPN per Client\/Server<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>Tuneluri IPSec<\/p>\n<p>512<\/p>\n<p>1,600<\/p>\n<p>4,096<\/p>\n<p>6,000<\/p>\n<p>Tuneluri SSLVPN<\/p>\n<p>50<\/p>\n<p>100<\/p>\n<p>100<\/p>\n<p>1,000<\/p>\n<p>Re\u021bele Private SSLVPN<\/p>\n<p>16<\/p>\n<p>16<\/p>\n<p>16<\/p>\n<p>16<\/p>\n<p>Sesiuni Concurente<\/p>\n<p>64,000<\/p>\n<p>1,000,000<\/p>\n<p>1,000,000<\/p>\n<p>1,000,000<\/p>\n<p>Sesiuni\/Second\u0103<\/p>\n<p>8,000<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>LB Throughput L7 Proxy)<\/p>\n<p>2.2Gbps<\/p>\n<p>2.2Gbps<\/p>\n<p>3Gbps<\/p>\n<p>LB Throughput L4 Mode)<\/p>\n<p>6Gbps<\/p>\n<p>6Gbps<\/p>\n<p>6Gbps<\/p>\n<p>LB Conexiuni\/s (L7 Proxy)<\/p>\n<p>46,000<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>LB Conexiuni Concurente (L7 Proxy)<\/p>\n<p>8,000<\/p>\n<p>60,000<\/p>\n<p>60,000<\/p>\n<p>LB Conexiuni\/s (L4 Mode)<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>LB Conexiuni Concurente (L4 Mode)<\/p>\n<p>600,000<\/p>\n<p>1,000,000<\/p>\n<p>1,000,000<\/p>\n<p>Rute BGP<\/p>\n<p>20,000<\/p>\n<p>50,000<\/p>\n<p>250,000<\/p>\n<p>250,000<\/p>\n<p>Vecini BGP<\/p>\n<p>10<\/p>\n<p>20<\/p>\n<p>100<\/p>\n<p>100<\/p>\n<p>Rute BGP Redistribuite<\/p>\n<p>F\u0103r\u0103 Limit\u0103<\/p>\n<p>F\u0103r\u0103 Limit\u0103<\/p>\n<p>F\u0103r\u0103 Limit\u0103<\/p>\n<p>F\u0103r\u0103 Limit\u0103<\/p>\n<p>Rute OSPF<\/p>\n<p>20,000<\/p>\n<p>50,000<\/p>\n<p>100,000<\/p>\n<p>100,000<\/p>\n<p>Intr\u0103ri OSPF LSA Max 750 Tip-1<\/p>\n<p>20,000<\/p>\n<p>50,000<\/p>\n<p>100,000<\/p>\n<p>100,000<\/p>\n<p>Adiacen\u021be OSPF<\/p>\n<p>10<\/p>\n<p>20<\/p>\n<p>40<\/p>\n<p>40<\/p>\n<p>Rute OSPF Redistribuite<\/p>\n<p>2000<\/p>\n<p>5000<\/p>\n<p>20,000<\/p>\n<p>20,000<\/p>\n<p>Total Rute<\/p>\n<p>20,000<\/p>\n<p>50,000<\/p>\n<p>250,000<\/p>\n<p>250,000<\/p>\n<p>\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/anthonyspiteri.net\/nsx-bytes-updated-nsx-edge-feature-and-performance-matrix-2\/\"><i>Sursa<\/i><\/a><\/noindex><\/p>\n<p>Din tabel, se observ\u0103 c\u0103 organizarea balans\u0103rii pe NSX Edge pentru scenarii productive este recomandat\u0103 s\u0103 \u00eenceap\u0103 de la dimensiunea Large. <\/p>\n<p>P\u00e2n\u0103 acum am terminat. \u00cen p\u0103r\u021bile urm\u0103toare voi detalia configurarea fiec\u0103rui serviciu de re\u021bea NSX Edge.<br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dataline\/blog\/432980\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0415\u0441\u043b\u0438 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433 \u043b\u044e\u0431\u043e\u0433\u043e \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u0430, \u0442\u043e, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u043c\u044b \u0443\u0432\u0438\u0434\u0438\u043c \u043f\u0440\u043e\u0441\u0442\u044b\u043d\u044e \u0441 \u043a\u0443\u0447\u0435\u0439 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u043f\u043e\u0440\u0442\u043e\u0432, \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0438 \u043f\u043e\u0434\u0441\u0435\u0442\u0435\u0439. \u0422\u0430\u043a \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0442\u0441\u044f \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043a \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c. \u0421\u043d\u0430\u0447\u0430\u043b\u0430 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0435 \u0441\u0442\u0430\u0440\u0430\u044e\u0442\u0441\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u043f\u043e\u0440\u044f\u0434\u043e\u043a, \u043d\u043e \u043f\u043e\u0442\u043e\u043c \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442\u044c \u0438\u0437 \u043e\u0442\u0434\u0435\u043b\u0430 \u0432 \u043e\u0442\u0434\u0435\u043b, \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0440\u0430\u0437\u043c\u043d\u043e\u0436\u0430\u0442\u044c\u0441\u044f \u0438 \u043c\u0435\u043d\u044f\u0442\u044c \u0441\u0432\u043e\u0438 \u0440\u043e\u043b\u0438, \u043f\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u044b \u0434\u043b\u044f \u0440\u0430\u0437\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-30009","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47VMware NSX \u0434\u043b\u044f \u0441\u0430\u043c\u044b\u0445 \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u0438\u0445. \u0427\u0430\u0441\u0442\u044c 1 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:33:10+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:33:10+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47VMware NSX pentru cei mai mici. Partea 1 | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47VMware NSX \u0434\u043b\u044f \u0441\u0430\u043c\u044b\u0445 \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u0438\u0445. \u0427\u0430\u0441\u0442\u044c 1 | ProHoster","og:url":"https:\/\/prohoster.info\/ro\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:33:10+00:00","article:modified_time":"2019-10-31T18:33:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30009","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-20 23:24:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:44:38","updated":"2026-01-20 23:24:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/30009","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=30009"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/30009\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=30009"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=30009"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=30009"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}