{"id":30009,"date":"2019-10-31T21:33:10","date_gmt":"2019-10-31T18:33:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1\/"},"modified":"2019-10-31T21:33:10","modified_gmt":"2019-10-31T18:33:10","slug":"vmware-nsx-dlya-samyh-malenkih-chast-1","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1","title":{"rendered":"VMware NSX pre najmen\u0161\u00edch. \u010cas\u0165 1","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"VMware NSX pre najmen\u0161\u00edch. \u010cas\u0165 1\" src=\"\/wp-content\/uploads\/2019\/03\/22caedbcfd1d6fa4e19bc5b0fe71e0c9.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAk sa pozriete na konfigur\u00e1ciu ak\u00e9hoko\u013evek firewallu, pravdepodobne uvid\u00edte zoznam IP adries, portov, protokolov a podsiet\u00ed. Takto sa klasicky realizuj\u00fa politiku sie\u0165ovej bezpe\u010dnosti pre pr\u00edstup pou\u017e\u00edvate\u013eov k zdrojom. Na za\u010diatku sa v konfigur\u00e1cii sna\u017eia udr\u017eiava\u0165 poriadok, ale postupne zamestnanci prech\u00e1dzaj\u00fa z oddelenia do oddelenia, servery sa mno\u017eia a menia svoje \u00falohy, objavuj\u00fa sa pr\u00edstupy pre r\u00f4zne projekty tam, kde by norm\u00e1lne nemali by\u0165, a v\u00fdsledkom s\u00fa stovky nezn\u00e1mych cesti\u010diek.<\/p>\n<p>Kdesi okolo nejak\u00fdch pravidiel, ak sa \u0161\u0165astie usmeje, s\u00fa nap\u00edsan\u00e9 koment\u00e1re \u201ePo\u017eiadal o to Va\u0161a\u201c alebo \u201eToto je pr\u00edstup do DMZ\u201c. Sie\u0165ov\u00fd administr\u00e1tor od\u00edde a v\u0161etko sa st\u00e1va \u00faplne nejasn\u00e9. Potom sa niekto rozhodol vy\u010disti\u0165 konfigur\u00e1ciu od Va\u0161y, a spadol SAP, preto\u017ee kedysi Va\u0161a \u017eiadal tento pr\u00edstup pre pr\u00e1cu so SAP.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX pre najmen\u0161\u00edch. \u010cas\u0165 1\" src=\"\/wp-content\/uploads\/2019\/03\/f79759ed590ad9b3a1f4878abdb47e6c.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDnes v\u00e1m poviem o rie\u0161en\u00ed VMware NSX, ktor\u00e9 pom\u00e1ha presne uplat\u0148ova\u0165 politiky sie\u0165ovej interakcie a bezpe\u010dnosti bez neprehladnosti v konfigur\u00e1ci\u00e1ch firewallu. Uk\u00e1\u017eem v\u00e1m, ak\u00e9 nov\u00e9 funkcie sa objavili v porovnan\u00ed s t\u00fdm, \u010do bolo predt\u00fdm k dispoz\u00edcii vo VMware v tejto oblasti. <noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>VMWare NSX \u2013 platforma virtualiz\u00e1cie a zabezpe\u010denia sie\u0165ov\u00fdch slu\u017eieb. NSX rie\u0161i \u00falohy smerovania, prep\u00ednania, vyva\u017eovania z\u00e1\u0165a\u017ee, firewallu a vie robi\u0165 mno\u017estvo in\u00e9ho zauj\u00edmav\u00e9ho. <\/p>\n<p>NSX je n\u00e1stupcom vlastn\u00e9ho produktu VMware vCloud Networking and Security (vCNS) a zak\u00fapen\u00e9ho Nicira NVP.<\/p>\n<h3>Od vCNS k NSX<\/h3>\n<p>\nRovnak\u00fd cloud, ktor\u00fd bol postaven\u00fd na VMware vCloud, mal predt\u00fdm samostatn\u00fa virtu\u00e1lnu ma\u0161inu vCNS vShield Edge. T\u00e1to vykon\u00e1vala \u00falohu okrajov\u00e9ho br\u00e1ny, kde bolo mo\u017en\u00e9 nastavi\u0165 mno\u017estvo sie\u0165ov\u00fdch funkci\u00ed: NAT, DHCP, Firewall, VPN, vyva\u017eova\u010d z\u00e1\u0165a\u017ee at\u010f. vShield Edge obmedzoval interakciu virtu\u00e1lnej ma\u0161iny s vonkaj\u0161\u00edm svetom pod\u013ea pravidiel, ktor\u00e9 boli nap\u00edsan\u00e9 vo firewalli a NAT. V r\u00e1mci siete sa virtu\u00e1lne ma\u0161iny medzi sebou vo\u013ene komunikovali v r\u00e1mci podsiet\u00ed. Ak by ste ve\u013emi chceli rozdeli\u0165 a ovl\u00e1da\u0165 prenos, m\u00f4\u017eete vytvori\u0165 samostatn\u00fa sie\u0165 pre r\u00f4zne \u010dasti aplik\u00e1ci\u00ed (r\u00f4zne virtu\u00e1lne ma\u0161iny) a sp\u00edsa\u0165 vo firewalli pr\u00edslu\u0161n\u00e9 pravidl\u00e1 pre ich sie\u0165ov\u00fa interakciu. Av\u0161ak, to je zd\u013ahav\u00e9, zlo\u017eit\u00e9 a nezauj\u00edmav\u00e9, najm\u00e4 ak m\u00e1te nieko\u013eko desiatok virtu\u00e1lnych strojov.<\/p>\n<p>V NSX VMware realizovala koncept mikrosement\u00e1cie pomocou distribuovanej firewall (distributed firewall), zabudovanej v jadre hyperv\u00edzora. V \u0148om s\u00fa definovan\u00e9 bezpe\u010dnostn\u00e9 politiky a sie\u0165ov\u00e1 interakcia nielen pre IP- a MAC-adresy, ale aj pre in\u00e9 objekty: virtu\u00e1lne stroje, aplik\u00e1cie. Ak je NSX nasaden\u00e9 v r\u00e1mci organiz\u00e1cie, m\u00f4\u017eu sa tak\u00fdmito objektmi sta\u0165 pou\u017e\u00edvatelia alebo skupiny pou\u017e\u00edvate\u013eov z Active Directory. Ka\u017ed\u00fd tak\u00fdto objekt sa prev\u00e1dza na mikrosegment vo svojom bezpe\u010dnostnom kont\u00fare, v potrebnej podsieti, so svojou \u00fatulnou DMZ :). <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX pre najmen\u0161\u00edch. \u010cas\u0165 1\" src=\"\/wp-content\/uploads\/2019\/03\/67ab3d12da30a0fcfad4f2b4f14368f5.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Predt\u00fdm bol bezpe\u010dnostn\u00fd perimeter jeden pre cel\u00fd fond zdrojov, ktor\u00fd bol chr\u00e1nen\u00fd okrajov\u00fdm prep\u00edna\u010dom, a s NSX je mo\u017en\u00e9 oddeli\u0165 od nadbyto\u010dn\u00fdch interakci\u00ed jednotliv\u00fd virtu\u00e1lny stroj aj v r\u00e1mci jednej siete. <\/i><\/p>\n<p>Bezpe\u010dnostn\u00e9 politiky a sie\u0165ov\u00e1 interakcia sa prisp\u00f4sobuj\u00fa, ak sa objekt presunie do inej siete. Napr\u00edklad, ak presunieme datab\u00e1zov\u00fd stroj do in\u00e9ho sie\u0165ov\u00e9ho segmentu alebo dokonca do in\u00e9ho prepojen\u00e9ho virtu\u00e1lneho d\u00e1tov\u00e9ho centra, pravidl\u00e1 definovan\u00e9 pre tento virtu\u00e1lny stroj bud\u00fa pokra\u010dova\u0165 v platnosti bez oh\u013eadu na jeho nov\u00fa polohu. Aplika\u010dn\u00fd server st\u00e1le m\u00f4\u017ee komunikova\u0165 s datab\u00e1zou.<\/p>\n<p>Na miesto samotn\u00e9ho okrajov\u00e9ho br\u00e1ny vCNS vShield Edge pri\u0161iel NSX Edge. M\u00e1 cel\u00fd gentlemanov s\u00fabor star\u00e9ho Edge plus nieko\u013eko nov\u00fdch u\u017eito\u010dn\u00fdch funkci\u00ed. O nich sa bude \u010falej hovori\u0165.<\/p>\n<h3>\u010co je nov\u00e9ho v NSX Edge?<\/h3>\n<p>\nFunkcionalita NSX Edge z\u00e1vis\u00ed od <noindex><a rel=\"nofollow\" href=\"https:\/\/www.vmware.com\/content\/dam\/digitalmarketing\/vmware\/en\/pdf\/products\/nsx\/vmware-nsx-compare-editions.pdf\">ed\u00edcie<\/a><\/noindex> NSX. Celkovo ich je p\u00e4\u0165: Standard, Professional, Advanced, Enterprise, Plus Remote Branch Office. V\u0161etko nov\u00e9 a zauj\u00edmav\u00e9 je mo\u017en\u00e9 vidie\u0165 len od ed\u00edcie Advanced. Vr\u00e1tane nov\u00e9ho rozhrania, ktor\u00e9 do pln\u00e9ho prechodu vCloud na HTML5 (VMware s\u013eubuje leto 2019) sa otv\u00e1ra v novom karte.<\/p>\n<p><b>Firewall.<\/b> Ako objekty, na ktor\u00e9 sa bud\u00fa vz\u0165ahova\u0165 pravidl\u00e1, je mo\u017en\u00e9 vybra\u0165 IP-adresy, siete, rozhrania br\u00e1ny a virtu\u00e1lne stroje. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX pre najmen\u0161\u00edch. \u010cas\u0165 1\" src=\"\/wp-content\/uploads\/2019\/03\/fa05b6c018bea8f968df340693d1eeab.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"VMware NSX pre najmen\u0161\u00edch. \u010cas\u0165 1\" src=\"\/wp-content\/uploads\/2019\/03\/3b5844efa756f46f47e3ebf2b876a790.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>DHCP.<\/b> Okrem nastavenia rozsahu IP-adres, ktor\u00e9 bud\u00fa automaticky pridelen\u00e9 virtu\u00e1lnym strojom tejto siete, s\u00fa v NSX Edge dostupn\u00e9 funkcie <b>Binding<\/b> a <b>Relay<\/b>.<\/p>\n<p>Na karte <b>Bindings<\/b> je mo\u017en\u00e9 priradi\u0165 MAC-adresu virtu\u00e1lneho stroja k IP-adrese, ak je potrebn\u00e9, aby IP-adresa zost\u00e1vala nezmenen\u00e1. Hlavn\u00e9 je, \u017ee t\u00e1to IP-adresa nie je s\u00fa\u010das\u0165ou DHCP Pool.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX pre najmen\u0161\u00edch. \u010cas\u0165 1\" src=\"\/wp-content\/uploads\/2019\/03\/da013f13cd762936df173ff601590f8b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNa karte <b>Relay<\/b> Konfigur\u00e1cia retransmisie DHCP spr\u00e1v DHCP serverom, ktor\u00e9 s\u00fa mimo va\u0161ej organiz\u00e1cie v vCloud Director, vr\u00e1tane fyzickej infra\u0161trukt\u00fary DHCP serverov. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX pre najmen\u0161\u00edch. \u010cas\u0165 1\" src=\"\/wp-content\/uploads\/2019\/03\/c5b8762d49364db13cccd0c79f2692a8.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Smerovanie.<\/b> V vShield Edge bolo mo\u017en\u00e9 nastavi\u0165 len statick\u00e9 smerovanie. Teraz sa objavilo dynamick\u00e9 smerovanie podporuj\u00face protokoly OSPF a BGP. Taktie\u017e s\u00fa dostupn\u00e9 nastavenia ECMP (akt\u00edvne-akt\u00edvne), \u010do znamen\u00e1 aj havarijn\u00e9 prep\u00ednanie typu \u201eakt\u00edvny-akt\u00edvny\u201c na fyzick\u00e9 smerova\u010de.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX pre najmen\u0161\u00edch. \u010cas\u0165 1\" src=\"\/wp-content\/uploads\/2019\/03\/cc4a6a30f8ab130766009ed250e2e514.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Nastavenie OSPF<\/i><\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX pre najmen\u0161\u00edch. \u010cas\u0165 1\" src=\"\/wp-content\/uploads\/2019\/03\/efdf3f78b3b7123aaca6b017c7507827.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Nastavenie BGP<\/i><\/p>\n<p>\u010eal\u0161ia novinka \u2013 nastavenie prenosu tr\u00e1s medzi r\u00f4znymi protokolmi,<br \/>\nredistrib\u00facia tr\u00e1s (route redistribution). <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX pre najmen\u0161\u00edch. \u010cas\u0165 1\" src=\"\/wp-content\/uploads\/2019\/03\/c0a5c7b3055ba80b0c4fcda4c03e7d4c.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>L4\/L7 Vyv\u00e1\u017eenie z\u00e1\u0165a\u017ee.<\/b> Objavil sa X-Forwarded-For pre HTTPs hlavi\u010dku. Bez neho sa v\u0161etci s\u0165a\u017eovali. Napr\u00edklad, m\u00e1te web, ktor\u00fd vyva\u017eujete. Bez preposielania tejto hlavi\u010dky v\u0161etko fungovalo, ale v \u0161tatistik\u00e1ch webov\u00e9ho servera ste videli nie IP n\u00e1v\u0161tevn\u00edkov, ale IP vyva\u017eova\u010da. Teraz je v\u0161etko spr\u00e1vne. <\/p>\n<p>Taktie\u017e na karte Pravidl\u00e1 aplik\u00e1ci\u00ed je mo\u017en\u00e9 prida\u0165 skripty, ktor\u00e9 bud\u00fa priamo riadi\u0165 vyv\u00e1\u017eenie prev\u00e1dzky.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX pre najmen\u0161\u00edch. \u010cas\u0165 1\" src=\"\/wp-content\/uploads\/2019\/03\/8f28ba0a4e870cca84a295af68f90c02.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>VPN. <\/b>Okrem IPSec VPN, NSX Edge podporuje:<\/p>\n<ul>\n<li>L2 VPN, umo\u017e\u0148uj\u00facu roz\u0161\u00edri\u0165 siete medzi geograficky vzdialen\u00fdmi lokalitami. Tak\u00e1to VPN je potrebn\u00e1, napr\u00edklad, aby sa pri presune na in\u00e9 miesto virtu\u00e1lny stroj udr\u017eal v rovnakej podsieti a zachoval si IP adresu.\n<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"VMware NSX pre najmen\u0161\u00edch. \u010cas\u0165 1\" src=\"\/wp-content\/uploads\/2019\/03\/688ce2e7d26f63ea5cf9c9525294388b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<ul>\n<li>SSL VPN Plus, ktor\u00e1 umo\u017e\u0148uje pou\u017e\u00edvate\u013eom pripoji\u0165 sa na dia\u013eku k firemnej sieti. Na \u00farovni vSphere tak\u00e1 funkcia bola, av\u0161ak pre vCloud Director je to novinka. \n<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"VMware NSX pre najmen\u0161\u00edch. \u010cas\u0165 1\" src=\"\/wp-content\/uploads\/2019\/03\/e624c7c61b1954e78a37fc512d121140.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>SSL certifik\u00e1ty.<\/b> Na NSX Edge je teraz mo\u017en\u00e9 nain\u0161talova\u0165 certifik\u00e1ty. Op\u00e4\u0165 k ot\u00e1zke, komu bol potrebn\u00fd vyva\u017eova\u010d bez certifik\u00e1tu pre https.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX pre najmen\u0161\u00edch. \u010cas\u0165 1\" src=\"\/wp-content\/uploads\/2019\/03\/7dca479fbc19be397d3666980def43d3.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Skupiny objektov (Grouping Objects).<\/b> Na tejto karte sa definuj\u00fa skupiny objektov, pre ktor\u00e9 bud\u00fa plati\u0165 ur\u010dit\u00e9 pravidl\u00e1 sie\u0165ovej interakcie, napr\u00edklad pravidl\u00e1 firewallu. <\/p>\n<p>T\u00fdmito objektmi m\u00f4\u017eu by\u0165 IP a MAC adresy. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX pre najmen\u0161\u00edch. \u010cas\u0165 1\" src=\"\/wp-content\/uploads\/2019\/03\/8a28bdb82f8dd982c1edf9af99c5e6b7.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n\u00a0<br \/>\n<img decoding=\"async\" alt=\"VMware NSX pre najmen\u0161\u00edch. \u010cas\u0165 1\" src=\"\/wp-content\/uploads\/2019\/03\/d67a661168e8dbe0a457f55843637ec4.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nTu je tie\u017e uveden\u00fd zoznam slu\u017eieb (kombin\u00e1cia protokol-port) a aplik\u00e1ci\u00ed, ktor\u00e9 je mo\u017en\u00e9 vyu\u017ei\u0165 pri zostavovan\u00ed pravidiel firewallu. Nov\u00e9 slu\u017eby a aplik\u00e1cie m\u00f4\u017ee prid\u00e1va\u0165 iba administr\u00e1tor port\u00e1lu vCD. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX pre najmen\u0161\u00edch. \u010cas\u0165 1\" src=\"\/wp-content\/uploads\/2019\/03\/c282c7918004a9bab2084e4eadae1062.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n\u00a0<br \/>\n<img decoding=\"async\" alt=\"VMware NSX pre najmen\u0161\u00edch. \u010cas\u0165 1\" src=\"\/wp-content\/uploads\/2019\/03\/95fd637be49655d7467f49218b32751b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>\u0160tatistika.<\/b> \u0160tatistika pripojen\u00ed: prev\u00e1dzka, ktor\u00e1 prech\u00e1dza cez br\u00e1nu, firewall a vyva\u017eova\u010d. <\/p>\n<p>Status a \u0161tatistika pre ka\u017ed\u00fd tunel IPSEC VPN a L2 VPN. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX pre najmen\u0161\u00edch. \u010cas\u0165 1\" src=\"\/wp-content\/uploads\/2019\/03\/af05223598fb569f74a4e6aa0c8f5595.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Z\u00e1znamovanie.<\/b> V nastaven\u00ed Edge m\u00f4\u017eete nastavi\u0165 server na zaznamen\u00e1vanie logov. Zaznamen\u00e1vanie funguje pre DNAT\/SNAT, DHCP, firewall, smerovanie, vyva\u017eovanie z\u00e1\u0165a\u017ee, IPsec VPN a SSL VPN Plus.<br \/>\n\u00a0<br \/>\nPre ka\u017ed\u00fd objekt\/slu\u017ebu s\u00fa k dispoz\u00edcii nasleduj\u00face typy upozornen\u00ed: <\/p>\n<p> \u2014 Debug<br \/>\n \u2014 Upozornenie<br \/>\n \u2014 Kritick\u00e9<br \/>\n \u2014 Chyba<br \/>\n \u2014 Varovanie<br \/>\n \u2014 Ozn\u00e1menie<br \/>\n \u2014 Inform\u00e1cie<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX pre najmen\u0161\u00edch. \u010cas\u0165 1\" src=\"\/wp-content\/uploads\/2019\/03\/ccd8345e8756004f1fbf2e2935ea5499.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Ve\u013ekosti NSX Edge <\/h3>\n<p>\nV z\u00e1vislosti od rie\u0161en\u00fdch \u00faloh a objemov VMware <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.vmware.com\/en\/VMware-NSX-Data-Center-for-vSphere\/6.3\/com.vmware.nsx.install.doc\/GUID-311BBB9F-32CC-4633-9F91-26A39296381A.html\">odpor\u00fa\u010da <\/a><\/noindex>je mo\u017en\u00e9 vytvori\u0165 NSX Edge nasledovn\u00fdch ve\u013ekost\u00ed:<\/p>\n<p><b>NSX Edge<br \/>\n(Kompaktn\u00fd)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(Ve\u013ek\u00fd)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(Quad-Ve\u013ek\u00fd)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(X-Ve\u013ek\u00fd)<\/b><\/p>\n<p>vCPU<\/p>\n<p>1<\/p>\n<p>2<\/p>\n<p>4<\/p>\n<p>6<\/p>\n<p>Pam\u00e4\u0165<\/p>\n<p>512MB<\/p>\n<p>1GB<\/p>\n<p>1GB<\/p>\n<p>8GB<\/p>\n<p>Disk<\/p>\n<p>512MB<\/p>\n<p>512MB<\/p>\n<p>512MB<\/p>\n<p>4.5GB + 4GB<\/p>\n<p>\u00da\u010del<\/p>\n<p>Jedna<br \/>\naplik\u00e1cia, testovac\u00ed<br \/>\nd\u00e1tov\u00e9 centrum<\/p>\n<p>Mal\u00fd <br \/>\nalebo stredn\u00fd<br \/>\nd\u00e1tov\u00e9 centrum<\/p>\n<p>Zatia\u017ean\u00fd<br \/>\nfirewall<\/p>\n<p>Vyv\u00e1\u017eenie<br \/>\nza\u0165a\u017eenia na \u00farovni L7<\/p>\n<p>Ni\u017e\u0161ie v tabu\u013eke \u2013 pracovn\u00e9 metriky sie\u0165ov\u00fdch slu\u017eieb v z\u00e1vislosti od ve\u013ekosti NSX Edge.<\/p>\n<p><b>NSX Edge<br \/>\n(Kompaktn\u00fd)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(Ve\u013ek\u00fd)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(Quad-Ve\u013ek\u00fd)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(X-Ve\u013ek\u00fd)<\/b><\/p>\n<p>Interfaces<\/p>\n<p>10<\/p>\n<p>10<\/p>\n<p>10<\/p>\n<p>10<\/p>\n<p>Sub Interfaces (Trunk)<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>NAT Pravidl\u00e1<\/p>\n<p>2,048<\/p>\n<p>4,096<\/p>\n<p>4,096<\/p>\n<p>8,192<\/p>\n<p>ARP Z\u00e1znamy<br \/>\nA\u017e do prep\u00edsania<\/p>\n<p>1,024<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>FW Pravidl\u00e1<\/p>\n<p>2000<\/p>\n<p>2000<\/p>\n<p>2000<\/p>\n<p>2000<\/p>\n<p>FW V\u00fdkon<\/p>\n<p>3Gbps<\/p>\n<p>9.7Gbps<\/p>\n<p>9.7Gbps<\/p>\n<p>9.7Gbps<\/p>\n<p>DHCP Pooly<\/p>\n<p>20,000<\/p>\n<p>20,000<\/p>\n<p>20,000<\/p>\n<p>20,000<\/p>\n<p>ECMP Cesty<\/p>\n<p>8<\/p>\n<p>8<\/p>\n<p>8<\/p>\n<p>8<\/p>\n<p>Statick\u00e9 Trasy<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>LB Pooly<\/p>\n<p>64<\/p>\n<p>64<\/p>\n<p>64<\/p>\n<p>1,024<\/p>\n<p>LB Virtu\u00e1lne Servery<\/p>\n<p>64<\/p>\n<p>64<\/p>\n<p>64<\/p>\n<p>1,024<\/p>\n<p>LB Server \/ Pool<\/p>\n<p>32<\/p>\n<p>32<\/p>\n<p>32<\/p>\n<p>32<\/p>\n<p>LB Kontroly Zdravia<\/p>\n<p>320<\/p>\n<p>320<\/p>\n<p>320<\/p>\n<p>3,072<\/p>\n<p>LB Aplika\u010dn\u00e9 Pravidl\u00e1<\/p>\n<p>4,096<\/p>\n<p>4,096<\/p>\n<p>4,096<\/p>\n<p>4,096<\/p>\n<p>L2VPN Klienti Hub na Hovor<\/p>\n<p>5<\/p>\n<p>5<\/p>\n<p>5<\/p>\n<p>5<\/p>\n<p>L2VPN Sie\u0165e na Klienta\/Server<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>IPSec Tunely<\/p>\n<p>512<\/p>\n<p>1,600<\/p>\n<p>4,096<\/p>\n<p>6,000<\/p>\n<p>SSLVPN Tunely<\/p>\n<p>50<\/p>\n<p>100<\/p>\n<p>100<\/p>\n<p>1,000<\/p>\n<p>SSLVPN Priv\u00e1tne Sie\u0165e<\/p>\n<p>16<\/p>\n<p>16<\/p>\n<p>16<\/p>\n<p>16<\/p>\n<p>Konkurentn\u00e9 Rel\u00e1cie<\/p>\n<p>64,000<\/p>\n<p>1,000,000<\/p>\n<p>1,000,000<\/p>\n<p>1,000,000<\/p>\n<p>Rel\u00e1cie\/sekund<\/p>\n<p>8,000<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>LB Priepustnos\u0165 L7 Proxy<\/p>\n<p>2.2Gbps<\/p>\n<p>2.2Gbps<\/p>\n<p>3Gbps<\/p>\n<p>LB Priepustnos\u0165 L4 M\u00f3du<\/p>\n<p>6Gbps<\/p>\n<p>6Gbps<\/p>\n<p>6Gbps<\/p>\n<p>LB Spojenia\/s (L7 Proxy)<\/p>\n<p>46,000<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>LB Konkurentn\u00e9 Spojenia (L7 Proxy)<\/p>\n<p>8,000<\/p>\n<p>60,000<\/p>\n<p>60,000<\/p>\n<p>LB Spojenia\/s (L4 M\u00f3d)<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>LB Konkurentn\u00e9 Spojenia (L4 M\u00f3d)<\/p>\n<p>600,000<\/p>\n<p>1,000,000<\/p>\n<p>1,000,000<\/p>\n<p>BGP Trasy<\/p>\n<p>20,000<\/p>\n<p>50,000<\/p>\n<p>250,000<\/p>\n<p>250,000<\/p>\n<p>BGP Susedia<\/p>\n<p>10<\/p>\n<p>20<\/p>\n<p>100<\/p>\n<p>100<\/p>\n<p>BGP Trasy Redistribuovan\u00e9<\/p>\n<p>Bez limitu<\/p>\n<p>Bez limitu<\/p>\n<p>Bez limitu<\/p>\n<p>Bez limitu<\/p>\n<p>OSPF Trasy<\/p>\n<p>20,000<\/p>\n<p>50,000<\/p>\n<p>100,000<\/p>\n<p>100,000<\/p>\n<p>OSPF LSA Z\u00e1znamy Max 750 Typ-1<\/p>\n<p>20,000<\/p>\n<p>50,000<\/p>\n<p>100,000<\/p>\n<p>100,000<\/p>\n<p>OSPF Adjacencie<\/p>\n<p>10<\/p>\n<p>20<\/p>\n<p>40<\/p>\n<p>40<\/p>\n<p>OSPF Trasy Redistribuovan\u00e9<\/p>\n<p>2000<\/p>\n<p>5000<\/p>\n<p>20,000<\/p>\n<p>20,000<\/p>\n<p>Celkov\u00e9 Trasy<\/p>\n<p>20,000<\/p>\n<p>50,000<\/p>\n<p>250,000<\/p>\n<p>250,000<\/p>\n<p>\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/anthonyspiteri.net\/nsx-bytes-updated-nsx-edge-feature-and-performance-matrix-2\/\"><i>Zdroj<\/i><\/a><\/noindex><\/p>\n<p>Z tabu\u013eky je zrejm\u00e9, \u017ee vyva\u017eovanie na NSX Edge pre produkt\u00edvne scen\u00e1re sa odpor\u00fa\u010da organizova\u0165 len od ve\u013ekosti Large. <\/p>\n<p>Dnes m\u00e1m v\u0161etko. V nasleduj\u00facich \u010dastiach podrobne prejdeme nastaven\u00edm ka\u017edej sie\u0165ovej slu\u017eby NSX Edge.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dataline\/blog\/432980\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0415\u0441\u043b\u0438 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433 \u043b\u044e\u0431\u043e\u0433\u043e \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u0430, \u0442\u043e, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u043c\u044b \u0443\u0432\u0438\u0434\u0438\u043c \u043f\u0440\u043e\u0441\u0442\u044b\u043d\u044e \u0441 \u043a\u0443\u0447\u0435\u0439 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u043f\u043e\u0440\u0442\u043e\u0432, \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0438 \u043f\u043e\u0434\u0441\u0435\u0442\u0435\u0439. \u0422\u0430\u043a \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0442\u0441\u044f \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043a \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c. \u0421\u043d\u0430\u0447\u0430\u043b\u0430 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0435 \u0441\u0442\u0430\u0440\u0430\u044e\u0442\u0441\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u043f\u043e\u0440\u044f\u0434\u043e\u043a, \u043d\u043e \u043f\u043e\u0442\u043e\u043c \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442\u044c \u0438\u0437 \u043e\u0442\u0434\u0435\u043b\u0430 \u0432 \u043e\u0442\u0434\u0435\u043b, \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0440\u0430\u0437\u043c\u043d\u043e\u0436\u0430\u0442\u044c\u0441\u044f \u0438 \u043c\u0435\u043d\u044f\u0442\u044c \u0441\u0432\u043e\u0438 \u0440\u043e\u043b\u0438, \u043f\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u044b \u0434\u043b\u044f \u0440\u0430\u0437\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-30009","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47VMware NSX \u0434\u043b\u044f \u0441\u0430\u043c\u044b\u0445 \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u0438\u0445. \u0427\u0430\u0441\u0442\u044c 1 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:33:10+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:33:10+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47VMware NSX pre najmen\u0161\u00edch. \u010cas\u0165 1 | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47VMware NSX \u0434\u043b\u044f \u0441\u0430\u043c\u044b\u0445 \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u0438\u0445. \u0427\u0430\u0441\u0442\u044c 1 | ProHoster","og:url":"https:\/\/prohoster.info\/sk\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:33:10+00:00","article:modified_time":"2019-10-31T18:33:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30009","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-20 23:24:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:44:38","updated":"2026-01-20 23:24:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/30009","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=30009"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/30009\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=30009"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=30009"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=30009"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}