{"id":30009,"date":"2019-10-31T21:33:10","date_gmt":"2019-10-31T18:33:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1\/"},"modified":"2019-10-31T21:33:10","modified_gmt":"2019-10-31T18:33:10","slug":"vmware-nsx-dlya-samyh-malenkih-chast-1","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1","title":{"rendered":"VMware NSX p\u00ebr m\u00eb t\u00eb vegjlit. Pjesa 1","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"VMware NSX p\u00ebr m\u00eb t\u00eb vegjlit. Pjesa 1\" src=\"\/wp-content\/uploads\/2019\/03\/22caedbcfd1d6fa4e19bc5b0fe71e0c9.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nN\u00ebse shikojm\u00eb konfigurimin e \u00e7do firewall-i, do t\u00eb shohim me siguri nj\u00eb list\u00eb me shum\u00eb adresa IP, porte, protokolle dhe n\u00ebnrrjeta. K\u00ebshtu jan\u00eb realizuar tradicionalisht politikat e siguris\u00eb rrjetore p\u00ebr qasje t\u00eb p\u00ebrdoruesve n\u00eb burime. Fillimisht, p\u00ebrpiqen t\u00eb mbajn\u00eb rend n\u00eb konfigurim, por m\u00eb pas punonj\u00ebsit fillojn\u00eb t\u00eb kalojn\u00eb nga nj\u00eb departament n\u00eb tjetrin, server\u00ebt shum\u00ebfishohen dhe ndryshojn\u00eb rolet e tyre, shfaqen qasje p\u00ebr projekte t\u00eb ndryshme n\u00eb vende ku zakonisht nuk lejohet, duke krijuar qindra shqet\u00ebsime t\u00eb panjohura.<\/p>\n<p>Rreth disa rregullave, n\u00ebse ke fat, jan\u00eb shkruar komente si \"K\u00ebrkoi ta b\u00ebj\u00eb Vasia\" ose \"Ky \u00ebsht\u00eb kalimi n\u00eb DMZ\". Administrator\u00ebt e rrjetit largohen, dhe gjith\u00e7ka b\u00ebhet krejt e paqart\u00eb. M\u00eb pas, dikush vendosi t\u00eb pastroj\u00eb konfigurimin nga Vasia, dhe SAP-u u rr\u00ebzua, sepse dikur Vasia kishte k\u00ebrkuar k\u00ebt\u00eb qasje p\u00ebr t\u00eb punuar me SAP-in operacional.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX p\u00ebr m\u00eb t\u00eb vegjlit. Pjesa 1\" src=\"\/wp-content\/uploads\/2019\/03\/f79759ed590ad9b3a1f4878abdb47e6c.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nSot do t\u00eb flas p\u00ebr zgjidhjen VMware NSX, e cila ndihmon n\u00eb zbatuar politikat e nd\u00ebrveprimit dhe siguris\u00eb rrjetore pa konfuzion n\u00eb konfigurimet e firewall-it. Do t\u00eb tregoj se cilat funksione t\u00eb reja kan\u00eb dal\u00eb krahasuar me at\u00eb q\u00eb ishte m\u00eb par\u00eb tek VMware n\u00eb k\u00ebt\u00eb pjes\u00eb. <noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>VMWare NSX \u2013 \u00ebsht\u00eb nj\u00eb platform\u00eb virtualizimi dhe sigurie p\u00ebr sh\u00ebrbimet rrjetore. NSX zgjidh problemet e routing, switching, load balancing, firewall dhe ka shum\u00eb funksione t\u00eb tjera interesante. <\/p>\n<p>NSX \u00ebsht\u00eb pasardh\u00ebsi i produktit t\u00eb vet VMware vCloud Networking and Security (vCNS) dhe i fituar Nicira NVP.<\/p>\n<h3>Nga vCNS te NSX<\/h3>\n<p>\nM\u00eb par\u00eb, tani n\u00eb cloud-in e klientit, nd\u00ebrtuar mbi VMware vCloud, kishte nj\u00eb makin\u00eb virtuale t\u00eb ve\u00e7ant\u00eb vCNS vShield Edge. Ajo sh\u00ebrbente si nj\u00eb port\u00eb kufitare, ku mund t\u00eb konfiguroheshin shum\u00eb funksione rrjetore: NAT, DHCP, Firewall, VPN, load balancer etj. vShield Edge kufizonte nd\u00ebrveprimin e makin\u00ebs virtuale me bot\u00ebn e jashtme sipas rregullave t\u00eb shkruara n\u00eb Firewall dhe NAT. Brenda rrjetit, makinat virtuale komunikonin lirsh\u00ebm mes tyre brenda n\u00ebnrrjetave. N\u00ebse d\u00ebshiron t\u00eb p\u00ebr\u00e7mosh dhe sundosh trafikun, mund t\u00eb krijosh nj\u00eb rrjet t\u00eb ve\u00e7ant\u00eb p\u00ebr pjes\u00eb t\u00eb ve\u00e7anta t\u00eb aplikacioneve (mashkull t\u00eb ndrysh\u00ebm) dhe t\u00eb shkruash n\u00eb firewall rregullat p\u00ebr nd\u00ebrveprimin e tyre rrjetor. Por kjo \u00ebsht\u00eb e gjat\u00eb, e komplikuar dhe e m\u00ebrzitshme, ve\u00e7an\u00ebrisht kur ke disa dhjet\u00ebra makina virtuale.<\/p>\n<p>N\u00eb NSX, VMware realizoi konceptin e mikrosegmentimit p\u00ebrmes nj\u00eb firewalle t\u00eb shp\u00ebrndar\u00eb (distributed firewall), e integruar n\u00eb thelbin e hipervizorit. Politikat e siguris\u00eb dhe nd\u00ebrveprimit rrjet\u00ebsor shkruhen jo vet\u00ebm p\u00ebr adresat IP dhe MAC, por edhe p\u00ebr objekte t\u00eb tjera: makina virtuale, aplikacione. N\u00ebse NSX \u00ebsht\u00eb vendosur brenda organizat\u00ebs, k\u00ebto objekte mund t\u00eb jen\u00eb p\u00ebrdorues ose grupe p\u00ebrdoruesish nga Active Directory. \u00c7do objekt i till\u00eb kthehet n\u00eb nj\u00eb mikrosegment n\u00eb konturin e tij t\u00eb siguris\u00eb, n\u00eb n\u00ebndeg\u00ebn p\u00ebrkat\u00ebse, me DMZ-n\u00eb e tij t\u00eb rehatshme :). <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX p\u00ebr m\u00eb t\u00eb vegjlit. Pjesa 1\" src=\"\/wp-content\/uploads\/2019\/03\/67ab3d12da30a0fcfad4f2b4f14368f5.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Deri tani, kufiri i siguris\u00eb ishte nj\u00eb i vet\u00ebm p\u00ebr t\u00eb gjith\u00eb grupin e burimeve, e mbrojtur nga nj\u00eb kalimtar kufiri, nd\u00ebrsa me NSX \u00ebsht\u00eb e mundur t\u00eb mbyllet nj\u00eb makin\u00eb virtuale t\u00eb ve\u00e7ant\u00eb nga nd\u00ebrveprime t\u00eb panevojshme edhe brenda nj\u00eb rrjeti. <\/i><\/p>\n<p>Politikat e siguris\u00eb dhe nd\u00ebrveprimit rrjet\u00ebsor adaptohen, n\u00ebse objekti kalon n\u00eb nj\u00eb rrjet tjet\u00ebr. P\u00ebr shembull, n\u00ebse ne e transferojm\u00eb makin\u00ebn q\u00eb ka baz\u00ebn e t\u00eb dh\u00ebnave n\u00eb nj\u00eb segment tjet\u00ebr rrjeti ose madje n\u00eb nj\u00eb qend\u00ebr t\u00eb dh\u00ebnash virtuale t\u00eb lidhur, rregullat e shkruara p\u00ebr k\u00ebt\u00eb makin\u00eb virtuale do t\u00eb vazhdojn\u00eb t\u00eb veprojn\u00eb pavar\u00ebsisht nga pozita e saj e re. Serveri i aplikacioneve do t\u00eb mund t\u00eb vazhdoj\u00eb t\u00eb nd\u00ebrveproj\u00eb me baz\u00ebn e t\u00eb dh\u00ebnave.<\/p>\n<p>N\u00eb vend t\u00eb vet\u00eb kalimtarit t\u00eb kufirit vCNS vShield Edge erdhi NSX Edge. Ai ka t\u00eb gjith\u00eb grupin e vjet\u00ebr t\u00eb Edge plus disa funksione t\u00eb reja t\u00eb dobishme. P\u00ebr to do t\u00eb flasim m\u00eb tej.<\/p>\n<h3>\u00c7far\u00eb \u00ebsht\u00eb e re te NSX Edge?<\/h3>\n<p>\nFunksionaliteti i NSX Edge varet nga <noindex><a rel=\"nofollow\" href=\"https:\/\/www.vmware.com\/content\/dam\/digitalmarketing\/vmware\/en\/pdf\/products\/nsx\/vmware-nsx-compare-editions.pdf\">edita<\/a><\/noindex> NSX. Ka gjithsej pes\u00eb: Standard, Professional, Advanced, Enterprise, Plus Remote Branch Office. \u00c7do gj\u00eb e re dhe interesante mund t\u00eb shihet vet\u00ebm duke filluar nga Advanced. Duke p\u00ebrfshir\u00eb dhe nd\u00ebrfaqen e re, e cila deri n\u00eb kalimin e plot\u00eb t\u00eb vCloud n\u00eb HTML5 (VMware premton ver\u00ebn e 2019) hapet n\u00eb nj\u00eb sked\u00eb t\u00eb re.<\/p>\n<p><b>Firewall.<\/b> Si objekte, p\u00ebr t\u00eb cilat do t\u00eb aplikohet rregullat, mund t\u00eb zgjidhen adresat IP, rrjetet, nd\u00ebrfaqet e kalimit dhe makinat virtuale. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX p\u00ebr m\u00eb t\u00eb vegjlit. Pjesa 1\" src=\"\/wp-content\/uploads\/2019\/03\/fa05b6c018bea8f968df340693d1eeab.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"VMware NSX p\u00ebr m\u00eb t\u00eb vegjlit. Pjesa 1\" src=\"\/wp-content\/uploads\/2019\/03\/3b5844efa756f46f47e3ebf2b876a790.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>DHCP.<\/b> P\u00ebrve\u00e7 konfigurimit t\u00eb diapazonit t\u00eb adresave IP q\u00eb do t\u00eb jepen automatikisht makinave virtuale t\u00eb k\u00ebtij rrjeti, n\u00eb NSX Edge jan\u00eb b\u00ebr\u00eb t\u00eb disponueshme funksionet <b>Binding<\/b> dhe <b>Relay<\/b>.<\/p>\n<p>N\u00eb tab <b>Bindings<\/b> mund t\u00eb lidhen adresat MAC t\u00eb makin\u00ebs virtuale me adres\u00ebn IP, n\u00ebse \u00ebsht\u00eb e nevojshme q\u00eb adresa IP t\u00eb mos ndryshoj\u00eb. E r\u00ebnd\u00ebsishme \u00ebsht\u00eb q\u00eb kjo adres\u00eb IP t\u00eb mos jet\u00eb brenda DHCP Pool.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX p\u00ebr m\u00eb t\u00eb vegjlit. Pjesa 1\" src=\"\/wp-content\/uploads\/2019\/03\/da013f13cd762936df173ff601590f8b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nN\u00eb tab <b>Relay<\/b> Konfigurohet p\u00ebrcjellja e mesazheve DHCP p\u00ebr server\u00ebt DHCP q\u00eb ndodhen p\u00ebrtej organisationit tuaj n\u00eb vCloud Director, p\u00ebrfshir\u00eb server\u00ebt DHCP t\u00eb infrastruktur\u00ebs fizike. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX p\u00ebr m\u00eb t\u00eb vegjlit. Pjesa 1\" src=\"\/wp-content\/uploads\/2019\/03\/c5b8762d49364db13cccd0c79f2692a8.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Routimi.<\/b> N\u00eb vShield Edge mund t\u00eb konfiguroni vet\u00ebm routing statik. Tani ka routing dinamik me mb\u00ebshtetje p\u00ebr protokollin OSPF dhe BGP. Po ashtu, jan\u00eb b\u00ebr\u00eb t\u00eb disponueshme konfigurime ECMP (Aktiv-aktiv), q\u00eb do t\u00eb thot\u00eb q\u00eb kalimi n\u00eb rast defekti mes router\u00ebve fizik\u00eb \u00ebsht\u00eb i mundur.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX p\u00ebr m\u00eb t\u00eb vegjlit. Pjesa 1\" src=\"\/wp-content\/uploads\/2019\/03\/cc4a6a30f8ab130766009ed250e2e514.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Konfigurimi i OSPF<\/i><\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX p\u00ebr m\u00eb t\u00eb vegjlit. Pjesa 1\" src=\"\/wp-content\/uploads\/2019\/03\/efdf3f78b3b7123aaca6b017c7507827.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Konfigurimi i BGP<\/i><\/p>\n<p>Nj\u00eb tjet\u00ebr ve\u00e7ori e re \u00ebsht\u00eb konfigurimi i kalimit t\u00eb rregullave nd\u00ebrmjet protokolleve t\u00eb ndryshme,<br \/>\nredistribuimi i rregullave (route redistribution). <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX p\u00ebr m\u00eb t\u00eb vegjlit. Pjesa 1\" src=\"\/wp-content\/uploads\/2019\/03\/c0a5c7b3055ba80b0c4fcda4c03e7d4c.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Balancues ngarkese L4\/L7.<\/b> Tani ka X-Forwarded-For p\u00ebr titullin HTTPs. Pa t\u00eb, gjith\u00e7ka ishte problematike. P\u00ebr shembull, po t\u00eb keni nj\u00eb faqe q\u00eb e balanconi. Pa kalimin e k\u00ebtij titulli, gjith\u00e7ka funksiononte, por n\u00eb statistik\u00ebn e serverit tuaj web shihnit jo IP-t\u00eb e vizitor\u00ebve, por IP-n\u00eb e balancuesit. Tani gjith\u00e7ka \u00ebsht\u00eb sakt\u00ebsuar. <\/p>\n<p>Po ashtu, n\u00eb sked\u00ebn Rregullat e Aplikacionit tani mund t\u00eb shtoni skriptet q\u00eb do t\u00eb kontrollojn\u00eb drejtp\u00ebrdrejt balancimin e trafikut.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX p\u00ebr m\u00eb t\u00eb vegjlit. Pjesa 1\" src=\"\/wp-content\/uploads\/2019\/03\/8f28ba0a4e870cca84a295af68f90c02.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>VPN. <\/b>P\u00ebrve\u00e7 IPSec VPN, NSX Edge mb\u00ebshtet:<\/p>\n<ul>\n<li>L2 VPN, q\u00eb lejon t\u00eb zgjerohet rrjeti midis vendeve gjeografikisht t\u00eb shp\u00ebrndara. Ky VPN \u00ebsht\u00eb i nevojsh\u00ebm, p\u00ebr shembull, q\u00eb kur transferoheni n\u00eb nj\u00eb vend tjet\u00ebr, makinat virtuale t\u00eb mbeten n\u00eb t\u00eb nj\u00ebjt\u00ebn subnet dhe t\u00eb ruajn\u00eb IP-n\u00eb.\n<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"VMware NSX p\u00ebr m\u00eb t\u00eb vegjlit. Pjesa 1\" src=\"\/wp-content\/uploads\/2019\/03\/688ce2e7d26f63ea5cf9c9525294388b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<ul>\n<li>SSL VPN Plus, i cili lejon p\u00ebrdoruesit t\u00eb lidhen n\u00eb distanc\u00eb me rrjetin korporativ. N\u00eb nivelin vSphere kjo funksiononte, por p\u00ebr vCloud Director kjo \u00ebsht\u00eb nj\u00eb novitet. \n<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"VMware NSX p\u00ebr m\u00eb t\u00eb vegjlit. Pjesa 1\" src=\"\/wp-content\/uploads\/2019\/03\/e624c7c61b1954e78a37fc512d121140.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Certifikatat SSL.<\/b> Tani n\u00eb NSX Edge mund t\u00eb instaloni certifikatat. Kjo again lidhet me pyetjen, kush do t\u00eb kishte nevoj\u00eb p\u00ebr nj\u00eb balancues pa certifikat\u00eb p\u00ebr https.<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX p\u00ebr m\u00eb t\u00eb vegjlit. Pjesa 1\" src=\"\/wp-content\/uploads\/2019\/03\/7dca479fbc19be397d3666980def43d3.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Grupet e objekteve (Grouping Objects).<\/b> N\u00eb k\u00ebt\u00eb sked\u00eb shtohen grupet e objekteve p\u00ebr t\u00eb cilat do t\u00eb zbatohet k\u00ebto ose ato rregulla t\u00eb nd\u00ebrveprimit rrjetor, p\u00ebr shembull rregullat e firewall-it. <\/p>\n<p>K\u00ebto objekte mund t\u00eb jen\u00eb adresat IP dhe MAC. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX p\u00ebr m\u00eb t\u00eb vegjlit. Pjesa 1\" src=\"\/wp-content\/uploads\/2019\/03\/8a28bdb82f8dd982c1edf9af99c5e6b7.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n\u00a0<br \/>\n<img decoding=\"async\" alt=\"VMware NSX p\u00ebr m\u00eb t\u00eb vegjlit. Pjesa 1\" src=\"\/wp-content\/uploads\/2019\/03\/d67a661168e8dbe0a457f55843637ec4.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nK\u00ebtu gjithashtu lista e sh\u00ebrbimeve (kombinimi protokoll-port) dhe aplikacioneve q\u00eb mund t\u00eb p\u00ebrdoren p\u00ebr hartimin e rregullave t\u00eb firewall-it. Sh\u00ebrbime dhe aplikacione t\u00eb reja mund t\u00eb shtohen vet\u00ebm nga administratori i portalit vCD. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX p\u00ebr m\u00eb t\u00eb vegjlit. Pjesa 1\" src=\"\/wp-content\/uploads\/2019\/03\/c282c7918004a9bab2084e4eadae1062.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n\u00a0<br \/>\n<img decoding=\"async\" alt=\"VMware NSX p\u00ebr m\u00eb t\u00eb vegjlit. Pjesa 1\" src=\"\/wp-content\/uploads\/2019\/03\/95fd637be49655d7467f49218b32751b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Statistika.<\/b> Statistika mbi lidhjet: trafiku q\u00eb kalon p\u00ebrmes portit, firewall-it dhe balancuesit. <\/p>\n<p>Statusi dhe statistika p\u00ebr \u00e7do tunel IPSEC VPN dhe L2 VPN. <\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX p\u00ebr m\u00eb t\u00eb vegjlit. Pjesa 1\" src=\"\/wp-content\/uploads\/2019\/03\/af05223598fb569f74a4e6aa0c8f5595.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Logimi.<\/b> N\u00eb skedarin Edge Settings mund t\u00eb caktoni serverin p\u00ebr regjistrimin e logeve. Regjistrimi punon p\u00ebr DNAT\/SNAT, DHCP, Firewall, rutimin, balancimin, IPsec VPN, SSL VPN Plus.<br \/>\n\u00a0<br \/>\nP\u00ebr secilin objekt\/sh\u00ebrbim jan\u00eb t\u00eb disponueshme llojet e m\u00ebposhtme t\u00eb njoftimeve: <\/p>\n<p> \u2014 Debug<br \/>\n \u2014 Alert<br \/>\n \u2014 Critical<br \/>\n \u2014 Error<br \/>\n \u2014 Warning<br \/>\n \u2014 Notice<br \/>\n \u2014 Info<\/p>\n<p><img decoding=\"async\" alt=\"VMware NSX p\u00ebr m\u00eb t\u00eb vegjlit. Pjesa 1\" src=\"\/wp-content\/uploads\/2019\/03\/ccd8345e8756004f1fbf2e2935ea5499.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Madh\u00ebsit\u00eb e NSX Edge <\/h3>\n<p>\nN\u00eb var\u00ebsi t\u00eb detyrave dhe volumit VMware <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.vmware.com\/en\/VMware-NSX-Data-Center-for-vSphere\/6.3\/com.vmware.nsx.install.doc\/GUID-311BBB9F-32CC-4633-9F91-26A39296381A.html\">k\u00ebshillon <\/a><\/noindex>do t\u00eb krijoni NSX Edge t\u00eb madh\u00ebsive t\u00eb m\u00ebposhtme:<\/p>\n<p><b>NSX Edge<br \/>\n(Kompakt)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(T\u00eb Madh)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(T\u00eb Madh\u00ebsis\u00eb \u00c7erek)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(T\u00eb Madh\u00ebsis\u00eb XL)<\/b><\/p>\n<p>vCPU<\/p>\n<p>1<\/p>\n<p>2<\/p>\n<p>4<\/p>\n<p>6<\/p>\n<p>Memorie<\/p>\n<p>512MB<\/p>\n<p>1GB<\/p>\n<p>1GB<\/p>\n<p>8GB<\/p>\n<p>Disk<\/p>\n<p>512MB<\/p>\n<p>512MB<\/p>\n<p>512MB<\/p>\n<p>4.5GB + 4GB<\/p>\n<p>Q\u00ebllimi<\/p>\n<p>Nj\u00eb<br \/>\naplikacion, test<br \/>\nqend\u00ebr t\u00eb dh\u00ebnash<\/p>\n<p>T\u00eb vogla <br \/>\napo mesatare<br \/>\nqend\u00ebr t\u00eb dh\u00ebnash<\/p>\n<p>Me ngarkes\u00eb<br \/>\nfirewall<\/p>\n<p>Balancimi<br \/>\ni ngarkes\u00ebs n\u00eb nivelin L7<\/p>\n<p>M\u00eb posht\u00eb, n\u00eb tabel\u00eb - metrikat operative t\u00eb sh\u00ebrbimeve rrjet n\u00eb var\u00ebsi t\u00eb madh\u00ebsis\u00eb s\u00eb NSX Edge.<\/p>\n<p><b>NSX Edge<br \/>\n(Kompakt)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(T\u00eb Madh)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(T\u00eb Madh\u00ebsis\u00eb \u00c7erek)<\/b><\/p>\n<p><b>NSX Edge<br \/>\n(T\u00eb Madh\u00ebsis\u00eb XL)<\/b><\/p>\n<p>Interface<\/p>\n<p>10<\/p>\n<p>10<\/p>\n<p>10<\/p>\n<p>10<\/p>\n<p>N\u00ebn Interface (Trunk)<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>Rregullat NAT<\/p>\n<p>2,048<\/p>\n<p>4,096<\/p>\n<p>4,096<\/p>\n<p>8,192<\/p>\n<p>Sh\u00ebnimet ARP<br \/>\nDerisa t\u00eb p\u00ebrmbushet<\/p>\n<p>1,024<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>Rregullat FW<\/p>\n<p>2000<\/p>\n<p>2000<\/p>\n<p>2000<\/p>\n<p>2000<\/p>\n<p>Performanca FW<\/p>\n<p>3Gbps<\/p>\n<p>9.7Gbps<\/p>\n<p>9.7Gbps<\/p>\n<p>9.7Gbps<\/p>\n<p>Pula DHCP<\/p>\n<p>20,000<\/p>\n<p>20,000<\/p>\n<p>20,000<\/p>\n<p>20,000<\/p>\n<p>ECMP Rrug\u00ebt<\/p>\n<p>8<\/p>\n<p>8<\/p>\n<p>8<\/p>\n<p>8<\/p>\n<p>Rrug\u00ebt Statike<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>2,048<\/p>\n<p>Pula LB<\/p>\n<p>64<\/p>\n<p>64<\/p>\n<p>64<\/p>\n<p>1,024<\/p>\n<p>Server\u00ebt Virtual\u00eb LB<\/p>\n<p>64<\/p>\n<p>64<\/p>\n<p>64<\/p>\n<p>1,024<\/p>\n<p>Serveri LB \/ Pula<\/p>\n<p>32<\/p>\n<p>32<\/p>\n<p>32<\/p>\n<p>32<\/p>\n<p>Kontrolluesit e Sh\u00ebndetit LB<\/p>\n<p>320<\/p>\n<p>320<\/p>\n<p>320<\/p>\n<p>3,072<\/p>\n<p>Rregullat e Aplikacionit LB<\/p>\n<p>4,096<\/p>\n<p>4,096<\/p>\n<p>4,096<\/p>\n<p>4,096<\/p>\n<p>KLIENT\u00cb L2VPN Hub te Spoke<\/p>\n<p>5<\/p>\n<p>5<\/p>\n<p>5<\/p>\n<p>5<\/p>\n<p>RRUG\u00cbT L2VPN p\u00ebr Klientin\/Serverin<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>200<\/p>\n<p>Tunel\u00ebt IPSec<\/p>\n<p>512<\/p>\n<p>1,600<\/p>\n<p>4,096<\/p>\n<p>6,000<\/p>\n<p>Tunel\u00ebt SSLVPN<\/p>\n<p>50<\/p>\n<p>100<\/p>\n<p>100<\/p>\n<p>1,000<\/p>\n<p>Rrjetet Private SSLVPN<\/p>\n<p>16<\/p>\n<p>16<\/p>\n<p>16<\/p>\n<p>16<\/p>\n<p>Sesionet e P\u00ebrshtatshme<\/p>\n<p>64,000<\/p>\n<p>1,000,000<\/p>\n<p>1,000,000<\/p>\n<p>1,000,000<\/p>\n<p>Sesionet\/P\u00ebr Sekond\u00eb<\/p>\n<p>8,000<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>Kalimi LB N\u00eb Proksi L7)<\/p>\n<p>2.2Gbps<\/p>\n<p>2.2Gbps<\/p>\n<p>3Gbps<\/p>\n<p>Kalimi LB N\u00eb Modin L4)<\/p>\n<p>6Gbps<\/p>\n<p>6Gbps<\/p>\n<p>6Gbps<\/p>\n<p>Koneksionet LB\/p\u00ebr s (Proksi L7)<\/p>\n<p>46,000<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>Koneksionet e P\u00ebrshtatshme LB (Proksi L7)<\/p>\n<p>8,000<\/p>\n<p>60,000<\/p>\n<p>60,000<\/p>\n<p>Koneksionet LB\/p\u00ebr s (Modin L4)<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>50,000<\/p>\n<p>Koneksionet e P\u00ebrshtatshme LB (Modin L4)<\/p>\n<p>600,000<\/p>\n<p>1,000,000<\/p>\n<p>1,000,000<\/p>\n<p>Rrug\u00ebt BGP<\/p>\n<p>20,000<\/p>\n<p>50,000<\/p>\n<p>250,000<\/p>\n<p>250,000<\/p>\n<p>Fqinj\u00ebt BGP<\/p>\n<p>10<\/p>\n<p>20<\/p>\n<p>100<\/p>\n<p>100<\/p>\n<p>Rrug\u00ebt BGP t\u00eb shp\u00ebrndara<\/p>\n<p>Pa Kufizime<\/p>\n<p>Pa Kufizime<\/p>\n<p>Pa Kufizime<\/p>\n<p>Pa Kufizime<\/p>\n<p>Rrug\u00ebt OSPF<\/p>\n<p>20,000<\/p>\n<p>50,000<\/p>\n<p>100,000<\/p>\n<p>100,000<\/p>\n<p>Sh\u00ebnimet OSPF LSA Maks 750 Tipi-1<\/p>\n<p>20,000<\/p>\n<p>50,000<\/p>\n<p>100,000<\/p>\n<p>100,000<\/p>\n<p>Adegancat OSPF<\/p>\n<p>10<\/p>\n<p>20<\/p>\n<p>40<\/p>\n<p>40<\/p>\n<p>Rrug\u00ebt OSPF t\u00eb shp\u00ebrndara<\/p>\n<p>2000<\/p>\n<p>5000<\/p>\n<p>20,000<\/p>\n<p>20,000<\/p>\n<p>Rrug\u00ebt Totale<\/p>\n<p>20,000<\/p>\n<p>50,000<\/p>\n<p>250,000<\/p>\n<p>250,000<\/p>\n<p>\u2192 <noindex><a rel=\"nofollow\" href=\"https:\/\/anthonyspiteri.net\/nsx-bytes-updated-nsx-edge-feature-and-performance-matrix-2\/\"><i>Burimi<\/i><\/a><\/noindex><\/p>\n<p>Nga tabela shihet se rekomandohet t\u00eb organizohet balancimi n\u00eb NSX Edge p\u00ebr skenar\u00ebt e prodhimit, duke filluar vet\u00ebm nga madh\u00ebsia e madhe. <\/p>\n<p>K\u00ebt\u00eb her\u00eb kam p\u00ebrfunduar. N\u00eb pjes\u00ebt e ardhshme do t'i kaloj me detaje t\u00eb gjitha konfigurimet e sh\u00ebrbimeve rrjet n\u00eb NSX Edge.<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dataline\/blog\/432980\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0415\u0441\u043b\u0438 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433 \u043b\u044e\u0431\u043e\u0433\u043e \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u0430, \u0442\u043e, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u043c\u044b \u0443\u0432\u0438\u0434\u0438\u043c \u043f\u0440\u043e\u0441\u0442\u044b\u043d\u044e \u0441 \u043a\u0443\u0447\u0435\u0439 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u043f\u043e\u0440\u0442\u043e\u0432, \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0438 \u043f\u043e\u0434\u0441\u0435\u0442\u0435\u0439. \u0422\u0430\u043a \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0442\u0441\u044f \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043a \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c. \u0421\u043d\u0430\u0447\u0430\u043b\u0430 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0435 \u0441\u0442\u0430\u0440\u0430\u044e\u0442\u0441\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u043f\u043e\u0440\u044f\u0434\u043e\u043a, \u043d\u043e \u043f\u043e\u0442\u043e\u043c \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442\u044c \u0438\u0437 \u043e\u0442\u0434\u0435\u043b\u0430 \u0432 \u043e\u0442\u0434\u0435\u043b, \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0440\u0430\u0437\u043c\u043d\u043e\u0436\u0430\u0442\u044c\u0441\u044f \u0438 \u043c\u0435\u043d\u044f\u0442\u044c \u0441\u0432\u043e\u0438 \u0440\u043e\u043b\u0438, \u043f\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u044b \u0434\u043b\u044f \u0440\u0430\u0437\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-30009","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47VMware NSX \u0434\u043b\u044f \u0441\u0430\u043c\u044b\u0445 \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u0438\u0445. \u0427\u0430\u0441\u0442\u044c 1 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:33:10+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:33:10+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47VMware NSX p\u00ebr t\u00eb vegjlit. Pjesa 1 | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47VMware NSX \u0434\u043b\u044f \u0441\u0430\u043c\u044b\u0445 \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u0438\u0445. \u0427\u0430\u0441\u0442\u044c 1 | ProHoster","og:url":"https:\/\/prohoster.info\/sq\/blog\/vmware-nsx-dlya-samyh-malenkih-chast-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:33:10+00:00","article:modified_time":"2019-10-31T18:33:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30009","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-20 23:24:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:44:38","updated":"2026-01-20 23:24:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/30009","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=30009"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/30009\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=30009"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=30009"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=30009"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}