A couple of weeks ago when I was helping a colleague out with a script to count the number of DFW rules on a host ( https://www.sneaku.com/2020/11/18/monitoring-nsx-fw-rules-per-host/ ), I needed to see what other (if any) configuration maximums had changed between 2 releases of NSX-T. If you take a look […]
Today I was asked for some help in figuring out the number of NSX-T Distributed Firewall rules configured for all filters on a given ESXi host. Why do we need to figure out this value? If you take a look at the configurations maximums page at configmax.vmware.com, you’ll see one […]
As part of the NSX-T 3.0 release, an API only feature that I had discussed in a previous post (https://www.sneaku.com/2020/03/02/how-to-sync-a-dynamic-nsx-t-group-to-an-external-system/), now looks like it has had the experimental flag removed, which means it is now a supported API. This is great news for those who were looking at this set […]
When working with a customer recently, there was a question raised about how to calculate the actual number of NSX-v distributed firewall rules configured for a given VM on the dataplane of an ESXi host. Whilst the short answer was to jump onto the console of the hypervisor or SSH […]
Recevied an interesting question today about whether a N-VDS supports the “Notify Switches” feature that is available in regular VDS. And as I didn’t know the answer to this off the top of my head, it was time to do some digging. First we needed an environment where I had […]
If you’ve heard me speak at VMworld on NSX Distributed Firewall best practises, you would have heard me speak about the importance of using the Applied To option when configuring DFW rules. One of the metrics using the Applied To option influences is the total number of rules configured per […]
When working with a colleague recently on an NSX-T 3.0 environment that utilises VDS 7.0 rather than N-VDS, we came across something which initially stumped me. If you were to try and create 2 Distributed Port Groups with the same name on the same vCenter the following error is displayed, […]
This is one of those pesky errors that I keep stumbling across, and every time It pops up, I forget how to fix it, so I am going to document it once and for all so that I can at easily find the fix for it. When adding a ESXi […]
One of the things that makes NSX-T such a flexible platform when it comes to creating security policy is the ability to group membership defined by dynamic criteria, or based on objects such as a logical segment. Once a group has been defined in NSX-T based on dynamic criteria, its […]
