A couple of weeks ago when I was helping a colleague out with a script to count the number of DFW rules on a host ( https://www.sneaku.com/2020/11/18/monitoring-nsx-fw-rules-per-host/ ), I needed to see what other (if any) configuration maximums had changed between 2 releases of NSX-T. If you take a look […]
Today I was asked for some help in figuring out the number of NSX-T Distributed Firewall rules configured for all filters on a given ESXi host. Why do we need to figure out this value? If you take a look at the configurations maximums page at configmax.vmware.com, you’ll see one […]
When working with a customer recently, there was a question raised about how to calculate the actual number of NSX-v distributed firewall rules configured for a given VM on the dataplane of an ESXi host. Whilst the short answer was to jump onto the console of the hypervisor or SSH […]
One of the things that makes NSX-T such a flexible platform when it comes to creating security policy is the ability to group membership defined by dynamic criteria, or based on objects such as a logical segment. Once a group has been defined in NSX-T based on dynamic criteria, its […]
Over the past few years of working with NSX vSphere, one of the more frustrating things that would happen is that you would try to delete an object of some description (IP Set, Security Group, Service etc) and you would get the annoying message in the UI which says the […]
I was recently asked by a customer who is running NSX vSphere (NSX-v) and Log Insight, is there a way they can export data from Log Insight that will give them the unique source/destination/protocol/destinationPort from the DFW logs for a given ruleId over a given time period. This exported data […]
Seeing as though I am always building different Ubuntu virtual machines to perform various python actions on (often on different customer sites), I find myself setting up the same things over and over again. My notes for this process are normally scattered between Notepad/TextEdit and Evernote, so its about time […]
When starting out with the NSX-v API, you will quickly learn that there are times where you are required to reference an object, like when you want to add a member to a security group, you are required to know the object ID of the object you want to add as […]
Following on from my last post about the NSXRAMLCLIENT, I decided to setup an Ubuntu machine dedicated to being able to run the NSXRAMLCLIENT in my home lab. Using my own instructions that I had written previously to get it up and running on my OSX 10.10.5 machine, I came across a […]
Up until now, my programmatic interactions with the NSX API have all been hacked together based on the NSX API Guide, due to the lack of a specific NSX API scripting interface. For typical vSphere scripting, there has been PowerCli and also pyvmomi and I am sure a few […]
