North/South Routing & Firewalling

REST API

Architected by: Hany Michaelwww.hypervizor.com

© 2013 Hypervizor.com. All rights reserved.

NSX Manager

NSX Controller

NSX Edge [Passive]

VIRTUAL MACHINE

VIRTUAL MACHINE

NSX Controller VIRTUAL MACHINE

NSX Controller VIRTUAL MACHINE

vCenter ServerVIRTUAL MACHINE

Man

agem

ent

Con

trol

Pla

neD

ata

Plan

e

ESXi Host (1)

UW Agent Security Routing VXLAN

ESXi Host (m)

VXLAN Routing Security UW Agent

NSX

Con

trol

ler C

lust

er

VIRTUAL MACHINE

REST APIREST API

Partner Extensibility

Scale out for HA & LB

vCloud Automation C.VIRTUAL MACHINE

vSphereAPI

vSphereAPI

IDS/IPS, ADC, DLP, AV ..etc

Scal

e U

P

SSL

Cont

rol P

lane

Pro

toco

l

(enc

rypt

ed)

Router/SwitchPhysical Device

Physical Device

Physical Host Physical Host

Physical Network

VIRTUAL WIRE

Cloud/Infra Team NOC Team

SymanticCitrix

McAfeeRapid7

TrendMicroArista

F5

(e.g. Cisco, HP)

VPN LB

NSX Distributed Data PlaneKernel Services

RouterSwitch Firewall

Module Module Module Module Module Module

Runtime mapping:VIN,VTEP,IP,MAC

Compact

Large

X-Large

Unicast & Multicast

NSX Edge [Active]VIRTUAL MACHINE

NSX Router [Passive]VIRTUAL MACHINE

NSX Router [Active]VIRTUAL MACHINE

NSX Edges

FWNATDHCPRouting

L3 Net L2 Net

Clu

ster

Clu

ster

VXLAN to VLANL2 Bridging

Configuration Control and Policy Enforcement.

VM VM

VM VMSecurity Zone (1)

Security Zone (n)

East/WestRouting, Switching & Firewalling

Bridging Routing

®

To ESXi Hosts

Mes

sage

B

us

Quad Large

vCenter Log Insight VIRTUAL MACHINE

Health Monitoring vCenter Operations

VIRTUAL MACHINE

vCloud DirectorVIRTUAL MACHINE syslog