Securing K8S Pods using Antrea with NSX – Part 1

It’s been a long time since I write a blog due to different projects I am working on. One of the interesting one is how can we more secure our containerized applications. There is K8S network policies and a lot of different CNIs to achieve same but is there a way to manage security from a single UI? Can I manage security policies on different virtual machines along with K8S pods running on different platforms all from a single place? Answer is yes by harnessing the power of Antrea with NSX. VMware introduces support for Antrea integration with NSX-T 3.2 and is adding more features with different release. In this blog series, I will focus on how to build a K8S platform from scratch, Install Antrea on a vanilla K8S (no managed platform) and integrate same with NSX. Later on, will see how can we utilize NSX to provide more security to our applications. So, buckle your seatbelts as we head on this roller coaster ride.

Continue reading “Securing K8S Pods using Antrea with NSX – Part 1”

Deploy VCF 4.5 Lab on AMD Ryzen – Part 3

In last two parts, we had seen how to setup base VMs and Infrastructure to prepare for VCF Bringup. In 2nd part, we had gone over SDDC Bringup process and issues I had encountered during deployment. In this last part, we will cover how to deploy Edge cluster in SDDC Manager to be used for either AVN, Workload Management or Custom. This is where it gets tricky as Edge VMs get stuck in Registration Pending state due to AMD Ryzen CPU, so we will see how to get past this.

Link to Other two parts in this series –

Let’s start deploying VCF 4.5 on our lab environment.

Continue reading “Deploy VCF 4.5 Lab on AMD Ryzen – Part 3”

Deploy VCF 4.5 Lab on AMD Ryzen – Part 1

This is a very delayed post which was roaming in my head for a long time. I always wanted to deploy a fully functional lab for VCF on my home system to play around with API and automation. There is execellent tool VLC (VCF Lab Constructor) which will help you prepare base infrastructure and deploy VCF to play around with. But in my case, it is bit different as I am using VMware Workstation and wanted to experience bring up process. In this multi part series, I will cover how to deploy VCF and then Edge Cluster to have a functional Consolidated Management Domain.

Continue reading “Deploy VCF 4.5 Lab on AMD Ryzen – Part 1”

Easing the transition to VMware NSX-T [Deep…

Interesting technical webinar on migration from NSX-v to NSX-T @vmware

Easing the transition to VMware NSX-T [Deep…

In this intermediate technical series, we’ll take a close look at some of the new use cases for VMware NSX-T, including cloud-scale networking, intrinsic security, and full-stack networking for modern applications.


VMware Social Media Advocacy

NSX Edge ‘Force Sync’

Its been a while, since i posted a troubleshooting article. But, recently I ran into an issue which was quite interesting and would like to share with you all.

Issue

There are two sites. Let’s name them Site-1 and Site-2. Site-1 and Site-2 are configured in Cross Site NSX, with universal switch and universal DLR configured. Site-1 has its own universal DLR-1 and Site-2 have its own universal DLR-2. Now, due to some issue, VXLAN in Site-1 stopped working. This issue is for some other day. But VXLAN was working fine in Site-2 with no issues. So, to restore connectivity we moved LIF with gateway 192.168.74.1 (virtual wire) from DLR-1 to DLR-2. And gateway starts to ping absolutely fine thanks to dynamic routing in place. But, when we moved VM (IP – 192.168.74.2) to Site-2 and attaches them to LIF, they are unreachable. So, what went wrong.

Continue reading “NSX Edge ‘Force Sync’”

Removing Stuck NSX Controller using API Calls

So, its been a while i have written anything. Got so many projects in line waiting for their turn. So, blogs will be much more regular from now on, now that life is sorted out and back on old track we are. Now, without wasting any time let’s get started with our first blog of season.

Continue reading “Removing Stuck NSX Controller using API Calls”

Configure Active/Active North-South Cross vCenter NSX

Hello Everyone.

Two cups of Espresso in me and a late night blog. Writing while working just to keep me awake.

So without much further wait, i had a scenario similar to below design:

Continue reading “Configure Active/Active North-South Cross vCenter NSX”