Parallel to NSX Edge Using VXLAN Overlays with Avi Vantage for both North-South and East-West Load Balancing Using Transit-Net

Transcription

1 Page 1 of 11

2 Parallel to NSX Edge Using VXLAN Overlays with Avi Vantage for both North-South and East-West Load Balancing Using Transit-Net view online In this topology, the Avi SE is installed parallel to the NSX Edge. Physically, the Avi SE gets deployed on the ESXi on the edge rack. The exact ESXi hosts or cluster on which the SE needs to be placed can be configured in SE group properties on Avi Vantage. This topology can work with both VLAN (Layer2) and VXLAN (Layer3 routed overlay) networks. Logical and Physical View Logically, the Avi SE(s) is(are) installed parallel to the NSX Edge. The SEs may be deployed in elastic HA (active/active or N+M buffer) or legacy HA (active/standby) mode. The SE connects to the External network (non-encapsulated) and Transit-Net VXLAN (encapsulated). The Web-VIP is on the External network, while the App-VIP is on the transit network. Traffic is SNATed by the SE. Default gateway for web, application and DBMS servers is DLR. Logical View, Parallel to NSX Edge Using VXLAN Overlays with Avi Vantage for both N-S and E-W using Transit-Net Following the recommended design (refer to VMware? NSX for vsphere Network Virtualization Design Guide ver 3.0), the recommendation is to configure the SE group properties to physically deploy the SEs in the edge racks where the external network is available. Copyright 2018 Avi Networks, Inc. Page 2 of 11

3 Physical View, Parallel to NSX Edge Using VXLAN Overlays with Avi for both N/S and E/W Load Balancing using Transit-Net Avi Configuration To deploy SEs for this topology, configure Avi as follows: Cloud Configuration: Configure the Cloud for vcenter orchestrator with write access. On the Datacenter tab of the configuration, select the?prefer Static Routes vs Directly Connected Network? checkbox. Copyright 2018 Avi Networks, Inc. Page 3 of 11

4 Static route configuration: Navigate to Infrastructure? Routing? Static Route Add a new static route to reach the server networks (Web, App and DB) through the DLR. SE Group configuration: Navigate to Infrastructure? Service Engine Group and edit the Default-Group. On Advanced tab, set?host Scope Service Engine within? to Cluster. Copyright 2018 Avi Networks, Inc. Page 4 of 11

5 Under Cluster select?include? and select the edge cluster to deploy the SEs. Traffic Flows North-South Traffic Flow Logical traffic flows are (red arrows): Client? Web VIP on Avi SE Avi SE? Web server via DLR Copyright 2018 Avi Networks, Inc. Page 5 of 11

6 Logical View, North-South Traffic Flow (red arrows) Physical traffic flows are: Client on External network? ESXi hosting the SE? SE VM SE VM? VXLAN on ESXi kernel hosting the SE? ESXi kernel hosting the Web VM Note: DLR is not a step since it is distributed and done in the ESXi hosting the SE. ESXi kernel hosting the web VM? web VM Copyright 2018 Avi Networks, Inc. Page 6 of 11

7 Physical View, North-South Traffic Flow East-West Traffic Flow Logical traffic flows are (purple arrows): Web VM? app VIP on Avi SE via DLR Avi SE? app server via DLR Copyright 2018 Avi Networks, Inc. Page 7 of 11

8 Logical View, East-West Traffic Flow (purple arrows) Physical traffic flows are: Web VM? ESXi kernel hosting the Web VM? ESXi kernel hosting the SE Note: DLR is not a step since it is distributed and done in the ESXi kernel hosting the Web VM. ESXi kernel hosting the SE? SE VM? ESXi kernel hosting the app VM. Note: DLR is not a step since it is distributed and done in the ESXi kernel hosting the SE. ESXi hosting the app VM? the app VM Copyright 2018 Avi Networks, Inc. Page 8 of 11

9 Physical View, East-West Traffic Flow South-North Traffic Flow Logical traffic flows originating from the servers are: Server VM? DLR? Edge? External network Copyright 2018 Avi Networks, Inc. Page 9 of 11

10 Logical View, South-North Traffic Flow Physical traffic flows originating from the servers are: ESXi hosting the web/app/dbms server? ESXi hosting the Edge? External Note: DLR is not a step since it is distributed and done here in ESXi hosting the web/app/dbms kernel. Copyright 2018 Avi Networks, Inc. Page 10 of 11

11 Physical View, South-North Traffic Flow VIP requirements Web-VIP requires SNAT App-VIP requires SNAT Copyright 2018 Avi Networks, Inc. Page 11 of 11