NSX-ALB Deployment and Integration With NSX-T
NSX-ALB Deployment and Integration With NSX-T
NSX-ALB Deployment and Integration With NSX-T
NSX-T
In this blog I will show the steps needed to integrate NSX Advanced Load Balancer
(NSX-ALB) previously known as Avi with NSX-T Data Center.
NSX-ALB is a multi-cloud Software Defined Load Balancer. It includes great feature such
as analytics, GSLB, WAF, and Kubernetes Integration.
In This blog i will show how deploy and integrate NSX-ALB with NSX-T in a vSphere
environment.
NSX-ALB Consists of two main components, the Controller and the Service Engines (SE).
We only need to deploy the Controller, while the SEs will be deployed automatically.
The NSX-ALB (Avi) Controller does not handle any data plane traffic.
Assumptions:
1. vSphere is deployed including vCenter
2. NSX-T Manager is deployed, integrated with vCenter, hosts are prepared, NSX-T edge
and a T0-GW are deployed, and the T0-GW is paired with the physical Network using
BGP.
Then we need to deploy NSX-ALB Controller OVA on vSphere, this a standard OVA
deployment so i am not showing those steps here.
Go to the IP Address as configured in the OVA Setup, you should get below page. we
need to create a new password.
Configure vCenter IP address and Credentials. For the SDN Configuration, please
choose None.
Don’t pick VMware NSX, we will configure that later
Pick your vSphere Data Center
Select the Management Network. Below Management Network and IP Address Pool will
not be used with NSX-T Integration, but i am configuring them in case we need to add a
SE outside of NSX-T scope.
No Multiple Tenants
Because i am using NSX-T for Network and Security Virtualization. i am going to add it
as a Cloud to simplify operations, but first i will create some objects in NSX-T to attach
the NSX-ALB Service Engines (SE) automatically and achieve below topology. i am using
a dedicated Segment for the SEs Mgmt and another one for the Data.
For more design information https://avinetworks.com/docs/20.1/nsx-t-design-guide/
First lets create two T1-Gateways, one for NSX-ALB SE Mgmt, and another one for Data
which will be used for the Load Balancing VIPs.
Now lets create two L2-Segments, one for NSX-ALB SE Mgmt, and another one for Data,
and attach them to the respective T1-GWs
For NSX-ALB-Mgmt, we need to configure the subnet and add a static pool. we could
use NSX-T DHCP as an option too.
for NSX-ALB-Data, we should do the same
Now I will create an IPAM Profile to assign the Virtual Services IP Addresses
Automatically
Templates>>Profiles>>IPAM/DNS Profile
Select the IPAM Profile in the NSX-T Cloud
Infrastructure >>Cloud>>NSX-T Cloud
Now lets add a Default Route for the Data Segment so the SEs could route traffic to any
workloads even if they are not on the same Segment. The default Route will point to the
NSX-ALB-Data T1-GW Interface
Infrastructure>>Routing>>Create (pick NSX-T Cloud in the top)
NSX-ALB will deploy a Service Engine Automatically in vCenter. we should give it some
time for this task to finish.
And that conclude the NSX-ALB Deployment and integration with NSX-T.
In this blog I showed how to deploy NSX-ALB and integrate with NSX-T. by doing that
we can automate the deployment and scaling of NSX-ALB SEs which simplify the
operations and traffic routing. In my next blog I will show how to extend this
architecture to Kubernetes to provide Ingress to Containers workloads.
Thank you for reading!