Introduction
Enterprises are migrating to Software Defined Data Centers (SDDC) to leverage the benefits of Software-Defined Networking (SDN). One of the main challenges with SDDC is to gain visibility into the traffic between virtualized workloads, especially the traffic between the workloads residing on the same physical server, to ensure that the same security controls are deployed uniformly across both physical and virtual workloads. Gigamon's certified Visibility Platform for VMware NSX-T provides the much-needed visibility, and also lets organizations leverage the existing security tools stack resulting in saving cost, reduce complexity and administrative overhead. Gigamon's solution also supports cluster-based and host-based deployment modes. The following Gigamon Validated Design (GVD) illustrates deploying the solution.
Visibility for VMware NSX-T Data Center
Gigamon leverages NSX Service Insertion to provide visibility into the traffic between the virtualized workloads. As illustrated below, after configuring NSX Manager in the GigaVUE-FM, the Gigamon Traffic Visibility Service registers as a partner service. The Traffic Visibility Service is then installed on the NSX compute clusters through the vCenter user-interface that deploys V Series nodes for traffic acquisition, following which security policies are created to forward copies of the network traffic to the Gigamon Visibility Fabric.
Figure 1. Logical topology illustrating integrating security tools such as IDS, Anti-malware, APM using Gigamon Visibility and Analytics Fabric.
With GigaVUE-FM 5.10.01 release, we can deploy V Series as the Gigamon's service VM in lieu of GigaVUE-VM, where V Series solution is more capable in traffic transformation applications such as slicing, masking and de-duplication right within the V Series node rather than relying on GigaVUE H Series appliances. This greatly optimizes the traffic overhaul across sites and network bandwidth utilization when compared to GVM. Similar to GVM solution V Series nodes acquire traffic from different transport nodes but with the GigaSMART capability processes the traffic before sending to security and analytic tools for inspection.This GVD focuses on providing visibility in an ESXI cluster with two or more hosts in a clustered environment.
To learn more about this solution, read complete details on the Gigamon Community: Deploying-GigaVUE-Cloud-Suite-for-VMware-NSX-T-2-5-1-using-V-Series-5-10-01.
