惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

量子位
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
F
Fortinet All Blogs
博客园 - 聂微东
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
Hugging Face - Blog
Hugging Face - Blog
V
Visual Studio Blog
小众软件
小众软件
有赞技术团队
有赞技术团队
雷峰网
雷峰网
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
AWS News Blog
AWS News Blog
C
Cisco Blogs
美团技术团队
T
Threat Research - Cisco Blogs
C
CERT Recently Published Vulnerability Notes
人人都是产品经理
人人都是产品经理
宝玉的分享
宝玉的分享
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
酷 壳 – CoolShell
酷 壳 – CoolShell
Stack Overflow Blog
Stack Overflow Blog
W
WeLiveSecurity
D
DataBreaches.Net
博客园 - 司徒正美
Blog — PlanetScale
Blog — PlanetScale
IT之家
IT之家
云风的 BLOG
云风的 BLOG
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
Simon Willison's Weblog
Simon Willison's Weblog
Google DeepMind News
Google DeepMind News
T
The Blog of Author Tim Ferriss
Know Your Adversary
Know Your Adversary
NISL@THU
NISL@THU
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
The Cloudflare Blog
Vercel News
Vercel News
月光博客
月光博客
T
Tailwind CSS Blog
H
Help Net Security
aimingoo的专栏
aimingoo的专栏
P
Proofpoint News Feed
Application and Cybersecurity Blog
Application and Cybersecurity Blog
Spread Privacy
Spread Privacy
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
Cisco Talos Blog
Cisco Talos Blog
Microsoft Security Blog
Microsoft Security Blog
V
V2EX
WordPress大学
WordPress大学
Cyberwarzone
Cyberwarzone
Recent Announcements
Recent Announcements

Network and Security Virtualization

Lateral Security for the Private Cloud – Leveraging the Power of Seamless Integration Tackling the 5Cs of Enterprise Security with the Advent of AI – Spotlight on Cloud and Automation Efficiency Next-Level Lateral Security for Your Private Cloud Cybersecurity, Cloud and AI: Top-of-mind themes heading into 2024 Optimizing NSX Performance Based on Workload and ROI Generative AI Meets Cybersecurity: Use Cases for Lateral Security and the SOC Migration Coordinator – Selecting the migration mode VPC: The Secure Bridge Between Application and Infrastructure Teams NSX V2T Layer 2 Bridging with NSX-T Projects
VMware NSX Bare Metal Edge Performance
Jerome Catrouillet, Plamen Dragiev, Eve Freed · 2023-09-18 · via Network and Security Virtualization

Every cloud environment is rooted in virtualization and is defined by three pillars: network virtualization, server virtualization, and storage virtualization. The VMware NSX Edge Node plays an essential role in virtualizing networking and security services. The throughput supported by the NSX Edge Node is critical for the entire ecosystem and network services running on it.

In this blog, we outline NSX Bare Metal Edge performance for customers implementing Bare Metal Edge for their virtual networking infrastructure.  Using NSX Bare Metal Edge (with no services running) with 4x100Gbps interfaces, RFC2544 performance tests yielded a North-South throughput of up to 388 Gbps (97%-line rate) and up to 3 Tbps for the entire cluster (when using 8 Edge Nodes), providing significant throughput for North-South traffic in the virtual network infrastructure.

Please refer to VMware NSX Bare Metal Edge Performance white paper for more information on test and settings used to achieve these results.

Key Hardware Considerations for NSX Bare Metal Edge

The choice of hardware for the NSX Bare Metal Edge is driven by bandwidth requirements and the throughput you want to achieve. Key considerations include:

  • Physical NIC: Consider the bandwidth, connectivity, and resiliency requirements for the Bare Metal Edge.
  • CPU: NSX Bare Metal Edge supports a broad list of processors from Intel and AMD. The major consideration for the CPU is the number of cores which can impact the throughput the NSX Edge can support.
  • Memory: Selecting memory compatible with the CPU and higher transfer speed (MT/s or mega transfers per second) will influence the maximum throughput.
  • PCI slots: When selecting servers, select servers from a generation that supports the PCI-E generation of NIC cards.
  • Storage: Allocate appropriate disk space for your Bare Metal Edge. Local storage on the Bare Metal Edge is preferred. Also, the storage controller should be supported by the Bare Metal Edge Ubuntu software.

Test case scenario and topology

The performance tests were executed with a Bare Metal Edge in the following scenario:

1. Logical topology:

2. Test Scenario:

3. Achieved Throughput: 

4. Hardware specifications used for the above test:

NSX Version: 4.0.1.1.0.20598726

BM Edge version: 4.0.1.1.0.20598726

Ring-Buffer size is increased to 4096 for Tx and RX/Hyperthreading is disabled by default/Flow control is disabled.

For performance tuning, consider adjusting ring buffer size, disabling flow control and hyper threading, and enabling flow cache.  More information can be found in the linked document.

Conclusion and analysis:

This blog post outlines some key hardware considerations for maximizing the performance of the NSX Bare Metal Edge, especially for low latency and high throughput environments.

The RFC tests produced the following results:

  • A single Bare Metal Edge node can achieve speeds of up to 388Gbps for North-South traffic
  • An NSX Bare Metal Edge cluster can achieve up to 3Tbps for North-South traffic

For detailed study please refer to VMware NSX Bare Metal Edge Performance white paper .

Additional Resources: