惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Spread Privacy
Spread Privacy
P
Palo Alto Networks Blog
P
Proofpoint News Feed
AI
AI
Help Net Security
Help Net Security
S
Securelist
T
Troy Hunt's Blog
K
KPMG report finds enterprise disconnect between AI and its ROI | CIO
C
Cisco Blogs
Scott Helme
Scott Helme
Hacker News - Newest:
Hacker News - Newest: "LLM"
Vercel News
Vercel News
Exploit-DB.com RSS Feed
Exploit-DB.com RSS Feed
CTFtime.org: upcoming CTF events
CTFtime.org: upcoming CTF events
B
Blog
GbyAI
GbyAI
Recent Commits to openclaw:main
Recent Commits to openclaw:main
D
Darknet – Hacking Tools, Hacker News & Cyber Security
P
Proofpoint News Feed
S
Security Affairs
Cisco Talos Blog
Cisco Talos Blog
AWS News Blog
AWS News Blog
T
Tenable Blog
H
Help Net Security
NISL@THU
NISL@THU
F
Fortinet All Blogs
博客园_首页
G
GRAHAM CLULEY
L
LINUX DO - 最新话题
P
Privacy International News Feed
G
Google Developers Blog
博客园 - Franky
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
Security Archives - TechRepublic
Security Archives - TechRepublic
The Register - Security
The Register - Security
L
LangChain Blog
aimingoo的专栏
aimingoo的专栏
T
Tor Project blog
P
Privacy & Cybersecurity Law Blog
量子位
C
Cyber Attacks, Cyber Crime and Cyber Security
Forbes - Security
Forbes - Security
S
Secure Thoughts
Simon Willison's Weblog
Simon Willison's Weblog
D
Docker
Recorded Future
Recorded Future
博客园 - 三生石上(FineUI控件)
L
Lohrmann on Cybersecurity
T
Tailwind CSS Blog

Network and Security Virtualization

Lateral Security for the Private Cloud – Leveraging the Power of Seamless Integration Tackling the 5Cs of Enterprise Security with the Advent of AI – Spotlight on Cloud and Automation Efficiency Next-Level Lateral Security for Your Private Cloud Cybersecurity, Cloud and AI: Top-of-mind themes heading into 2024 Optimizing NSX Performance Based on Workload and ROI Generative AI Meets Cybersecurity: Use Cases for Lateral Security and the SOC Migration Coordinator – Selecting the migration mode VPC: The Secure Bridge Between Application and Infrastructure Teams NSX V2T Layer 2 Bridging with NSX-T Projects
VMware NSX Bare Metal Edge Performance
Jerome Catrouillet, Plamen Dragiev, Eve Freed · 2023-09-18 · via Network and Security Virtualization

Every cloud environment is rooted in virtualization and is defined by three pillars: network virtualization, server virtualization, and storage virtualization. The VMware NSX Edge Node plays an essential role in virtualizing networking and security services. The throughput supported by the NSX Edge Node is critical for the entire ecosystem and network services running on it.

In this blog, we outline NSX Bare Metal Edge performance for customers implementing Bare Metal Edge for their virtual networking infrastructure.  Using NSX Bare Metal Edge (with no services running) with 4x100Gbps interfaces, RFC2544 performance tests yielded a North-South throughput of up to 388 Gbps (97%-line rate) and up to 3 Tbps for the entire cluster (when using 8 Edge Nodes), providing significant throughput for North-South traffic in the virtual network infrastructure.

Please refer to VMware NSX Bare Metal Edge Performance white paper for more information on test and settings used to achieve these results.

Key Hardware Considerations for NSX Bare Metal Edge

The choice of hardware for the NSX Bare Metal Edge is driven by bandwidth requirements and the throughput you want to achieve. Key considerations include:

  • Physical NIC: Consider the bandwidth, connectivity, and resiliency requirements for the Bare Metal Edge.
  • CPU: NSX Bare Metal Edge supports a broad list of processors from Intel and AMD. The major consideration for the CPU is the number of cores which can impact the throughput the NSX Edge can support.
  • Memory: Selecting memory compatible with the CPU and higher transfer speed (MT/s or mega transfers per second) will influence the maximum throughput.
  • PCI slots: When selecting servers, select servers from a generation that supports the PCI-E generation of NIC cards.
  • Storage: Allocate appropriate disk space for your Bare Metal Edge. Local storage on the Bare Metal Edge is preferred. Also, the storage controller should be supported by the Bare Metal Edge Ubuntu software.

Test case scenario and topology

The performance tests were executed with a Bare Metal Edge in the following scenario:

1. Logical topology:

2. Test Scenario:

3. Achieved Throughput: 

4. Hardware specifications used for the above test:

NSX Version: 4.0.1.1.0.20598726

BM Edge version: 4.0.1.1.0.20598726

Ring-Buffer size is increased to 4096 for Tx and RX/Hyperthreading is disabled by default/Flow control is disabled.

For performance tuning, consider adjusting ring buffer size, disabling flow control and hyper threading, and enabling flow cache.  More information can be found in the linked document.

Conclusion and analysis:

This blog post outlines some key hardware considerations for maximizing the performance of the NSX Bare Metal Edge, especially for low latency and high throughput environments.

The RFC tests produced the following results:

  • A single Bare Metal Edge node can achieve speeds of up to 388Gbps for North-South traffic
  • An NSX Bare Metal Edge cluster can achieve up to 3Tbps for North-South traffic

For detailed study please refer to VMware NSX Bare Metal Edge Performance white paper .

Additional Resources: