Try our new research platform with insights from 80,000+ expert users
it_user746691 - PeerSpot reviewer
Senior Solutions Architect at SMP
Video Review
Vendor
Facilitates setting security policies right at the interfacing virtual machine, which we couldn't do in the past
Pros and Cons
  • "It does have capabilities of micro-segmenting a network, being able to create smaller segments of various types of applications separated by various tiers."
  • "I think that one of the more important things to see better integrated into the NSX product would be an IDS/IPS type solution."

What is most valuable?

NSX is extremely invaluable from the standpoint of security.

It does have capabilities of micro-segmenting a network, being able to create smaller segments of various types of applications separated by various tiers.

However, what it's mostly important for is being able to actually set security policies right at the interfacing virtual machine, which we haven't had the ability to do in the past.

What needs improvement?

So the third-party marketplace is growing and growing for this product and being able to redirect traffic to them, to the third-party products in order to take advantage of those additional features, is wonderful.

I think that one of the more important things to see better integrated into the NSX product would be an IDS/IPS type solution, which right now we're handing off to a third-party, which sometimes doubles the cost of the product. However, there are new products that we're learning about over the course of this week like AppDefense, that may actually help provide some additional capabilities in terms of that IDS/IPS type structure.

What do I think about the stability of the solution?

There are elements that have been added to it over the years, but its history goes way back with vShield, and has been included in products like vCloud Director, etc. To be honest with you, I've deployed it over the past five to six years and I've had nothing but great success with it.

How are customer service and support?

From a tech support standpoint, as with most VMware text support, the people that we get a hold of on the phone are generally very knowledgeable of the product and have the ability to actually help us through whatever issue we have. We try not to spin our wheels too much. We do try to dig in as much as we can, but as soon as we understand we've gone beyond our limitations we get them on the phone and we've never had an issue trying to get the support we need.

Buyer's Guide
VMware NSX
November 2024
Learn what your peers think about VMware NSX. Get advice and tips from experienced pros sharing their opinions. Updated: November 2024.
824,053 professionals have used our research since 2012.

How was the initial setup?

It's a complex product so setup is essentially as easy as the person whose knowledge is being used to install it. There are various elements to it. It can be installed in modules - in a modular fashion. You don't have to install everything right away. And, unfortunately, with this particular product, when you read through all the marketing materials it sounds like it has to be installed completely when, in fact, you can start out with only the pieces you need and add what you need - the other pieces - later as needed.

What other advice do I have?

I always have a hard time giving a ten to anything. I think everything needs improvement. So that's why I would give it a solid eight out of 10.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
reviewer1299408 - PeerSpot reviewer
Sr. Technical Specialist at a retailer with 10,001+ employees
Real User
Good security, dynamic routing features, and technical support
Pros and Cons
  • "The most valuable features are security and dynamic routing."
  • "I would like to see automation capabilities in the deployment process."

What is our primary use case?

We use this solution to build our VMware platform.

What is most valuable?

The most valuable features are security and dynamic routing.

What needs improvement?

The routing functionality needs to be improved, as there are lots of bugs in the system.

I would like to see automation capabilities in the deployment process.

For how long have I used the solution?

I have been using VMware NSX since 2016.

What do I think about the stability of the solution?

I think that there is room to improve from a stability standpoint. There are lots of bugs in this product.

What do I think about the scalability of the solution?

VMware NSX is highly scalable.

How are customer service and technical support?

The technical support team is good.

How was the initial setup?

I would not say that the initial setup was straightforward. In terms of how easy it was to complete the deployment, I would rate the process a seven out of ten. 

What other advice do I have?

My advice for anybody who is researching VMware NSX is to first have an understanding of network engineering.

I would rate this solution an eight out of ten.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Buyer's Guide
VMware NSX
November 2024
Learn what your peers think about VMware NSX. Get advice and tips from experienced pros sharing their opinions. Updated: November 2024.
824,053 professionals have used our research since 2012.
Claudio Sousa - PeerSpot reviewer
Network Engineer at a consultancy with 1,001-5,000 employees
Real User
A powerful tool that helps our organization with box integration
Pros and Cons
  • "The alert features are the most valuable."
  • "The integration with other brands is not the best."

What is our primary use case?

We use VMware NSX for box integration. If box integration is still a code, we use this technology to understand it.

How has it helped my organization?

When we have problems in the Kubernetes cluster inside the XDN or problems in the Container Network Interface (a container integrated with the NSX), we can join the Kubernetes cluster data source. If there is a problem in CNI, we can see the connection with the NSX manager and create alerts.

What is most valuable?

The alert features are the most valuable.

What needs improvement?

The integration with other brands is not the best and could be better.

For how long have I used the solution?

We have been using this solution for almost two years. We are using version 3.1.

What do I think about the stability of the solution?

It is a stable solution.

What do I think about the scalability of the solution?

It is scalable, and we have 20 users using this solution.

How are customer service and support?

I rate the technical support a ten out of ten. Their support is excellent.

How was the initial setup?

The initial setup was straightforward.

What was our ROI?

We have had a very good return on investment.

What other advice do I have?

I rate this solution a ten out of ten. I recommend VMware NSX because it's a powerful tool. We can see the flows inside the SDN, which has a lot of power.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
System Advisor IT at CRIF India
Real User
Support need improvement, but it is stable, and easy to install
Pros and Cons
  • "It's a beneficial tool."
  • "The support needs improvement."

What is our primary use case?

Load balancing is achieved using VMware NSX. The load balancing feature provided with VMware vSphere is called NSX.

While using the virtual server with your on-premises trusted internal network, you can set up rules to prevent them from doing specific activities.

What is most valuable?

VMware NSX is a very good product.

It's a beneficial tool.

What needs improvement?

VMware NSX needs improvement.

For how long have I used the solution?

We have been using VMware NSX for a couple of years.

We are using the most recent version.

What do I think about the stability of the solution?

I have no issues with the stability of  VMware NSX.

What do I think about the scalability of the solution?

VMware NSX is a scalable solution.

NSX is not a user, product. NSX is for securing your virtualization platform.

How are customer service and support?

The support needs improvement.

How was the initial setup?

The initial setup is straightforward.

What other advice do I have?

I have not yet fully explored all that this solution provides. I am still analyzing it. From the knowledge and experience that I have today, I would recommend this solution.

I would rate VMware NSX a five out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
EmeaInfr6d8d - PeerSpot reviewer
EMEA Infrastructure Manager at a manufacturing company with 1,001-5,000 employees
Real User
It's a complex solution but not as much for the key user
Pros and Cons
  • "We like that everything is integrated."
  • "The solution is complex but for the key user, it's not really complex. You just need to learn the standards and mechanics for your specific product."

What is our primary use case?

We just introduced NSX in our headquarters. We have it running in some labs, but no real experiences. We've been using it for six months.

Our objective is to know each features component and how it works. Depending on the business requirements, we would adapt the solution as needed. This is the reason why we work a lot from the maps and then anticipate when we need a new feature for our company.

What is most valuable?

We like that NSX is integrated with everything. 

The load balancing is a real major opportunity for us. As a CIO, we have 99.9% network security. We would like to optimize this product.

For how long have I used the solution?

Less than one year.

What do I think about the stability of the solution?

The feedback we're getting from the labs is that the stability is rich and that we haven't had any trouble with it. The stability is really, really good.

What about the implementation team?

We didn't use a service for implementation but we have a consultant to help us get a better understanding of NSX and to teach us the best practices. 

What other advice do I have?

To those who say this solution is complex, I would say it is but not for the key user. You just need to learn the standards and mechanics for your specific product. That means that it's simple even if it's really complex beyond that.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
PeerSpot user
Senior Technical Consultant at The Instillery
Real User
Provides Microsegmentation And Good Security Features For North-South And East-West Traffic Across Your SDDC

What is most valuable?

The ease in which to install this product and make it work straight away without minimum changes in your physical network and is simply astonishing. The only thing you need to do when installing this product is change your MTU to 1600 (jumbo frames). It provides microsegmentation and good security features for north-south and east-west traffic across your SDDC. The performance you obtain at the virtual layer and traffic crossing for your VMs gets improved dramatically because the traffic doesn't leave the hypervisor. I'm not a network guy myself but NSX makes it really easy to understand how the virtual network pins together and how you can manage the traffic and security within your VMware deployment without the hassle of changing VLANs, adding unnecessary protocols for discovery, etc.

Encapsulating the traffic using VXLAN is a great addition. It extrapolates the number of VLANs that you can stretch to an almost infinite number of VXLAN (millions of VXLANs). In abstract, you are dealing with numerous VLANs every time you want to send traffic from one VM to another, basically VMs on different hosts within the same datacenter will be connected to the same logical switch and traffic is advertised via unicast traffic from the NSX controllers to let every body know in the environment "who is who" to minimize the amount of multicast traffic.

How has it helped my organization?

We haven't installed this in our environment yet. We have a major lab to provide our Ci-Dev team a sandpit to test apps and its security when deploying a three-tier application on our customers and test every single connection and performance before handing over the application to the customer.

What needs improvement?

The upgrade process is okay overall, but we have encountered issues every time when upgrading with the ESXi hosts VIB installation packages not being properly deployed, and after upgrading NSX manager, the ESXi hosts still uses the old version. This causes additional steps to manually remove those old VIBs from the ESXi, reinstall them, and try again. In some cases, we had to uninstall and install them from scratch NSX and restore from backup, which in a real world scenario won't be desirable to do. You would like to have an in-place a seamless upgrade from one version to another, especially if you are changing minor versions (e.g., 6.3.1 to 6.3.2).

For how long have I used the solution?

Six months now.

What was my experience with deployment of the solution?

The upgrade process is okay overall, but we have encountered issues every time when upgrading with the ESXi hosts VIB installation packages not being properly deployed, and after upgrading NSX manager, the ESXi hosts still uses the old version. This causes additional steps to manually remove those old VIBs from the ESXi, reinstall them, and try again. In some cases, we had to uninstall and install them from scratch NSX and restore from backup, which in a real world scenario won't be desirable to do. You would like to have an in-place a seamless upgrade from one version to another, especially if you are changing minor versions (e.g., 6.3.1 to 6.3.2).

What do I think about the stability of the solution?

A very stable product, it is more mature than it was four years ago when it first came out. The performance you get with this product is near-line rate.

What do I think about the scalability of the solution?

If you have a large environment, the sprawl of Distributed Logical Routers or logical switches can be hard to manage, but you will have the same issues in a physical network.

How are customer service and technical support?

Customer Service:

We have a direct line with VMware support and with the specialized engineer who provides support on NSX. We haven't had to open a support call yet, but the engineer we've dealt with is very capable and knowledgeable on the product.

Technical Support:

Excellent. VMware engineers are top of the line. I haven't met one engineer who doesn't know the product well that they support.

Which solution did I use previously and why did I switch?

Nope, never used a network virtualisation product before.

How was the initial setup?

It was straightforward. Just a couple of install media and .ovf files and you're done. The interesting part comes after installation when you need to define your virtual network architecture and how you're going to deploy rules and connectivity for your VMs.

What about the implementation team?

In-house deployment. We're a large VMware shop and know VMware products well.

What was our ROI?

Not applicable for this product yet.

What's my experience with pricing, setup cost, and licensing?

We got the licenses from VMware as part of the NFR agreement, but you will require a medium infrastructure to deploy this initially. Lot of memory and CPU are required to have the product run smoothly

Which other solutions did I evaluate?

No, there are no other products in the market that provide network virtualisation as far as I know.

What other advice do I have?

Download the installer, try it, and you will love it. Some hardcore network administrators will say it is not the same, and of course is not the same, but it is a new way to do things in the network space. It is the way of the future when deploying large networks in Software Defined Data Centres.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
it_user234747 - PeerSpot reviewer
Practice Manager - Cloud, Automation & DevOps at a tech services company with 501-1,000 employees
Real User
NSX for vSphere vs. NSX Multi-Hypervisor

Originally posted at vcdx133.com.

This post provides a Tech101 breakdown of VMware NSX. If you have heard the buzz-word “NSX” or “Network Virtualisation” and want to learn more about it, this post is for you.

VMware NSX has two distinct variantsNSX for vSphere (NSX-v) and NSX Multi-Hypervisor (NSX-MH). The most feature rich version is NSX-v (as you would expect) and the most flexible and vendor agnostic is NSX-MH (albeit with less features). Currently these are separate binaries that you download and deploy, however there is talk that in the future it will be a single binary set with a V/MH software setting during deployment.

A little bit of history will also clarify things. VMware acquired Nicira in 2012 and integrated/developed the NSX product suite by combining VMware’s vCNS (aka vShield Edge and App) with Nicira’s NVP. So if you understand vShield, it will give you a good start to mastering NSX.

The diagram below illustrates the NSX architecture, complete with physical infrastructure. Note, storage virtualisation has been deliberately left out of the diagram since it is not in-scope. The “P2V” lines denote the possible NSX overlay to physical network integrations.

NSX for vSphere (NSX-v)

NSX-v has the following components:

  • vSphere ESXi – server hypervisor.
  • vSphere Distributed Switch – the advanced Layer 2 virtual Switch that VMware provides with the Enterprise Plus licence (you cannot use the vSphere Standard Switch with NSX).
  • NSX Manager – management interface of NSX, presented via the vSphere Web Client and has a northbound NSX API.
  • NSX Controller – the control plane of NSX which also has the northbound NSX API.
  • Logical Switch – VXLAN tunnels that run across disparate networks.
  • Edge Services Gateway (ESG) – provides L3-L7 network services to the outside world.
  • Distributed Logical Router (DLR) – provides L3-L7 network services to the physical and virtual infrastructure via a hypervisor service for the data plane and a virtual appliance for the control plane.
  • Distributed Firewall – this is a service that runs on ESXi and provides micro-segmentation of virtual infrastructure
  • Third Party integrations – advanced L3-L7 services provided by Third Parties via the NSX API. eg. Palo Alto Networks, McAfee, Trend Micro, F5, Citrix, Silver Peak, etc.
  • Physical Network – traditional core, aggregate, distribution, access or Clos-type Leaf & Spine architectures
  • Virtual overlay to Physical network gateways – the NSX virtual overlay integrates with the physical world via a gateway. eg. Routing, L2 Extension, VXLAN, etc.

What are L2 to L7 services? VLAN, VXLAN tunnels, Network Firewall, IPS, Application Firewall, NAT, Routing (OSPF, BGP, IS-IS), Load Balancing, SSL VPN, IPSec VPN, Route redistribution, etc.

NSX for Multi-Hypervisor (NSX-MH)

The NSX-MH has the same functional components, except it uses Open vSwitch (instead of vDS) with KVM, Hyper-V or XenServer and does not have a Distributed Firewall (no micro-segmentation).

Why do it this way?

You may have heard about the “Goldilocks zone” (not too hot, not too cold, just right – used to describe Earth’s placement in the solar system for sustaining life). The hypervisor is the “Goldilocks zone” of the Data Center, it is the natural meeting place for the Software Defined Data Center (SDDC) – Compute, Network and Storage.

If you understand the benefits of server virtualisation with vSphere (abstraction of the Operating System from the hardware, etc.), you can apply the same logic to network virtualisation. There is also the driving force of creating blueprints within the Service Catalogue of the Cloud Management Platform and linking polices (compute, network, storage and security) to the blueprint.

Weaknesses

  • The biggest weakness of NSX – no associated hardware, since VMware is a software company, is also its greatest strength. You can run NSX across any physical network (as long as it meets the fundamental requirements of scalability, performance and reliability) and use it to connect disparate networks together.
  • Because NSX is software, it cannot match dedicated physical hardware in terms of performance, however this weakness is balanced with flexibility and scale. Ensure that your SDDC is designed to match your business requirements – this way the risk of lack of performance is mitigated.
  • NSX on its own is not the greatest use-case, you really want to use it to complete your SDDC solution (ie. Cloud Management Platform, Compute Virtualisation, Network Virtualisation, Storage Virtualisation and Service Catalogue).
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Leandro Pereira Rodrigues - PeerSpot reviewer
Analista de TI at RNP - Rede Nacional de Ensino e Pesquisa NREN/Brazil
Real User
Top 5Leaderboard
A great firewall but lacks integration with other solutions.
Pros and Cons
  • "Has a great firewall."
  • "Lacks integration with other solutions."

What is our primary use case?

We use NSX in our data center. 

What is most valuable?

We use the NSX firewall which is great. 

What needs improvement?

I'd like to see more integration with other solutions. 

For how long have I used the solution?

We've been using this solution for over two years. 

What do I think about the stability of the solution?

The solution is stable.

What do I think about the scalability of the solution?

The solution is scalable.

How are customer service and support?

I haven't used technical support. 

What other advice do I have?

I recommend this solution and rate it seven out of 10. 

Which deployment model are you using for this solution?

On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user