As is probably obvious from the sidebar, I'm pretty enthusiastic about IPv6 - for quite a few reasons, not least of which is implementing a new Layer 3 protocol after guys like Vint Cerf already did most of the cool stuff. However, I didn't want to simply complete this task - most people complete all of these tasks …

Read More

I have mentioned in a previous blog post that I'm not using any ACLs on my tunnel broker VM This is usually pretty bad, but again, we can get those protections outside of the VM - I'm using this to prove out how NSX-T can provide utility in this situation. Solution Overview VyOS is a fantastic platform, with a ton of …

Read More

First things first - let's cover some IPv6 basics. What's Different Many aspects of IPv6 is actually much easier than most people would expect - since there's such a large addressing space, entire fields of work with IPv6 go away. Custom CIDR / Subnetting Remember how you had to do binary math, and use your crystal …

Read More

First off, let's cover what's been built so far: To set up an anycast vIP in NSX-T after standing up your base infrastructure (already depicted and configured), all you have to do is stand up a load balanced vIP at multiple sites. NSX-T takes care of the rest. Here's how: Create a new load balancing pool. Create a new …

Read More

Since most of NSX-T runs in a firewall mode of sorts, it's probably worthwhile to discuss on of the less well-known routing protocol features - Graceful Restart. As published for BGP, IETF RFC 4724 outlines a mechanism for "preserving forwarding traffic during a BGP restart." This definition may be a little …

Read More

Now that the primary infrastructure components for NSX-T are in place, it is now possible to build-out the actual functions that NSX-T is designed to provide. A friendly suggestion, make sure your Fabric is healthy before doing this: NSX-T differs from NSX-V quite a bit here. Irregular topologies between edge routers …

Read More

Since NSX-T 2.5 just came out, it's about time to do a full rebuild and getting started guide. NSX-T differs greatly from NSX-V in that the initial setup is quite a bit more complicated and doesn't have many guardrails or direct paths to initial set-up. We'll be skipping the appliance deployment, because if you have …

Read More

So far, all examples to date have been extremely simple, and stand rather well on their own (OSPF Clos would work just FINE in a campus network if you have cheap L3) but may not effectively address some more advanced use cases. In short, we're about to enter niche territory. Generally speaking, BGP is regarded as the …

Read More

Overview First off, here's the reference diagram (YAML): Assumptions about difficulty Most people I've met outside of the carrier space are pretty intimidated by BGP, as it is truly impressive in scope. Here, we're going to break-out BGP usage into two categories: iBGP: This is where all nodes have the same Autonomous …

Read More

Before we get too far - this is going to be a simple topology, relatively speaking. I'll be putting the switch configs on my GitHub account as well when I get to that point. The diagram is as follows: This was drawn programmatically with drawthe.net. File is here

Read More