Create a Virtual Service in the VMware Cloud Director Tenant Portal

A virtual service listens for traffic to an IP address, processes client requests, and directs valid requests to a member of the load balancer server pool.

A virtual service is a combination of an IP address and a port that uses a single network protocol. The virtual service is advertised to outside networks and is listening for client requests. When a client connects to the virtual service, the load balancer directs the request to a member of the load balancer server pool that you configured.

To secure SSL termination for a virtual service, you can use a certificate from the certificate library. For more information, see Import Certificates to the Certificates Library Using Your VMware Cloud Director Tenant Portal.

Starting with VMware Cloud Director 10.4, when you create a virtual service, you can provide it either with an IPv4 address, or with an IPv6 address, or with both.

Virtual services can share the same virtual IP address if you configure them to use different ports.

Prerequisites

• Verify that you are logged in as an organization administrator.

• Verify that your system administrator has enabled load balancing on the NSX edge gateway.
• Verify that your system administrator has assigned at least one service engine group to the edge gateway.
• Add a load balancer server pool to the edge gateway.

Procedure

1. In the top navigation bar, click Networking and click the Edge Gateways tab.
2. Click the NSX edge gateway on which you want to create a virtual service.
3. Under Load Balancer, click Virtual Services, and then click Add.
4. Enter a meaningful name and, optionally, a description, for the virtual service.
5. To activate the virtual service upon creation, toggle on the Enabled option.
6. To activate client IP address preservation, toggle on the Preserve Client IP option.
7. Select a service engine group for the virtual service.
8. Select a load balancer pool for the virtual service.
   If you activated client IP address preservation, you can only select a group pool member.
9. Enter a virtual IP address for the virtual service.

   If you didn't activate client IP address preservation, you can add either an IPv4 address, an IPv6 address, or both.

   If you activated client IP address preservation, you can enter only an IPv4 address.

10. Select the virtual service type.

    Option	Description
    HTTP	The virtual service listens for non-secure layer 7 HTTP requests. When you select this service type, it autopopulates the service port text box to 80, which you can replace with another valid port number.
    HTTPS	The virtual service listens for secure layer 7 HTTPS requests. When you select this service type, it autopopulates the service port text box to port 443, which you can replace with another valid port number. Select an SSL certificate to be used for SSL termination.
    L4	The virtual service listens for layer 4 requests. When you select this service type, it autopopulates the service port text box to 80, which you can replace with another valid port number.
    L4 TLS	The virtual service listens for secure layer 4 TLS requests. When you select this service type, it autopopulates the service port text box to TCP port 443, which you can replace with another valid port number. Select an SSL certificate to be used for SSL termination.

11. Click Save.