Before establishing the VMware Integrated OpenStack configuration, the CSP has to create an Edge Node provider cluster. The NSX Edge Node cluster consists of logical Tier-0 gateways. The Edge Node cluster can consist of either VM or bare metal form-factors. The bare metal Edge is installed on a physical server providing higher throughput data rates.

Table 1. Edge Node Options

Edge Node Type

Use

VM form-factor

  • Production deployment with centralized services such as NAT, Edge firewall, and load balancer.

  • Workloads that can tolerate acceptable performance degradation loss with virtual edges.

  • Can tolerate low failure convergence by using BFD (3 seconds).

  • Low-cost options instead of dedicated bare-metal nodes

  • Test proof of concept and trial setups.

Bare metal form-factor

  • Production deployment with centralized services such as NAT, Edge firewall, and load balancer.

  • Higher throughput more than 10 Gbps.

  • Faster failure convergence using BFD (less than 1 second).

Active-Active Tier-0

In an Active-Active configuration, Tier-0 gateways are active on more than one Edge Nodes at a time to provide high availability. In ECMP mode, the traffic is load balanced between the links to the external physical routers. A maximum of eight Edge Nodes can be configured in ECMP mode to provide scalable throughput that spreads across the Edge Node physical uplinks to the provider network. Stateful services such as NAT and Firewall cannot be used in this mode.

Figure 1. Active-Active Tier-0 Design
Active-Active Tier-0 Design

Active-Standby Tier-0

A high availability configuration where a Tier-0 gateway is active on a single Edge Node at a time. This mode is required when stateful services such as NAT and Firewall must remain in a constant state of synchronization between the active and standby Tier-0 gateway.

Figure 2. Active-Standby Tier-0 Design

Active-Standby Tier-0 Design

Dynamic Routing

Tier-0 gateways can be connected to physical routers by using BGP or static routes. If static routes are used, every newly created external network must be added manually to the Tier-0 gateway that peers with the physical routers.

The NSX Edge Node also supports fast failure recovery by using Bidirectional Forwarding Detection (BFD) that is integrated with BGP. The VM form-factor edges support a minimum timeout of one second with three retries, providing a three-second failure detection time between nodes. With bare-metal nodes, the detection or convergence timeout is less than one second.

For more information on NSX-T Data Center, see the NSX-T Reference design.