VMware Cloud Foundation, to support the communication between tenant workloads by using application virtual networks in NSX-T and to connect tenant workloads to the external network, configure dynamic routing in the initial cluster of the NSX-T workload domain.
Routing occurs in both the North-South and East-West directions.
North-South traffic leaving or entering the workload domain, for example, a virtual machine on an overlay network communicating with an end-user device on the corporate network.
East-West traffic remains in the workload domain, for example, two virtual machines on the same or different segments communicating with each other.
Create an NSX-T Edge Cluster Profile for an NSX-T Workload Domain In VMware Cloud Foundation, for availability of the routing services and connectivity to the external network, you create a multi-node cluster of NSX-T Edge nodes. To define a common configuration for NSX-T Edge nodes, you create an edge cluster profile.
Deploy the NSX-T Edge Appliances for an NSX-T Workload Domain In VMware Cloud Foundation, to provide tenant workloads with routing, services, and connectivity to networks that are external to the workload domain, deploy a pair of NSX-T Edge nodes in each availability zone.
Join the NSX-T Edge Nodes to the Management Plane for an NSX-T Workload Domain In VMware Cloud Foundation, after you deploy the NSX-T Edge appliances in the NSX-T workload domain cluster, to connect them to the NSX-T Manager cluster, join them to the management plane.
Create an Anti-Affinity Rule for the NSX-T Edge Nodes for an NSX-T Workload Domain To ensure that the two NSX-Т Edge appliances run on different ESXi hosts in VMware Cloud Foundation, create a vSphere DRS VM-host anti-affinity rule. If a failure occurs on one of the hosts, the appliance on the other host continues providing routing services.
Create Host Groups and Rules for Both Availability Zones for an NSX-T Workload Domain To ensure that all virtual machines that in an availability zone run on ESXi hosts in the same zone in VMware Cloud Foundation, you create and configure host and virtual machine groups rules in vSphere DRS .
Add the NSX-T Edge Nodes to the Transport Zones for an NSX-T Workload Domain After you deploy the NSX-T Edge nodes and join them to the management plane in VMware Cloud Foundation, add them to the transport zones for uplink and overlay traffic, and configure the N-VDS switches on each edge node.
Create the NSX-T Edge Cluster for an NSX-T Workload Domain Adding multiple NSX-T Edge nodes to a cluster increases the availability of networking services. An NSX-T Edge cluster is necessary to support the Tier-0 and Tier-1 gateways in the workload domain in VMware Cloud Foundation.
Create and Configure the Tier-0 Gateway for an NSX-T Workload Domain The Tier-0 gateway in the NSX-T Edge cluster provides a gateway service between the logical and physical network in VMware Cloud Foundation. The NSX-T Edge cluster can back multiple Tier-0 gateways.
Create and Configure the Tier-1 Gateway for an NSX-T Workload Domain To redistribute routes to the Tier-0 gateway and to provide routing between tenant workloads in VMware Cloud Foundation, create and configure the Tier-1 gateway.
Verify BGP Peering and Route Redistribution for an NSX-T Workload Domain The Tier-0 gateway must establish a connection to each of the upstream Layer 3 devices in its availability zone before BGP updates can be exchanged. Verify that the NSX-T Edge nodes are successfully peering and that BGP routing is established in VMware Cloud Foundation.