This reference architecture assumes a separate network connection over Layer 3 for management connectivity between the management components and its edge sites. This management connectivity includes traffic between vCenter Server and Edge site ESXi hosts. NSX Manager also uses this for management of NSX Edge Nodes at the Edge site.

A pair of NSX-T Edge Nodes (in VM form factor) is used at each Edge site for the logical to the physical network and also to assist in the mapping of tenant gateways when a multi-tenant environment is needed. Note that the segmentation of tenants and QoS at the networking level may increase the number of Edge Nodes per site.

Note:

The end-to-end round-trip latency between any Edge site and core site should not exceed 150 ms. Recommended bandwidth between the Edge and core sites is 10 Gbps. VLAN-based network segmentation is restricted within a data center. There is no VLAN stretching between the core and Edge sites.

Network Redundancy

The vCloud NFV Edge reference architecture configuration has Edge nodes (in the VM form factor) in active/active mode to connect to the Provider Edge (PE) router at the Edge site. To define the high availability configuration for the edge node, the administrator from the Core data center must use a control plane network.

Operations Management

There are two models for placement of the operations management components such as vROps, vRNI, and vRLI:

  • The central components of these products are always placed at the core site. Scaling of these products depends on the number of Edge sites under management and the total number of workloads at those Edge sites.

  • The remote collector components of these components are to be placed at the Edge sites.

There are three FCAP collectors: Remote Collector for vROps, Proxy for vRNI, and Syslog collector for vRLI. For potentially large-scale deployments, consider placing the remote collectors at the Edge sites.

Network Tenancy

The vCloud NFV Edge Reference Architecture relies on NSX-T to provide network tenancy for end-to-end isolation capabilities by deploying multiple tiers of distributed routing through Tier-0 and Tier-1 gateways in the networking stack.

The uplink of a Tier-0 gateway that resides in NSX-T Edge is connected to upstream physical routers. A tenant uses a Tier-1 gateway at its Edge to connect to the Tier-0 gateway. Tier-0 gateway relays traffic to other tenants on the upstream router at each side of the Core data center or Edge site. Network virtualization capabilities with Geneve encapsulation provide flexibility in-line with industry standards. NSX-T Data Center performance enhancements for N-VDS and NSX Edge Nodes offer advanced network capabilities.

Each tenant's traffic is associated with a different VLAN behind the per-tenant WAN access. Similar to a physical switch, an N-VDS Uplink port can carry multiple VLANs encapsulated on the single connected link using IEEE 802.1q.