NSX gateway configuration guide

Author: Former user (Deleted)

Every time a VDC is deployed, Abiquo will create a NSX edge and connect it the uplink network to provide gateway, router, firewall, load balancing and SNAT services to the VMs inside the VDC.

NSX Gateway diagram

Limitations

Maximum 9 private networks per VDC as per NSX limitation
Load balancers do not support firewalls.

Abiquo properties

The following properties are global to the platform and must be configured in the Server and Remote Services appliances:

Name	Description
abiquo.nsx.transport-zone	The transport zone where the networks created by Abiquo will be attached.
abiquo.nsx.edge.cluster-id	Identifier (in VCenter) of the cluster where Abiquo will deploy the ESG.
abiquo.nsx.edge.datastore-id	CSV list of identifiers (in VCenter) of the datastores where Abiquo can deploy the ESG appliances according to the datastore-policy
abiquo.nsx.edge.datastore-policy	Allocation policy for selection of datastores to deploy ESG appliances. Default: leastvms Range: leastvms, mostspace
abiquo.nsx.edge.dvportgroup-id	Id of the port group where Abiquo will attach the ESG uplink.
abiquo.nsx.edge.public-network-cidr	Network range where the ESG uplink IP and the "public" load balancer IPs will be taken from. It must be a range dedicated to Abiquo.
abiquo.nsx.load-balancer-reserved-ips	Number of IP addresses that are reserved for NSX in each private network to allocate to load balancers. Default: 20 The gateway can be address 1. The reserved IPs range starts from address 2 for the number of IPs configured by the user, by default, up to address 21 Users should work with automatic IP allocation. In any case, the system administrator should inform the users of the range and by default, the first free address is address 22

The following properties can be configured globally or per tenant. See Manage tenant properties to configure them as tenant properties.

To configure properties globally in the API properties, use them with an abiquo. prefix:

Name	Description
nsx.virtualwire.teaming	Use this property to set the teaming policy for the portGroup that is the backing for the VirtualWire when it is created. This value cannot be changed after it is created. Default: "failover_explicit" Values: "failover_explicit", "loadbalance_ip", "loadbalance_loadbased", "loadbalance_srcid", or "loadbalance_srcmac"
nsx.edge.esg.size	Size of the ESG appliances. Values: compact, large, quadlarge, xlarge
nsx.edge.description	Description to configure in the edges created by Abiquo.
nsx.load-balancer-acceleration	Whether load balancer acceleration is enabled in the edge load balancers. Default: false