VCAP6-NV Deploy - Objective 3.1 - Configure and Manage Logical Load Balancing
VMware NSX-V VCAP6-NV VCIX6-NV HOWTO
Published on 30 July 2017 by Christopher Lewis. Words: 543. Reading Time: 3 mins.
![](/img/2017/07/30/vmwarensx.png)
Skills and Abilities
Objective 3.1 - Configure and Manage Logical Load Balancing
- Configure the appropriate Load Balancer model for a given application topology.
- Configure SSL off-loading.
- Configure a service monitor to define health check parameters for a specific type of network traffic.
- Optimize a server pool to manage and share backend servers.
- Configure an application profile and rules.
- Configure virtual servers.
Objective Prerequisites
The following prerequisites are assumed for this Objective:
- A working VMware vSphere 6.x environment.
- A working VMware NSX 6.x environment.
Objective Breakdown
Configure the appropriate Load Balancer model for a given application topology
VMware NSX provides two types of Load Balancer, Layer 4 (packet-based) and Layer 7 (socket-based). All NSX LBs are created as Layer 7 unless the Enable Acceleration checkbox as part of the deployment, then a Layer 4 LB created.
There are two types of VMware NSX LB deployment modes, Proxy Mode (one-arm) and Transparent Mode (inline). For more information see the VMware NSX Design Guide .
How to enable and configure an VMware NSX Load Balancer, see HOWTO: Configure VMware NSX Load Balancing
Configure SSL off-loading
There are a few steps to configuring SSL Off-loading:
- Upload the Certificate Chain SSL Certificate.
- Upload the SSL Certificate (or generate a self-signed one) and Private Key.
- Configure an Application Profile for SSL Offloading.
- Assign the Profile to a Virtual Server.
The following steps assume you have logged into VMware vCenter and can locate the appropriate ESG and that Load Balancing is already enabled.
Upload the Certificate Root CA & SubCA SSL Certificate
Navigate to Networking and Security > NSX Edges > [ESG Name] > Manage > Settings > Certificates.
![](/img/2017/07/30/nsx-lb-ssl-cert-01.png)
Click Add(+).
![](/img/2017/07/30/nsx-lb-ssl-cert-02.png)
Select CA Certificate.
![](/img/2017/07/30/nsx-lb-ssl-cert-03.png)
Copy the contents of the CA Certificate file (including -----BEGIN CERTIFICATE-----
and -----END CERTIFICATE-----
).
![](/img/2017/07/30/nsx-lb-ssl-cert-04.png)
Click OK.
Upload the SSL Certificate (or generate a self-signed one) and Private Key.
Click Add(+).
![](/img/2017/07/30/nsx-lb-ssl-cert-05.png)
Select Certificate.
![](/img/2017/07/30/nsx-lb-ssl-cert-07.png)
Copy the contents of the Certificate file (including -----BEGIN CERTIFICATE-----
and -----END CERTIFICATE-----
) and the RSA Key file (including -----BEGIN RSA PRIVATE KEY-----
and -----END RSA PRIVATE KEY-----
).
![](/img/2017/07/30/nsx-lb-ssl-cert-08.png)
Click OK.
![](/img/2017/07/30/nsx-lb-ssl-cert-06.png)
Configure an Application Profile for SSL Offloading
Navigate to Networking and Security > NSX Edges > [ESG Name] > Manage > Load Balancer > Application Profiles.
![](/img/2017/07/30/nsx-lb-ssl-offload-01.png)
Click Add(+).
![](/img/2017/07/30/nsx-lb-ssl-offload-02.png)
Enter the Name for the new Application Profile and select HTTPS from the Type dropdown.
![](/img/2017/07/30/nsx-lb-ssl-offload-02a.png)
Select Service Certificates and check the Configure Service Certificate checkbox.
![](/img/2017/07/30/nsx-lb-ssl-offload-03.png)
Select the appropriate Service Certificate and click CA Certificates.
![](/img/2017/07/30/nsx-lb-ssl-offload-04.png)
Check the checkbox of the corresponding CA Certificate.
![](/img/2017/07/30/nsx-lb-ssl-offload-05.png)
Click OK.
![](/img/2017/07/30/nsx-lb-ssl-offload-06.png)
Assign the Profile to a Virtual Server
This is no different from the normal process of assigning an Application Profile to a Virtual Server. Therefore, see HOWTO: Configure VMware NSX Load Balancing .
Configure a service monitor to define health check parameters for a specific type of network traffic
I believe I have provided sufficient guidance in the HOWTO: Configure VMware NSX Load Balancing post.
Optimize a server pool to manage and share backend servers
I believe I have provided sufficient guidance in the HOWTO: Configure VMware NSX Load Balancing post.
Configure an application profile and rules
I believe I have provided sufficient guidance in the HOWTO: Configure VMware NSX Load Balancing post.
Configure virtual servers
I believe I have provided sufficient guidance in the HOWTO: Configure VMware NSX Load Balancing post.
Published on 30 July 2017 by Christopher Lewis. Words: 543. Reading Time: 3 mins.
- VCAP6-NV Deploy - Objective 2.3 - Configure and Manage Routing ()
- VCAP6-NV Deploy - Objective 5.3 - Configure and Manage Role Based Access Control ()
- VCAP6-NV Deploy - Objective 8.1 - Administer and Execute calls using the VMware NSX vSphere API ()
- VCAP6-NV Deploy - Objective 2.1 - Create and Manage Logical Switches ()
- VCAP6-NV Deploy - Objective 1.3 - Configure and Manage Transport Zones ()
- Operating a Private Cloud - Part 3: Creating a Pricing Card in VMware Aria Automation
- Operating a Private Cloud - Part 2: Creating a Pricing Card in VMware Aria Operations
- Operating a Private Cloud - Part 1: Understanding Pricing Cards in VMware Aria
- Zero2Hero - Using Aria Automation to Deploy Multiple Machines with Multiple Disks - Part 5
- Zero2Hero - Using Aria Automation to Deploy Multiple Machines with Multiple Disks - Part 4