Choose between active-active, where Edge nodes share the load, and active-standby, which some stateful services like IPsec and L2 VPN demand. For a Tier-1 there is a further Distributed Only option that omits the service router.
Read more: Broadcom TechDocs
In the Ultra Transcenders books
Each book explains HA mode in context, with comparison tables and the common traps.
Terms in this definition
- Active-active
A VPN gateway set-up where traffic flows through both instances simultaneously, each having a separate tunnel and public IP. Servicing one instance therefore disrupts connections less than under default active-standby.
- WHERE
Limits a SELECT, UPDATE or DELETE to just the rows meeting a condition. Omit it, and the statement hits every row.
- Share
In OpenSharing, the container you fill with tables, views, volumes, models and notebooks for recipients. You need
CREATE SHAREon the metastore to make one; add a schema and all its assets, including later ones, go with history. - ELT
Extract, load, transform: raw data lands in the target system first and is transformed there. See ETL for the opposite order.
- LIKE
Compares strings with a pattern that can contain the % and _ wildcards. Because it only understands character patterns, searching big volumes of text this way is much slower than using full-text search.
- IPsec
Internet Protocol Security is the set of protocols that negotiates and encrypts the tunnels used by VNet-to-VNet and site-to-site VPNs.
- L2 VPN
A way to stretch Layer 2 networks (VNIs or VLANs) over several sites in NSX so they act as one broadcast domain; an L2 VPN server and client are joined by a route-based IPsec tunnel.
- service router
Runs on NSX Edge nodes as the centralised half of a gateway. Handles north-south routing and stateful features like NAT and VPN. A Tier-0 always includes one, but a Tier-1 only if an Edge cluster has been chosen. See also the distributed router (DR), present on all transport nodes.
Related terms
- Active Standby
An NSX gateway HA mode where one Edge node handles traffic while a second waits to take over. Stateful services such as NAT, VPN, load balancing and the stateful firewall depend on it, and VCF Automation 9.0 expects its Tier-0 to be set up this way.
- Active/standby Tier-0
Required by the VPC with Full Services model (itself needed for automatic VPC SNAT and all VCF Automation tenancy models), this Tier-0 HA mode sends all traffic through one elected NSX Edge node, with a second ready to take over on failure. More north-south capacity therefore means adding Tier-0 or VRF gateways, not edge nodes.