In NSX, a gateway that sits between segments (downlinks) and a Tier-0 (uplink). Choosing an Edge cluster for it is what causes a service router to be created on Edge nodes.
Read more: Broadcom TechDocs
In the Ultra Transcenders books
Each book explains Tier-1 gateway in context, with comparison tables and the common traps.
Terms in this definition
- NSX
Software that handles networking and security across VCF, covering firewalling, load balancing, NAT, VPCs, overlay segments and Tier-0/1 gateways.
- service router
Runs on NSX Edge nodes as the centralised half of a gateway. Handles north-south routing and stateful features like NAT and VPN. A Tier-0 always includes one, but a Tier-1 only if an Edge cluster has been chosen. See also the distributed router (DR), present on all transport nodes.
Related terms
- Distributed router
Half of an NSX Tier-0 or Tier-1 gateway: the portion present on every transport node of the transport zone, so packets are routed inside the hypervisor. Anything needing a central point lives in the service router (SR) on Edge nodes.
- L7
The OSI application layer. A Tier-1 gateway on a Small NSX Edge cannot realise NSX services that work here, such as TLS inspection, URL filtering and L7 load balancing; they need a Large edge, or Extra Large for more throughput.
- local endpoint
An IP on a Tier-0 or Tier-1 gateway that terminates an NSX IPsec VPN on your side. Pick an address other than the gateway's uplink IP; with a Tier-1, routing to it works only after enabling IPsec Local Endpoints route advertisement.