I have recently had the chance to do some reading on VMware NSX. I come from a networking background Intertwined with software, previously I have had a chance to research on some of the underpinnings of NSX but never had the time to look at the big picture, so in this writing, I am going to briefly describe the NSX architecture.

What is NSX?

NSX is VMWare virtual networking on steroids.

There are several components that constitute the NSX Architecture. The reason why I believe that NSX is a true Software Defined architecture is the clean decoupling and separation of its components.

The NSX architecture is divided into three planes; the management-plane, the control-plane, and the data-plane. Most of the other architectures mix both the control and management plane functions which leads to a highly complex architecture. Accordingly, the components that constitute the NSX architectures are divided to match the decoupled architecture.

Lets have a deeper look into each.


Management Plane

The NSX manager is the entity acting as the management plane in NSX.  It automates configuration management functionalities (e.g., switching on/off network interfaces, timers, VLANs, VxLANs,  etc).  To configure the underlying devices, it utilizes the REST style with JSON or XML as the protocols to carry the  the management commands.

Control Plane

The NSX Controller Cluster is what makes the control-plane. I would describe the controller cluster as the network state maintainers. It keeps track of all the ARP entries, the MAC tables, or the VxLAN mapping details. Additionally, this is where the routing table is stored, this is crucial to routing between different virtual networks.

In NSX there are multiple ways to which VMs in different hosts / clusters communicate.

Maintaining state in the NSX controller cluster can greatly reduce network traffic, this is because controllers are aware of the network topology and state.

### Data Plane

This is where the packets dance (i.e., the data path).  There are many entities that make up the data plane.

In summary, I found NSX pretty decent compared to other Software-Defined solutions out there. The clear decoupling between the different network functions did it for me.  It is important to keep in mind that NSX being improved and developed, in its current state (v6.1) it only supports one data center instance, in future releases (v6.2) , it will support universal policy and universal state management taking datacenter networking to a whole new level.

Of course this article is just scabbing the surface, however, I hope that it has helped you get a better understanding of what NSX is and what it is capable of. Please contact me if you think modifications / corrections are needed.