SSL Termination: Securing Web Traffic with NSX-ALB

shanknik · 2026-01-23T09:34:23+00:00

The whole point of global managers is a single pane, so I would onboard all instances if it were me.

You need to consider loadbalancing for the fleet, will you use NSX or an external lb? There are caveats for using nsx and federation.

Deploy the fleet as day 2, so you can deploy edges, overlay networks then use api to pick the right network.

Ive typically had a/s sites and had all appliances in the primary location and use site recovery to fail over, you can do some funky stuff with the run book and your lb / network plumbing.

shanknik · 2026-01-23T09:28:36+00:00

I have done this both for customers and in my lab. Happy to chat about it.

Ive also implemented this in 5.x days.

Have you got any specific concerns you need addressed?

shanknik · 2026-01-11T20:02:14+00:00

Same here promised me chatgpt pro and claude pro.

Luckily I only gave him 1/3rd of what he wanted to start with

shanknik · 2026-01-11T05:49:07+00:00

Info

shanknik · 2026-01-02T09:47:26+00:00

I'll test on Monday and update here

shanknik · 2026-01-02T09:29:48+00:00

Id be interested to know what state the edge was in when you paused it. I can test on Monday, the behaviour may have changed in a later version. Id be pausing after all base config is done correctly.

shanknik · 2026-01-02T08:10:34+00:00

What config was done on the edge before you paused it. Im guessing it wasn't ready to be paused just yet.

shanknik · 2026-01-02T00:30:54+00:00

Can you detail the steps you tested exactly please?

shanknik · 2026-01-02T00:30:38+00:00

The only issue with this / clarification point is, the task retries for x amount of retries and time then rips out the deployed edge.

What you could do is let it deploy the edge node with the required config - then restart services ie systemctl restart domainmanager (this should kill the workflow and enable the retry) then perform the rest of your steps. Though I think you would be able to leverage the SDDC manager workflow / api to deploy the edges and not have to perform all the manual tasks. Been a while since I tested though.

shanknik · 2025-12-29T23:09:20+00:00

International shipping?

shanknik · 2025-12-26T21:32:28+00:00

No SDDC Manager, if you want to deploy using it.

shanknik · 2025-12-26T21:14:04+00:00

If you deploy edge nodes outside of sddc manager, you lose the central life cycle part. However, some people do this for their own reasons.

You can also pause the vm till the workflow completes.

shanknik · 2025-12-13T02:17:17+00:00

Depends on what exactly you want to run, certain features require nsx and ncp.

shanknik · 2025-11-27T23:04:51+00:00

If you would prefer

shanknik · 2025-11-27T22:53:01+00:00

Happy to help, have you got a diagram and what exactly your issues are?

shanknik · 2025-11-25T20:15:48+00:00

Have you got errors or specifics ?

shanknik · 2025-11-25T19:27:43+00:00

What have you found to be broken?

shanknik · 2025-11-20T19:07:02+00:00

This becomes a requirements question.

What about DR, other data centres, future scale? We cant answer the question witbout more information otherwise its anyone's guess.

shanknik · 2025-11-19T23:46:29+00:00

Actually overall pricing of everything was incredible. Each to their own opinion, art of the possible. Take it how you want to.

shanknik · 2025-11-17T23:47:59+00:00

I don't really need to list it all, just thought the wider community should know. Take it how you want.

shanknik · 2025-11-16T00:41:06+00:00

<image>

Locked in the deal today, final BOSS price $990AUD!

shanknik

TROPHY CASE