We design, deploy and maintain software-defined networks based on VMware NSX — from microsegmentation and security policies to the distributed firewall (DFW), load balancing and hybrid connectivity to the cloud.
Services
- VMware NSX Data Center — architecture design, logical switches, VLANs, port groups and VXLAN/Geneve overlay for vSphere
- Microsegmentation — tag- and group-based policies, L3/L4 segmentation and „deny by default” traffic control between zones
- NSX Distributed Firewall (DFW) and Distributed Service Firewall — vNIC-level policies, process identification (App-ID) and identity-based rules (Identity Engine)
- Policies in the Policy model (NSX-T Policy) — groups, sets, services and rules in the UI and via API / Terraform
- NSX Load Balancer, NAT, DHCP, DNS and routing services (DVR, Tier-0/Tier-1 Gateways)
- Integration with vCenter/VCF (vRealize Operations, vRealize Network Insight), cloud connectivity (AWS/Azure) and NSX Cloud / Distributed Service Insertion
- High availability and DR: Site Recovery Manager, replication, emergency VPN tunnels, planned failover
- Monitoring and troubleshooting: flows, NetFlow/IPFIX, threat hunting, compliance reporting and capacity/licensing planning
- Run services: NSX upgrades, policy reviews, documentation and a day-2 operating model
We roll NSX out in stages — from environment audit and segmentation, through policies and production traffic, to IaC automation. The result is a virtual network as programmable and predictable as the infrastructure it carries.