NSX-T Data Center 3.0 Release Announcement

NSX-T Data Center 3.0 includes a variety of new features to provide new functionality for virtualized networking and security for private, public, and multi-clouds.

NSX-T Data Center 3.0 new features:

NSX Federation
Distributed IDS,
Micro-Segmentation for Windows
Physical Servers,
Time-based Firewall Rules,
NSX-T for vSphere with Kubernetes,
container networking and security enhancements
L3 EVPN for VM mobility,
NAT64,
IPv6 support for containers,
E-W service chaining for NFV workloads

NSX-T Data Center 3.0 Enhancements and features:

NSX-T support on VDS 7.0
- NSX-T now has the capability to run on the vSphere VDS switch version 7.0. It is recommended that new deployments of NSX and vSphere take advantage of this close integration and start to move toward the use of NSX-T on VDS. The N-VDS NSX-T host switch will be deprecated in a future release. Going forward, the plan is to converge NSX-T and ESXi host switches. The N-VDS remains the switch on the KVM, NSX-T Edge Nodes, native public cloud NSX agents and for bare metal workloads.
RHEL support:
- We add RHEL 7.6 and RHEL 7.7 to the list of supported operating systems for NSX. This applies to KVM and Bare Metal workloads.
Edge Bridge:
- Segments that have been configured for Guest VLAN tagging can now be extended to VLAN through an edge bridge.
MAC Limit per VNI:
- The default value of default MAC limit per Logical switch is 2,048 in ESXi dataplane. NSX now provides the ability to change the MAC limit per logical switch from the default value to match customer requirements.
Support for Windows 2016 Bare Metal Server
Federation
- NSX-T 3.0 introduces the ability to federate multiple on-premises data centers through a single pane of glass, called Global Manager (GM). GM provides a graphical user interface and an intent-based REST API endpoint. Through the GM, you can configure consistent security policies across multiple locations and stretched networking objects: Tier0 and Tier1 gateways and segments.
Edge Platform
- New Edge VM XLarge form factor provides more scale for advanced services and better throughput.
L3 Networking
- Change of Tier0 Gateway HA mode through UI/API offers the option to change Tier-0 gateway High Availability mode from Active/Active to Active/Standby and vice versa through UI and API.
- VRF Lite support provides multi-tenant data plane isolation through Virtual Routing Forwarding (VRF) in Tier-0 gateway. VRF has its own isolated routing table, uplinks, NAT and gateway firewall services.
- L3 EVPN support provides a northbound connectivity option to advertise all VRFs on a Tier-0 gateway through MP-BGP EVPN AFI (Route Type 5) to a Provider Edge and maintain the isolation on the dataplane with VXLAN encapsulation by using one VNI per VRF.
- Rate-limit support on Tier-1 gateways provides the ability to rate-limit all the traffic going egress and ingress of the Tier1 gateway uplink.
- Metadata Proxy support in policy and UI enhances the intent-based API and policy UI to configure Metadata Proxy.
- DHCP server policy and UI enhances the intent-based API and policy UI to configure a DHCP server locally to a segment.
- Policy API for L3 enhances the intent-based API and policy UI to retrieve runtime information on the gateways.
NAT64 offers a transition mechanism from IPv4 to IPv6. It provides stateful Network Address Translation from IPv6 to IPv4 following standard RFC 6146.