VMware is providing a consistent operational fabric across multi-cloud and hybrid environments, allowing applications to be deployed and to run with a single click. Within this context, enterprises are focused on managing the risks of performance and security when delivering applications. NETSCOUT is the leader in providing consistent, real-time visibility and a precise, early warning system into application and service level performance risks and rapid triage to resolve problems across the data center and multi-Cloud. This session details how VMware NSX and NETSCOUT have partnered to provide the next-generation, end to end visibility and troubleshooting analytics which can be deployed natively, invisible to the workload, within the VMware Virtual Cloud Network and NSX-T fabric and across legacy and transformed data center architectures.

1. #vmworld
CNET5670BUS
End to End Application
Visibility & Troubleshooting
in a Virtual Cloud Network (NSX)
Ray Krug, NETSCOUT
#CNET5670BUS

2. COPYRIGHT © 2018 NETSCOUT SYSTEMS, INC. | CONFIDENTIAL & PROPRIETARY 2
Assuring & Protecting the Connected World
Visibility Without Borders

3. COPYRIGHT © 2018 NETSCOUT SYSTEMS, INC. | CONFIDENTIAL & PROPRIETARY 3
Visibility Without Borders
Gives the Confidence To Innovate
Any
Network
• 2G/3G/4G/5G
• WiFi
• RAN
• Core
• IMS
• IoT
• Cable/Fixed
• Data Center
• SD-WAN
…
Any
Cloud
• Private Cloud
• Public Cloud
• On-Prem
• Edge
• Perimeter
• VMware
• Kubernetes
• OpenStack
• AWS
• Azure
• IBM
• Oracle
…
Any
Way
• Appliance
• Software
• Virtual
• NFV
• SaaS
Any
Use Case
• Application &
Network
Troubleshooting
• Service
Assurance
• Security
• Analytics
- Big Data
- ML/AI
- Automation
- Orchestration
Any
Service
• Voice, VoLTE
• Video
• User Apps
• OTT
• Channel Guide
• Meters
• Cars
• Healthcare
• Smart Cities
• Entertainment
• Gaming
• Service
Enablers
…
3

4. COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. | CONFIDENTIAL & PROPRIETARY 4
Our Customers
Financials
Global EnterprisesOnline Healthcare Systems
Service Providers
Solving the toughest problems for the Largest IP Networks in the World

5. COPYRIGHT © 2018 NETSCOUT SYSTEMS, INC. | CONFIDENTIAL & PROPRIETARY 5
vSTREAM NSX-T Integration
Smart Visibility

6. COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. | CONFIDENTIAL & PROPRIETARY 6
Smart Visibility
vSTREAM
• Visibility into Multi-Cloud Environments
• Monitors North-South-East-West traffic
• Layer 2 through 7 Insights
• Cloud Native
• Automation/Orchestration Friendly
• ASI Patented Smart Data Technology
Accelerating Cloud Transformation
Security
Private
Smart
Data
AWS
AZURE
Google
Oracle
VMware
K8s/Containers
Big Data
Analytics
Service
Assurance
Automation
P
Public

7. COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. | CONFIDENTIAL & PROPRIETARY 7
1 Register NETSCOUT Partner Service
With VMware NSX Manager
vSTREAM / NSX-T Integration
1. Partner Service Registration to NSX-T
VMware NSX Manager nGeniusONE
ESXi
T1
DFW
T0
ESXi
T1
DFW
T0

8. COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. | CONFIDENTIAL & PROPRIETARY 8
1 Register NETSCOUT Partner Service
With VMware NSX Manager
vSTREAM / NSX-T Integration
1. Partner Service Registration to NSX-T
VMware NSX Manager nGeniusONE
ESXi
T1
DFW
T0
ESXi
T1
DFW
T0

9. COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. | CONFIDENTIAL & PROPRIETARY 9
vSTREAM / NSX-T Integration
2. Deploy Partner Service / Service Insertion
VMware NSX Manager nGeniusONE
2 Deploy NETSCOUT Partner Service
vSTREAM Service Virtual Machines
(Host or Cluster)
Overlay Transport Zone
vSTREAM Service Segment
Overlay Transport Zone
vSTREAM Service Segment
ESXi
T1
DFW
T0
ESXi
T1
DFW
T0

10. COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. | CONFIDENTIAL & PROPRIETARY 10
vSTREAM Service Deployment
vSTREAM SVM
vSTREAM SVM
- Host mode
- Deployed with vCenter into each host in the NSX-T cluster
- Deployment specification maps to the vSTREAM ovf
vSTREAM SVM
- eth0 management network
- eth1 monitoring interface (service segment)

11. COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. | CONFIDENTIAL & PROPRIETARY 11
vSTREAM Service Deployment
Service Instances
vSTREAM service virtual machine automatically deployed in each ESXi Host

12. COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. | CONFIDENTIAL & PROPRIETARY 12
vSTREAM / NSX-T Integration
3. Define NSX-T Network Introspection (E-W), Service chain and Policy
VMware NSX Manager nGeniusONE
Service
Chain
Policy
Rules
Service
Profile
Network Introspection (E-W)
• Service Profile
• Service Chain
• Policy Rules
3
Service
Chain
Policy
Rules
Service
Profile
Overlay Transport Zone
vSTREAM Service Segment
Overlay Transport Zone
vSTREAM Service Segment
ESXi
T1
DFW
T0
ESXi
T1
DFW
T0
vSTREAM
TAG
vSTREAM
TAG

13. COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. | CONFIDENTIAL & PROPRIETARY 13
NSX-T Network Introspection (E-W)
Service Profile and Chains
vSTREAM in the
Service Chain
vSTREAM_SP
Service Profile
vSTREAM Service Segment forwarding to vSTREAM_SP

14. COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. | CONFIDENTIAL & PROPRIETARY 14
NSX-T Network Introspection (E-W) - Rules
VMs with tag vSTREAM
Action is to “Redirect” traffic to the vSTREAM Service Chain

15. COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. | CONFIDENTIAL & PROPRIETARY 15
vSTREAM / NSX-T Integration
4. Application Troubleshooting and Monitoring using nGeniusONE
VMware NSX Manager
Smart
Data
nGeniusONE
Service
Chain
Policy
Rules
Service
Profile
Network Introspection (E-W)
• Service Profile
• Service Chain
• Policy Rules
3
Service
Chain
Policy
Rules
Service
Profile
Overlay Transport Zone
vSTREAM Service Segment
Overlay Transport Zone
vSTREAM Service Segment
ESXi
T1
DFW
T0
ESXi
T1
DFW
T0

16. COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. | CONFIDENTIAL & PROPRIETARY 16
Agentless
Deployment
• vSTREAM SVM runs independently from the application VMs
• Analytics computed close to the data source
• No need to ship packets across the network
Seamless Application
Visibility Management
• Automated Service Insertion
• Automated Application Visibility
• Using NSX-T introspection (E-W) policies
Simple
Deployment Model
• Automated Orchestration using vCenter
• Enter NSX Manager credentials, and install in a few simple clicks
Certified
VMware Ready
• VMware NETSCOUT Partnership
• End to End Application Troubleshooting in the Cloud
• ESX, NSX-V, NSX-T, AWS
Key Benefits
Implementing NETSCOUT vSTREAM as Partner Service

17. COPYRIGHT © 2018 NETSCOUT SYSTEMS, INC. | CONFIDENTIAL & PROPRIETARY 17
Use Case
End to End Application
Visibility & Troubleshooting
in a Virtual Cloud Network (NSX)

18. COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. 18
NSX-T
Segmented
Network with
Zero Trust
Model
Web web2 web3web1 web4
DNS1 AD-2 AD-3
Shared
Services NAS
Application Stock
Manager
Offer
Manager
Stock
Manager
Database
SqlDB OraDB
Users
HTTP (8061)HTTP/REST (8060)
LDAP2(389)DNS(53)NFS(2206)
MySQL (3306) Oracle (1514)
Demo Application Architecture
VMware NSX Data Center
Deployed over
2 ESXi Hosts
in NSX-T
Cluster

19. COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. 19
NSX-T Distributed Firewall controls application flow

20. COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. 20
NSX-T Group vSTREAM
Virtual Machines
tagged with ‘vSTREAM’
for E-W monitoring...

21. COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. 21
NETSCOUT Smart Data Application Flow Discovery
App
Web
Database
NFS
Active
Directory
Users
DNS
Smart Data and
Smart Analytics
ESXi Host
Awareness

22. COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. 22
Application Assurance in a Micro-Segmented
NSX-T Deployment
Application
Micro-Service “Stock
Manager” with
Failures

23. COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. 23
ASI Metrics for Service Tiers
Transaction Application Response vs Network Response vs Errors
Application
Response
Time
Network
Response
Time
Application
Errors
App Tier
Oracle
Database
Tier
Slow App Response
Slow
Network Response

24. COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. 24
Service Monitor - Investigate Performance Issue
Performance of Each VM in Application Tier
Virtual Machine
“stockm1”
Running on
Host ESXi-240
Virtual Machine
“stockm1” Much
Slower Than
“stockm2”

25. COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. 25
Session Analysis
Application Detail (API/Error etc)
Application Details
Session Ladder
Diagrams

26. COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. 26
Detailed Packet
Analysis providing
evidence to
Dev Teams
Packet Decode – Forensic Evidence

27. COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. 27
Automated Machine Learning, Analysis and Alerting
nGeniusONE already has pinpointed the issue…

28. COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. 28COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC.
NETSCOUT Visibility in the Multi Cloud

29. COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. 29
Azure VPN
Gateway
vSTREAM ‘lights up’ the Multi-cloud
Azure / AWS / Oracle / Google / IBM Softlayer / VMware Cloud on AWS
IPSec
Gateway
VPN
Gateway
VPN
Gateway
VPN
Gateway
VPN
Gateway
MicroServices
App
Inventory App
Corporate
Data Center
Active
Directory
DNS
DB-CorpnGeniusONE
Global
Packet
fwd GRE
to corp
Registration App
Packet fwd
udp to corp
MicroServices
App
MicroServices
App
MicroServices
App

30. COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. 30
Visibility Without Borders
The Multi-Cloud Data Center

31. COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. 31COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC.
Smart Application Troubleshooting and Monitoring in NSX-T
Summary

32. COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. 32
Smart Application Troubleshooting and Monitoring in NSX-T
Consistent visibility in Hybrid Data Center
Physical and virtual continuity
Automated Agentless Deployment in NSX-T
Orchestration delivered through NSX Manager and vCenter
Visibility controlled by NSX-T Security Policies
Using NSX-T groups based VM tag
Migrate to the VMware NSX Data Center with Confidence

33. COPYRIGHT © 2019 NETSCOUT SYSTEMS, INC. 33
Thank You.
www.netscout.com
Ray Krug
Solutions Architect
ray.krug@netscout.com