{"id":801,"date":"2024-03-01T00:00:00","date_gmt":"2024-02-29T21:00:00","guid":{"rendered":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/?p=801"},"modified":"2026-10-06T02:41:35","modified_gmt":"2026-10-05T23:41:35","slug":"vmware-nsx-nedir","status":"publish","type":"post","link":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/networking\/vmware-nsx-nedir\/","title":{"rendered":"VMWare NSX Nedir? NSX\u2019in Temel \u00d6zellikleri ve Y\u00f6netimi"},"content":{"rendered":"
\n

VMware NSX, sanalla\u015ft\u0131r\u0131lm\u0131\u015f ortamlarda a\u011f ve g\u00fcvenlik i\u015flevlerinin yaz\u0131l\u0131m \u00fczerinden tan\u0131mlanmas\u0131yla ili\u015fkilendirilen bir \u00fcr\u00fcn ailesidir. Mant\u0131ksal a\u011flar ve politikalar, fiziksel ba\u011flant\u0131lar\u0131n \u00fczerinde \u00e7al\u0131\u015f\u0131r. NSX ad\u0131 tek ba\u015f\u0131na belirli bir mimariyi, lisans kapsam\u0131n\u0131 veya b\u00fct\u00fcn \u00f6zelliklerin her s\u00fcr\u00fcmde bulundu\u011funu g\u00f6stermez.<\/p>\n

\"Y\u00f6netim
Politika y\u00f6netimi, trafik iletimi ve fiziksel ba\u011flant\u0131 farkl\u0131 inceleme katmanlar\u0131d\u0131r.
G\u00f6rseli b\u00fcy\u00fct \u2192<\/a><\/figcaption><\/figure>\n

Mant\u0131ksal a\u011f fiziksel a\u011f\u0131 kald\u0131rmaz<\/h2>\n

Yaz\u0131l\u0131m tan\u0131ml\u0131 a\u011f, segment ve ba\u011flant\u0131lar\u0131n y\u00f6netimini fiziksel kablo d\u00fczeninden k\u0131smen ay\u0131rabilir. Buna ra\u011fmen ana sistem ba\u011flant\u0131s\u0131, y\u00f6nlendirme, MTU ve fiziksel kapasite \u00f6nemini korur. Mant\u0131ksal a\u011f\u0131n do\u011fru g\u00f6r\u00fcnmesi, alttaki b\u00fct\u00fcn yollar\u0131n sa\u011fl\u0131kl\u0131 oldu\u011fu anlam\u0131na gelmez.<\/p>\n

Bir eri\u015fim sorununun nedeni sanal segment, a\u011f ge\u00e7idi, g\u00fcvenlik kural\u0131 veya fiziksel ba\u011flant\u0131 olabilir. \u0130nceleme i\u00e7in uygulaman\u0131n kaynak ve hedefini, protokol\u00fcn\u00fc ve hangi yoldan ge\u00e7ti\u011fini belirleyin. Sadece y\u00f6netim panelindeki nesnelerin varl\u0131\u011f\u0131n\u0131 kontrol etmek yerine ger\u00e7ek trafik ak\u0131\u015f\u0131n\u0131 ad\u0131m ad\u0131m do\u011frulay\u0131n.<\/p>\n

Y\u00f6netim, ilke ve ger\u00e7ek trafik<\/h2>\n

NSX Manager, NSX ortam\u0131n\u0131 y\u00f6netmek i\u00e7in web aray\u00fcz\u00fc ve API sunucusu sa\u011flar. VCF 9.1 belgesinde Policy modu tan\u0131mlan\u0131r; VCF 9.0\u2019dan itibaren eski Manager modu ve Manager API\u2019si desteklenmez. Eski bir rehberi uygulamadan \u00f6nce kurulu s\u00fcr\u00fcm\u00fcn sundu\u011fu aray\u00fcz\u00fc do\u011frulay\u0131n. Y\u00f6netim aray\u00fcz\u00fcn\u00fcn bir ayar\u0131 kabul etmesi, uygulaman\u0131n ger\u00e7ek trafik ak\u0131\u015f\u0131n\u0131n beklendi\u011fi gibi \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 tek ba\u015f\u0131na g\u00f6stermez.<\/p>\n

Kurulum \u00f6ncesinde \u00fcr\u00fcn s\u00fcr\u00fcm\u00fcn\u00fc, ana sistem ve y\u00f6netim platformu uyumlulu\u011funu, lisans hakk\u0131n\u0131 ve desteklenen topolojiyi do\u011frulay\u0131n. Eski NSX belgelerinde ge\u00e7en bir \u00f6zelli\u011fin ayn\u0131 adla veya ayn\u0131 ko\u015fullarda bulundu\u011funu varsaymay\u0131n. Bu rehber kavramsal \u00e7er\u00e7eve sunar; belirli bir s\u00fcr\u00fcm i\u00e7in da\u011f\u0131t\u0131m tarifi de\u011fildir.<\/p>\n

Segmentasyonun amac\u0131<\/h2>\n

Bir uygulaman\u0131n web, uygulama ve veri katmanlar\u0131 her hedefe s\u0131n\u0131rs\u0131z eri\u015fmek zorunda de\u011fildir. Mikrosegmentasyon yakla\u015f\u0131m\u0131, gerekli ak\u0131\u015flar\u0131 daha dar s\u0131n\u0131rlarla tan\u0131mlamaya yard\u0131mc\u0131 olabilir. Kural\u0131n kapsam\u0131, uygulama gruplar\u0131n\u0131n do\u011fru tan\u0131mlanmas\u0131na ve \u00fcyeliklerin g\u00fcncel kalmas\u0131na ba\u011fl\u0131d\u0131r.<\/p>\n

Etiket veya grup \u00fcyeli\u011fi de\u011fi\u015fti\u011finde bir i\u015f y\u00fck\u00fcn\u00fcn eri\u015fimi de de\u011fi\u015febilir. Bu y\u00fczden gruplar\u0131n sahibini, \u00fcyelik mant\u0131\u011f\u0131n\u0131 ve de\u011fi\u015fiklik yetkisini kaydedin. \u201c\u0130\u00e7 a\u011f g\u00fcvenlidir\u201d varsay\u0131m\u0131 yerine belirli ba\u011flant\u0131n\u0131n neden gerekli oldu\u011funu a\u00e7\u0131klay\u0131n. S\u0131f\u0131r g\u00fcven yakla\u015f\u0131m\u0131 yaln\u0131z bir a\u011f \u00fcr\u00fcn\u00fc sat\u0131n almakla tamamlanmaz; kimlik ve uygulama kontrolleri de gerekir.<\/p>\n

Kurallar\u0131 kesinti olu\u015fturmadan geli\u015ftirin<\/h2>\n
    \n
  1. Uygulaman\u0131n kaynak, hedef, port ve protokol ba\u011f\u0131ml\u0131l\u0131klar\u0131n\u0131 envantere al\u0131n.<\/li>\n
  2. Varsay\u0131mlar\u0131 trafik ve uygulama sahibiyle do\u011frulay\u0131n; sessiz d\u00f6nemleri tek kan\u0131t saymay\u0131n.<\/li>\n
  3. Dar bir uygulama grubunda kontroll\u00fc politika de\u011fi\u015fikli\u011fi deneyin.<\/li>\n
  4. Hem gerekli eri\u015fimi hem engellenmesi gereken yollar\u0131 kontrol edin.<\/li>\n
  5. De\u011fi\u015fiklik gerek\u00e7esini, sonucu ve geri d\u00f6n\u00fc\u015f ad\u0131m\u0131n\u0131 kaydedin.<\/li>\n<\/ol>\n

    G\u00fcnl\u00fcklerde g\u00f6r\u00fclen her engellemeyi otomatik izin kural\u0131na \u00e7evirmek g\u00fcvenlik tasar\u0131m\u0131n\u0131 zay\u0131flatabilir. Ak\u0131\u015f\u0131n i\u015f gereksinimini anlamadan geni\u015f kural a\u00e7may\u0131n. Ayn\u0131 \u015fekilde yaln\u0131z hi\u00e7 trafik g\u00f6r\u00fcnmemesine dayanarak kritik bir d\u00f6nemsel ba\u011flant\u0131y\u0131 kald\u0131rmay\u0131n.<\/p>\n

    \u0130\u015fletim ve kapasite<\/h2>\n

    Y\u00f6netim eri\u015fimi, yap\u0131land\u0131rma yedekleri, sertifika s\u00fcreleri ve y\u00fckseltme s\u0131ras\u0131 i\u00e7in sorumlu ekip belirleyin. A\u011f ge\u00e7idi kapasitesi, trafik y\u00f6n\u00fc ve ek hizmetlerin kaynak t\u00fcketimi se\u00e7ilen mimariye g\u00f6re de\u011ferlendirilmelidir. Mant\u0131ksal a\u011f nesnesi olu\u015fturmak fiziksel kapasiteyi art\u0131rmaz; b\u00fcy\u00fcmeyi uygulama trafi\u011fiyle birlikte \u00f6l\u00e7\u00fcn.<\/p>\n

    Bir ar\u0131za senaryosunda hangi ba\u011flant\u0131lar\u0131n etkilenebilece\u011fini \u00f6nceden tan\u0131mlay\u0131n. Devralma veya bak\u0131m testinde yaln\u0131z bile\u015fen durumuna de\u011fil, kullan\u0131c\u0131n\u0131n tamamlayabildi\u011fi i\u015fleme bak\u0131n. Bu yakla\u015f\u0131m a\u011f y\u00f6netimini uygulaman\u0131n ger\u00e7ek hizmet ihtiyac\u0131yla ili\u015fkilendirir.<\/p>\n

    S\u0131k sorulan sorular<\/h2>\n
    \n
    NSX fiziksel anahtarlara ihtiyac\u0131 kald\u0131r\u0131r m\u0131?<\/strong><\/dt>\n
    \n

    Hay\u0131r. Mant\u0131ksal a\u011flar fiziksel a\u011f ta\u015f\u0131mas\u0131na ba\u011fl\u0131d\u0131r. Kapasite, MTU, y\u00f6nlendirme ve ba\u011flant\u0131 sa\u011fl\u0131\u011f\u0131 \u00f6nemini korur.<\/p>\n<\/dd>\n

    NSX kurulunca b\u00fct\u00fcn uygulamalar otomatik izole olur mu?<\/strong><\/dt>\n
    \n

    \u0130zolasyon kullan\u0131lan mimari, do\u011fru gruplama ve uygulanan politikalara ba\u011fl\u0131d\u0131r. Kurulumun tamamlanmas\u0131 do\u011fru eri\u015fim modelinin kuruldu\u011funu tek ba\u015f\u0131na g\u00f6stermez.<\/p>\n<\/dd>\n<\/dl>\n

    Sonraki ad\u0131m<\/h2>\n

    G\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131<\/a> ve bulut g\u00fcvenli\u011fi g\u00f6revlerini<\/a> uygulama ak\u0131\u015flar\u0131yla e\u015fle\u015ftirin. Kurulu NSX s\u00fcr\u00fcm\u00fcne ait teknik belgelerden bile\u015fen ve yetenek kapsam\u0131n\u0131 do\u011frulay\u0131n.<\/p>\n

    Kaynaklar<\/h2>\n
      \n
    1. Broadcom \u2014 NSX in VCF 9.1<\/a><\/li>\n
    2. NIST SP 800-125B \u2014 Secure Virtual Network Configuration for Virtual Machine Protection<\/a><\/li>\n
    3. NIST SP 800-207 \u2014 Zero Trust Architecture<\/a><\/li>\n
    4. Broadcom \u2014 vDefend Firewall with Advanced Threat Prevention<\/a><\/li>\n
    5. Broadcom \u2014 NSX Manager in VCF 9.1: interface and Policy API scope<\/a><\/li>\n<\/ol>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

      VMware NSX, sanalla\u015ft\u0131r\u0131lm\u0131\u015f ortamlarda a\u011f ve g\u00fcvenlik i\u015flevlerinin yaz\u0131l\u0131m \u00fczerinden tan\u0131mlanmas\u0131yla ili\u015fkilendirilen bir \u00fcr\u00fcn ailesidir. Mant\u0131ksal a\u011flar ve politikalar, fiziksel ba\u011flant\u0131lar\u0131n \u00fczerinde \u00e7al\u0131\u015f\u0131r. NSX ad\u0131 tek ba\u015f\u0131na belirli bir mimariyi, lisans kapsam\u0131n\u0131 veya b\u00fct\u00fcn \u00f6zelliklerin her s\u00fcr\u00fcmde bulundu\u011funu g\u00f6stermez. Politika y\u00f6netimi, trafik iletimi ve fiziksel ba\u011flant\u0131 farkl\u0131 inceleme katmanlar\u0131d\u0131r.G\u00f6rseli b\u00fcy\u00fct \u2192 Mant\u0131ksal a\u011f fiziksel a\u011f\u0131 […]<\/p>\n","protected":false},"author":3,"featured_media":1382,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[30,26,24,31],"tags":[119,86,116,118,96,117,99],"class_list":["post-801","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-networking","category-bilgi-islem","category-bulut-danismanlik-hizmeti","category-guvenlik","tag-bulut-agi","tag-guvenlik","tag-nsx","tag-sanal-ag","tag-sanallastirma","tag-sdn","tag-vmware"],"_links":{"self":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts\/801","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/comments?post=801"}],"version-history":[{"count":5,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts\/801\/revisions"}],"predecessor-version":[{"id":815,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts\/801\/revisions\/815"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/media\/1382"}],"wp:attachment":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/media?parent=801"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/categories?post=801"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/tags?post=801"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}