https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.2/administration/GUID-53D6C4807AD3-4B23-922D-430C89992B57.html
In VMware NSX 4.x, the Tier-0 gateway serves as a critical component for North-South traffic
management, which refers to the traffic entering and exiting the data center. It essentially acts as a
bridge between the external networks and the internal NSX-T Data Center environment.
The Tier-0 gateway is designed to handle various functionalities including routing, NAT, and
firewalling, making it an effective point for network introspection. Network introspection at the Tier-
0 gateway allows administrators to monitor, manage, and secure the traffic as it flows between
different networks, including the traffic headed to and from the internet or other external networks.
Here's why other options are less appropriate:
A) Guest VM vNIC: This refers to the virtual network interface cards attached to virtual machines.
While they handle East-West traffic (traffic within the data center), they are not typically used for
North-South traffic introspection.
B) Partner SVM: Service Virtual Machines (SVMs) provided by third-party vendors can integrate with
NSX for various services like security, but they are not the direct insertion points for North-South
traffic introspection.
D) Host Physical NIC: These are the network interface cards on the physical hosts. Although they are
involved in the underlying transport of North-South traffic, they do not serve as insertion points for
introspection in the context of NSX.
By utilizing the Tier-0 gateway for North-South introspection, organizations can achieve a centralized
and efficient approach to traffic management and security at the entry/exit points of the network.
Reference:
VMware NSX-T Data Center documentation provides detailed explanations of gateway functionalities
and their roles in network introspection.
VMware NSX-T Architecture and Component guides detail the use of Tier-0 and Tier-1 gateways in
traffic management and security implementations.
