{"id":1444,"date":"2018-05-14T17:12:52","date_gmt":"2018-05-14T15:12:52","guid":{"rendered":"http:\/\/blog.purplescreen.fr\/?p=1444"},"modified":"2018-05-15T09:47:21","modified_gmt":"2018-05-15T07:47:21","slug":"traffic-filtering-and-masking","status":"publish","type":"post","link":"http:\/\/blog.purplescreen.fr\/?p=1444","title":{"rendered":"Traffic Filtering and Masking"},"content":{"rendered":"

On last week, I spoke with a friend about Traffic Filtering on vSphere. I realised that he has not been really knowledge about this feature. So, I decided to post a new article about it, because I think it’s a great feature and it’s useful as well. For example, I think it’s very useful to tag some traffic like vSAN or Tag\/Drop\/Allow traffic between some Virtual Machines. Anyway, I think it’s just useful for design and implementation. I’m going to explain how you can implement it, but be careful with some options.
\nFirst, enable it on your distributed port group and click on the green button “+” to add a new rule.
\n\"Add<\/a>
\nAt this point, you can choose three actions options (Tag, Allow or Drop). Guess what ? If you choose tag, you can apply a QOS (COS or\/and DSCP) for your rule, contrary to Allow or Drop options.
\n\"Traffic<\/a>
\nNext, you have to specify traffic qualifier. Select direction of your traffic, Ingress, Egress or both. For reminder, when the traffic is entering to the dvSwitch, we can say that traffic is Ingress. And when the traffic is going out from the dvSwitch, we can say that traffic is Egress.
\n\"Ingress<\/a>
\nThen, click on the green button “+” as well as select traffic type qualifier (Mac qualifier, IP qualifier or System Traffic qualifier).
\n\"Traffic<\/a>
\nSystem Traffic qualifier is a little bit different as MAC and IP Qualifier. It’s based on flow only, so this rule is applied on all of this traffic flow. I don’t detail these options later on this post, so\u00a0if you would like more details, please look at documentation on VMware web site or take a look at your environment.<\/p>\n

Here’s a quick overview around these three options.<\/p>\n

Traffic qualifier, you can filter any traffic flow of your infrastructure. These options are a part of the system setup by default. In my knowledge, you couldn’t add anything else, but it’s enough.
\n\"System<\/a>
\nMac qualifier, you can add any kind of these protocols type (TCPv4, TCPv6, or ARP) as well as a VLAN ID. After that, select your source and destination address, you can select a lot of options to meet your requirement.
\n\"MAC<\/a>
\nIP Qualifier, you can add any kind of these protocols type (TCP, UDP, ICMP, IPv6-ICMP) as well as the source and the destination port. Same as Mac Qualifier, you can add a lot of options to meet your requirement.
\n\"IP<\/a><\/p>\n

Finally, you can up or down any rules depending on his priority. Here’s the Dashboard.
\n\"Rules<\/a><\/p>\n

Have fun !!<\/p>\n","protected":false},"excerpt":{"rendered":"

On last week, I spoke with a friend about Traffic Filtering on vSphere. I realised that he has not been really knowledge about this feature. So, I decided to post a new article about it, because I think it’s a great feature and it’s useful as well. For example, I think it’s very useful to…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[14],"tags":[42,54,53],"yoast_head":"\nTraffic Filtering and Masking - PurpleScreen<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"http:\/\/blog.purplescreen.fr\/?p=1444\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"ogosselin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"http:\/\/blog.purplescreen.fr\/?p=1444\",\"url\":\"http:\/\/blog.purplescreen.fr\/?p=1444\",\"name\":\"Traffic Filtering and Masking - PurpleScreen\",\"isPartOf\":{\"@id\":\"http:\/\/blog.purplescreen.fr\/#website\"},\"datePublished\":\"2018-05-14T15:12:52+00:00\",\"dateModified\":\"2018-05-15T07:47:21+00:00\",\"author\":{\"@id\":\"http:\/\/blog.purplescreen.fr\/#\/schema\/person\/ad63980c08d122ffe9115ade81b21fd3\"},\"breadcrumb\":{\"@id\":\"http:\/\/blog.purplescreen.fr\/?p=1444#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"http:\/\/blog.purplescreen.fr\/?p=1444\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"http:\/\/blog.purplescreen.fr\/?p=1444#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"http:\/\/blog.purplescreen.fr\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Traffic Filtering and Masking\"}]},{\"@type\":\"WebSite\",\"@id\":\"http:\/\/blog.purplescreen.fr\/#website\",\"url\":\"http:\/\/blog.purplescreen.fr\/\",\"name\":\"PurpleScreen\",\"description\":\"by Olivier Gosselin\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"http:\/\/blog.purplescreen.fr\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"http:\/\/blog.purplescreen.fr\/#\/schema\/person\/ad63980c08d122ffe9115ade81b21fd3\",\"name\":\"ogosselin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"http:\/\/blog.purplescreen.fr\/#\/schema\/person\/image\/\",\"url\":\"http:\/\/0.gravatar.com\/avatar\/6a053a3dca3cccbeecd37d492189f38f?s=96&d=mm&r=g\",\"contentUrl\":\"http:\/\/0.gravatar.com\/avatar\/6a053a3dca3cccbeecd37d492189f38f?s=96&d=mm&r=g\",\"caption\":\"ogosselin\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/olivier-gosselin-30090498\/\"],\"url\":\"http:\/\/blog.purplescreen.fr\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Traffic Filtering and Masking - PurpleScreen","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"http:\/\/blog.purplescreen.fr\/?p=1444","twitter_misc":{"Written by":"ogosselin","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"http:\/\/blog.purplescreen.fr\/?p=1444","url":"http:\/\/blog.purplescreen.fr\/?p=1444","name":"Traffic Filtering and Masking - PurpleScreen","isPartOf":{"@id":"http:\/\/blog.purplescreen.fr\/#website"},"datePublished":"2018-05-14T15:12:52+00:00","dateModified":"2018-05-15T07:47:21+00:00","author":{"@id":"http:\/\/blog.purplescreen.fr\/#\/schema\/person\/ad63980c08d122ffe9115ade81b21fd3"},"breadcrumb":{"@id":"http:\/\/blog.purplescreen.fr\/?p=1444#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["http:\/\/blog.purplescreen.fr\/?p=1444"]}]},{"@type":"BreadcrumbList","@id":"http:\/\/blog.purplescreen.fr\/?p=1444#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"http:\/\/blog.purplescreen.fr\/"},{"@type":"ListItem","position":2,"name":"Traffic Filtering and Masking"}]},{"@type":"WebSite","@id":"http:\/\/blog.purplescreen.fr\/#website","url":"http:\/\/blog.purplescreen.fr\/","name":"PurpleScreen","description":"by Olivier Gosselin","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"http:\/\/blog.purplescreen.fr\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"http:\/\/blog.purplescreen.fr\/#\/schema\/person\/ad63980c08d122ffe9115ade81b21fd3","name":"ogosselin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"http:\/\/blog.purplescreen.fr\/#\/schema\/person\/image\/","url":"http:\/\/0.gravatar.com\/avatar\/6a053a3dca3cccbeecd37d492189f38f?s=96&d=mm&r=g","contentUrl":"http:\/\/0.gravatar.com\/avatar\/6a053a3dca3cccbeecd37d492189f38f?s=96&d=mm&r=g","caption":"ogosselin"},"sameAs":["https:\/\/www.linkedin.com\/in\/olivier-gosselin-30090498\/"],"url":"http:\/\/blog.purplescreen.fr\/?author=1"}]}},"_links":{"self":[{"href":"http:\/\/blog.purplescreen.fr\/index.php?rest_route=\/wp\/v2\/posts\/1444"}],"collection":[{"href":"http:\/\/blog.purplescreen.fr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/blog.purplescreen.fr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/blog.purplescreen.fr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/blog.purplescreen.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1444"}],"version-history":[{"count":65,"href":"http:\/\/blog.purplescreen.fr\/index.php?rest_route=\/wp\/v2\/posts\/1444\/revisions"}],"predecessor-version":[{"id":1526,"href":"http:\/\/blog.purplescreen.fr\/index.php?rest_route=\/wp\/v2\/posts\/1444\/revisions\/1526"}],"wp:attachment":[{"href":"http:\/\/blog.purplescreen.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1444"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/blog.purplescreen.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1444"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/blog.purplescreen.fr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1444"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}