VMware Cloud Director 10.5.1 is now GA and is stuffed with new networking options which doesn’t imply the mixing with VMware NSX Superior Load Balancer will stay with none enhancements.

There are two vital new options together with some UI enhancements that straight impression the Load Balancer as a Service (LBaaS) capabilities of VMware Cloud Director:

• Digital Service Logs
• Internet Utility Firewall (WAF)

Digital Service Logs

As an extension to the Digital Service Analytics accessible in earlier VMware Cloud Director variations, 10.5.1 additionally makes the Digital Service Logs accessible to tenants. 

When creating a brand new digital service all of the analytics associated configs are robotically populated by the mixing. This ends in utilizing the System-Analytics-Profile as an analytics profile and the next settings for logging:

• Important log throttle – 10 logs/sec
• Person outlined filters log throttle – 10 logs/sec

Nevertheless, tenants can determine whether or not to seize non-significant logs by checking the Non-Crucial Logging checkbox whereas creating a brand new digital service or modifying an present one. As soon as activated, the logging settings are as follows:

• Non-significant log throttle – 10 logs/sec
• Non-significant log length – half-hour

Presently, none of those settings might be modified by the VMware Cloud Director UI.

To entry the logs, that you must choose a digital service and navigate to the brand new Logs tab.

Every log entry shows a timestamp, consumer IP, URI, request sort, response code, dimension, complete time in ms, and WAF standing (if accessible).

To show prolonged info, that you must choose the specified entry. It’s going to reveal the consumer request, load balancer, and utility response particulars.

The logs might be exported to a CSV file straight from the VMware Cloud Director UI.

Internet Utility Firewall (WAF)

The self-service Internet Utility Firewall configuration per digital service is one other enhancement launched by VMware Cloud Director 10.5.1. It’s made accessible as part of the Premium Characteristic Set.

Now, for every digital service, tenants can:

• allow WAF
• set the operation mode – detection or enforcement
• create allowlist guidelines
• choose which signature teams to be activated or deactivated
• activate/deactivate particular person signatures in each group

When the WAF configuration is created in VMware Cloud Director for a digital service, the mixing robotically creates a WAF coverage and a WAF profile in NSX Superior Load Balancer.

WAF profile

As the advice engine could modify the WAF profile, every digital service will get its personal created by the mixing. Initially, it’s a copy of System-WAF-Profile containing all its settings.

WAF Coverage

A brand new WAF Coverage is robotically created out of the System-WAF-Coverage for every digital service the place WAF is enabled. This implies all of the settings that aren’t accessible for configuration by the VMware Cloud Director UI can have their values set in keeping with the System-WAF-Coverage.

WAF in Logs

When a digital service has WAF enabled, every log entry has details about its WAF Standing – Rejected, Flagged, Handed, Bypassed, or Not Relevant. 

If a violation is detected, the log particulars additionally embrace details about the violated protocol in addition to remediation suggestions.

You may verify the VMware Cloud Director 10.5.1 GA weblog for extra details about the opposite new options included on this launch.