With vCloud Director 8.20 has VMware started to let the tenants and admins consume NSX function via the vCloud Director API endpoint. The NSX function in vCloud Director are only a subset of the native NSX features but the API is identical. To leverage the API and the features itself more comfortable I have started to create my own PowerShell Module for vCloud Director NSX API.

vCloud Director NSX API Dokumentation

The vCloud Director API for NSX Programming Guide highlights beside the documentation itself two important informations:

• The vCloud Director API for NSX is not part of the vCloud API.
  • The vCloud Director acts like a proxy to authenticated users and the NSX API can be accessed via https://vcloud.example.com/network
• The vCloud Director API for NSX supports a subset of the operations and objects defined in the NSX API
  • That means that the NSX for vSphere API Guide is valid for the vCloud Director API for NSX but only a subset of the features is available

My PowerShell Module for vCloud Director NSX API

The Module was created with the intention to give vCloud Director Administrator the capability the vCloud Director NSX Features like in native NSX with the PowerNSX PowerShell Module. Of course, the PowerNSX module is way more advanced.

With the version 1.1 of my PowerShell Module for vCloud Director NSX API I have implemented the basic get operations to report Firewall and NAT rules.

New-NsxVcdApiConnection

This functions connect to the vCloud Director API with the highest available ApiVersion.

1

New-NsxVcdApiConnection [-Server] <String> [-Credential] <PSCredential> [<CommonParameters>]

New-NsxVcdApiConnection - Details

Get-NsxVcdEdge

This function reports all available Edge Gateways. The Gateways can be filtered by Name and OrgVdcName.

1

Get-NsxVcdEdge [[-Name] <String>] [[-OrgVdcName] <String>] [<CommonParameters>]

Get-NsxVcdEdge - Details

Get-NsxVcdEdgeDetails

This function shows all available details of one Edge Gateway. Get-NsxVcdEdge can be used as pipe.

1

Get-NsxVcdEdgeDetails [-Id] <String> [<CommonParameters>]

Get-NsxVcdEdgeDetails - Details

Get-NsxVcdEdgeFirewallRule

This function gets the firewall rules of one ore more Edge Gateways. Rules can be filtered by Id and instead of a table or list the output can also be the XML from the API.

1

Get-NsxVcdEdgeFirewallRule [-Id] <String> [[-RuleId] <Int64>] [-OutputXML] [<CommonParameters>]

Get-NsxVcdEdgeFirewallRule - Details

Get-NsxVcdEdgeFirewallRuleDetails

This functions creates a more readable summary of an Edge Gateway firewall rule.

1

Get-NsxVcdEdgeFirewallRuleDetails [-Id] <String> [-RuleId] <Int64> [<CommonParameters>]

Get-NsxVcdEdgeDetails - Details

Get-NsxVcdEdgeNatRule

This function gets the NAT (SNAT and DNAT) rules of one or more Edge Gateways.

1

Get-NsxVcdEdgeNatRule [[-Id] <String>] [<CommonParameters>]

Get-NsxVcdEdgeNatRule - Details

Get-NsxVcdDfwRule

This function returnes all Distributed Firewall Rules (DFW) of the selected OrgVdc. You can switch between -layer3Sections and -layer2Sections.

1
2
3
4
5

# layer3Sections
Get-NsxVcdDfwRule -OrgVdcId <String> [-RuleId <String>] [-layer3Sections] [-OutputXML] [<CommonParameters>]

# layer2Sections
Get-NsxVcdDfwRule -OrgVdcId <String> [-RuleId <String>] [-layer2Sections] [-OutputXML] [<CommonParameters>]

Get-NsxVcdDfwRule - Details

Get the Module

• PowerShell Gallery
• GitHub
• Read The Docs

Help to improve the Module

I would be glad about a feedback if this module helps you. If you find a new Bug or have an idea for an enhancement, just file a GitHub Issue or open a new pull request.

I have already set some goals for the next version(s) of the module: