Archive for the ‘virtual appliance’ Category
Virtual Security Solutions
When I first started VM /ETC by live blogging from VMworld 2007 last September, I posted a few entries about what I call “ton of bricks” moments. This happens to me usually when I am talking to vendors or other engineers about virtualization technologies, strategies or designs and I learn something new that is so simple but so important that it hits me like a ton of bricks. VMware’s Partner Exchange 2008 first such moment happened not because of a single conversation or breakout session, but because of a collective of virtual infrastructure security discussions.
Virtual Infrastructure presents some unique security challenges to administrators. Sure, virtual machines are networked servers just like physical servers and traditional security monitoring and intrusion detection products and processes can be deployed as usual. However, consolidation of servers has changed the attack surface from physical networking to virtualized networks contained within virtualization hosts. If a hacker were to compromise one of your VMs could your current security monitoring alert you of any suspicious activity? What if the activity never reached the core network switch or even the physical NICs of the host server, but instead was kept internal to the host by only attempting to compromise the VMs that shared the virtual switches? What if an intruder brought his own VM and started it up on one of your virtualization hosts, would you know it ever happened?
I have talked with several vendors this week that have solutions to provide visibility and monitoring of the internal virtual network activity and inter-VM communications. These solutions Read the rest of this entry »
Preventing ESX performance bottlenecks
Alex Bakman from blog.vkernel.com has created an interesting post about the possible performance bottlenecks of an ESX host. Want awesome performance in VMWARE ESX? is a high level strategy for preventing slow performance. Alex says it best in the post:
“To achieve stellar VMware ESX performance you have to remove ALL bottlenecks in your environment. Remember your performance will only be as fast as the slowest “link” in your performance equation.”
The post goes on to list four best practice tips and gives some brief info about each performance factor. Summarizing the list, the four tips are: Read the rest of this entry »
Zenoss VMwareESX Zenpack
Popular open source enterprise monitoring application Zenoss has a package for monitoring VMware ESX servers. Although I have never used Zenoss personally, I have run across several customers over the years who do. Check out Zenoss.com for more info about the application and the Zenpack package for monitoring ESX hosts.
A preconfigured Zenoss installation is available to download as a virtual appliance from the VMware Virtual Appliance Marketplace.
Here’s some more info from the web site: Read the rest of this entry »
Build new VMs for VMware Player with EasyVMX
So, you need to build a new VM. You don’t have a license for VMware Workstation? You don’t want to install VMware Server on your desktop? You realize the free VMware server is only supported on a few server operating systems, right? WinXP or Vista is not supported (you can make it work, but that’s another post for another time).
In my experience, the simplest solution has been to Read the rest of this entry »
Design a clustered VM application that can fully leverage VMotion, DRS, and HA?
This post is more of an idea then a report. If you’ve experimented with a design similar to my thoughts below please post a comment and let me know!
Have you tried to configure VMs in a MS cluster across separate ESX hosts? How about clustering a physical server with a VM? VMware’s guide can be found here. Referencing this guide I am specifically talking about “Clustering Virtual Machines Across Physical Hosts (Cluster Across Boxes)” and “Clustering Physical Machines and Virtual Machines (Standby Host)”.
Read the guide and you’ll find there are several prerequisites and restrictions. The most important ones being:
- you must use RDMs in physical mode for shared storage
- dedicate at least 2 physical nics to the VMs
- you can not use multipathing software
- you must use the LSILogic virtual SCSI adapter in your VMs
- you can only use 32 bit VMs. You can not cluster with 64 bit VMs
- iSCSI disks are not supported. NAS disks are not supported.
- you can only use 2 node clustering
- the boot disks for the VMs must be on local storage
- clustered VMs can not participate in an ESX cluster and use VMotion, DRS and HA
So how do we design a clustered VM application that can fully leverage VMotion, DRS, and HA? Read the rest of this entry »
Thursday 9.13.07 Keynote – what I missed :(
Unfortunately I slept late Thursday morning. Waking up at 7:30 am in Hayward, CA meant that there was no way short of a helicopter I was going to make it to San Francisco before 9. I’m pretty sure my company would not let me expense a helicopter so I decided to catch up on some email from the hotel until traffic burned off. I also had “Smash Head” from the party Weds night!
blog.scottlowe.org has some great notes on this session. Here’s my thoughts on what I missed. Read the rest of this entry »
Live VM backups from a VM – esXpress VBA
You don’t have the budget for the required infrastructure of VCB backups? Try esXpress from PHD technologies. I mean literally, try their free 30 day, fully functioning, fully supported demo that can back up live VMs to a dedicated VMFS partition, an FTP server, or both! After the 30 days you can continue to perform daily full backups for FREE!
Once you install it on all your ESX hosts, you can configure the backups from a basic console GUI or integrated within the VI client connected to the VC2 server.









