Archive for the ‘Work’ Category

h1

Excellent Set of Resources for VMWare HA

July 15, 2008

 

Scott and Chad have a good set of consolidated notes here if you find yourself needing to configure VMWare HA, with all the gotcha’s etc.

h1

Free EMC Celerra for your Home/Lab

July 9, 2008

 

Virtualgeek has an interesting post here about a freely downloadable VM version of their Celerra product, including an HA version. This is an excellent idea for testing and lab setups, and a powerful tool in your VM Lab arsenal alongside other offerings like Xtravirt Virtual SAN and OpenFiler.

I’ve been saying for a while that companies that make embedded h/w devices and appliances should try to offer versions of the software running their devices as VM’s so people can get them into lab/test environments quickly, most tech folk would rather download and play with something now, rather than have to book and take delivery of an eval with sales drones (apologies to any readers who work in sales) and pre-sales professional services, evaluation criteria etc. if your product is good it’s going to get recommended, no smoke and mirrors required.

As such VM appliances are an excellent pre-sales/eval tool, rather than stopping people buying products. Heck, they could even licence the VM versions directly for production use (as Zeus do with their ZXTM products); this is a very flexible approach and something that is important if you get into clouds as an internal or external service provider - the more you standardise on commodity hardware with a clever software layer the more you can recycle, reuse and redeploy without being tied into specific vendor hardware etc.

Most “appliances” in-use today are actually low-end PC motherboards with some clever software in a sealed box - for example I really like the Juniper SA range of SSL VPN appliances, I recently helped out with a problem on one which was caused by a failed HDD - if  you hook up the console interface its a commodity PC motherboard in a sealed case running a proprietary secure OS - as it’s all intel based, no reason it couldn’t also run as a VM (SLL accelerator h/w can be turned off in the software so there can’t be any hard dependency on any SSL accelerator cards inside the sealed box) - adopting VM’s for these appliances provides the same (maybe even better) level of standard {virtual} hardware that appliance vendors need to make their devices reliable/serviceable.

Another example, the firmware that is embedded in the HP Virtual Connect modules I wrote about a while back runs under VMWare Workstation, HP have an internal use version for engineers to do some development and testing against, sadly they won’t redistribute it as far as I am aware.

h1

PSOD - Purple Screen of Death

July 8, 2008

Just incase you ever wondered what it looks like here is a screendump..

this is the VMWare equivalent of Microsoft’s BSOD (Blue Screen of Death)

image

I got this whilst running ESX 3.5 under VMWare Workstation 6.5 build 99530, it happened because I was trying to boot my ESX installation from a SCSI hard disk - which it didn’t like - I assume because of driver support, swapped for an IDE one and it worked fine…

update - actually the VM had 384Mb of RAM allocated and that’s what actually stopped it from booting.. upped to 1024Mb and it runs fine.

Its the first time I’ve seen one - all the production ESX boxes I’ve worked with have always been rock-solid (touch wood)

I’m preparing a blog post about unattended installations of ESX when I hit this, in case you were wondering.

h1

Handy Reference Chart for Microsoft Server Application Licences

July 2, 2008

 

Taken from a download on the Microsoft Partner Licencing Specialist site, the following diagram makes for a useful quick reference chart for what licencing options are applicable to the big MS Server apps - far easier than having to check the product sites and documentation individually if you are trying to spec something up.

image

Also lots more useful information on this site - it’s designed to train people to become Microsoft licencing specialists (MLSS/MLSE) it’s mainly sales staff orientated training, but some useful/easy to digest reference material for techies/consultants alike if you’ve ever struggled to understand Microsoft licencing.

Useful links..

Revision Presentations - .PDF files to download https://partner.microsoft.com/UK/40033119

Training Videos - downloadable http://www.microsoft.com/uk/partner/learningpaths/?id=licensing.mlss

h1

Certified..

July 1, 2008

 

I had my 2nd attempt at the VMWare FastTrack course last week (the 1st attempt was cut short due to power problems, and I’ve only just managed to find the time to reschedule).

The course went ok, the 1st 2 days were a bit dull as I’d already sat through them once; the course has been restructured since and is now contiguous through the 2 books, in the 1st attempt we were jumping back and forth as the Fast Track course is the Install & Configure and DSA course mashed together.

I found the pace ok, infact I could probably have been pushed a lot harder, as such I didn’t find it as “intensive or extended hours” - we finished by at least 5.30 most days and earlier some other days - the last day did feel a bit like treading water as it was quite spread out.

Wasn’t overly impressed by the facilities at QA-IQ’s Roseberry Ave - could do with a lick of paint, some better lighting and A/C that works properly. In all fairness it did look like they were in the middle of refitting it. More importantly the instructor was good and the kit/resources worked as required - no free lunch though ;)

No VCP exam voucher is included with QA-IQ as you get at DNS arrow - considering the QA and DNS courses are virtually the same price I think that’s a bit cheap - so you may want to check with your vendor before booking.

There is a lot of team working in building up DRS clusters and doing HA etc. and you have to have sat the course in order to be officially certified as a VCP.

I sat my exam yesterday morning and passed - not by as much as I’d have liked, but I was a bit lazy and didn’t do much (any) specific exam prep - there were a whole load of questions on a particular subject that I had not revisited since the course* and I fell foul of the “mark for review” option where you can go back at the end and can review/change your answers before submitting the exam - several of them from correct to incorrect as I later worked out - d’oh I learnt (and subsequently) forgot that from my MCSE exam days - if you don’t know 100% your 1st instinct was probably right.

Ah well, another one down - must get round to updating my MCSE too.. I quite like the certification exams, it’s just finding the time to learn the MS/VMWare answers and I’m lucky that English is my 1st language as I think a lot of the cert questions (not just VMWare - MS, Cisco etc.) are more about English comprehension and understanding what they are actually asking in order to answer correctly.

image

*As usual I had to sign an NDA, so no I can’t say what they were - sorry

h1

Virtualization - the key to delivering "cloud based architecture" NOW.

June 23, 2008

 

There is a lot of talk about delivering cloud or elastic computing platforms, a lot of CxO’s are taking this all in and nodding enthusiastically, they can see the benefits.. so make it happen!….yesterday.

Moving your services to the cloud, isn’t always about giving your apps and data to Google, Amazon or Microsoft.

You can build your own cloud, and be choosy about what you give to others. building your own cloud makes a lot of sense, it’s not always cheap but its the kind of thing you can scale up (or down..) with a bit of up-front investment, in this article I’ll look at some of the practical; and more infrastructure focused ways in which you can do so.

image

Your “cloud platform” is essentially an internal shared services system where you can actually and practically implement a “platform” team that operates and capacity plans for the cloud platform; they manage it’s availability and maintenance day-day and expansion/contraction.

You then have a number of “service/application” teams that subscribe to services provided by your cloud platform team… they are essentially developers/support teams that manage individual applications or services (for example payroll or SAP, web sites etc.), business units and stakeholders etc.

Using the technology we discuss here you can delegate control to them over most aspects of the service they maintian - full access to app servers etc. and an interface (human or automated) to raise issues with the platform team or log change requests.

I’ve seen many attempts to implement this in the physical/old world and it just ends in tears as it builds a high level of expectation that the server/infrastructure team must be able to respond very quickly to the end-”customer” the customer/supplier relationship is very different… regardless of what OLA/SLA you put in place.

However the reality of traditional infrastructure is that the platform team can’t usually react as quick as the service/application teams need/want/expect because they need to have an engineer on-site, wait for an order and a delivery, a network provisioning order etc. etc (although banks do seems to have this down quite well, it’s still a delay.. and time is money, etc.)

Virtualization and some of the technology we discuss here enable the platform team to keep one step ahead of the service/application teams by allowing them to do proper capacity planning and maintain a pragmatic headroom of capacity and make their lives easier by consolidating the physical estate they manage. This extra headroom capacity can be quickly back-filled when it’s taken up by adopting a modular hardware architecture to keep ahead of the next requirement.

Traditional infrastructure = OS/App Installations

  • 1 server per ‘workload’
  • Silo’d servers for support
  • Individually underused on average = overall wastage
  • No easy way to move workload about
  • Change = slow, person in DC, unplug, uninstall, move reinstall etc.
  • HP/Dell/Sun Rack Mount Servers
  • Cat 6 Cables, Racks and structured cabling

The ideal is to have an OS/app stack that can have workloads moved from host A to host B; this is a nice idea but there are a whole heap of dependencies with the typlical applications of today (IIS/apache + scripts, RoR, SQL DB, custom .net applications). Most big/important line of business apps are monolithic and today make this hard. Ever tried to move a SQL installation from OLD-SERVER-A to SHINY-NEW-SERVER-B? exactly. *NIX better at this, but not that much better.. downtime required or complicated fail over.

This can all be done today, virtualization is the key to doing it - makes it easy to move a workload from a to b we don’t care about the OS/hardware integration - we standardise/abstract/virtualize it and that allows us to quickly move it - it’s just a file and a bunch of configuration information in a text file… no obscure array controller firmware to extract data from or outdated NIC/video drivers to worry about.

Combine this with server (blade) hardware, modern VLAN/L3 switches with trunked connections, and virtualised firewalls then you have a very compelling solution that is not only quick to change, but makes more efficient use of the hardware you’ve purchased… so each KW/hr you consume brings more return, not less as you expand.

Now, move this forward and change the hardware for something much more commodity/standardised

Requirement: Fast, Scalable shared storage, filexible allocation of disk space and ability to de-duplicate data, reduce overhead etc, thin provisioning.

Solution: SAN Storage, EMC Clariion, HP-EVA, Sun StorageTek, iSCSI for lower requirements, or storage over single Ethernet fabric - NetApp/Equalogic

Requirement: Requirement Common chassis and server modules for quick, easy rip and replace and efficient power/cooling.

Solution: HP/Sun/Dell Blades

Requirement: quick change of network configurations, cross connects, increase & decrease bandwidth

Solution: Cisco switching, trunked interconnects, 10Gb/bonded 1GbE, VLAN isolation, quick change enabled as beyond initial installation there are fewer requirements to send an engineer to plug something in or move it, Checkpoint VSX firewalls to allow delegated firewall configurations or to allow multiple autonomous business units (or customers) to operate from a shared, high bandwidth platform.

Requirement: Ability to load balance and consolidate individual server workloads

Solution: VMWare Infrastructure 3 + management toolset (SCOM, Virtual Centre, Custom you-specific integrations using API/SDK etc.)

Requirement: Delegated control of systems to allow autonomy to teams, but within a controlled/auditable framework

Solution: Normal OS/app security delegation, Active Directory, NIS etc. Virtual Center, Checkpoint VSX, custom change request workflow and automation systems which are plugged into platform API/SDK’s etc.

the following diagram is my reference architecture for how I see these cloud platforms hanging together

image 

As ever more services move into the “cloud” or the “mesh” then integrating them becomes simpler, you have less of a focus on the platform that runs it - and just build what you need to operate your business etc.

In future maybe you’ll be able to use the public cloud services like Amazon AWS to integrate with your own internal cloud, allowing you to retain the important internal company data but take advantage of external, utility computing as required, on demand etc.

I don’t think we’ll ever get to.. (or want) to be 100% in a public cloud, but this private/internal cloud allows an organisation to retain it’s own internal agility and data ownership.

I hope this post has demonstrated that whilst, architecturally “cloud” computing sounds a bit out-there, you can practically implement it now by adopting this approach for the underlying infrastructure for your current application landscape.

h1

VMWare/Cisco Switching Integration

June 21, 2008

 

As noted here there is a doc that has been jointly produced between VMWare and Cisco which has all the details required for integrating VI virtual switches with physical switching.

Especially handy if you need to work with networking teams to make sure things are configured correctly to allow failover properly between redundant switches/fabrics etc. - it’s not as simple as it looks, and people often forget the switch-side configurations that are required.

Doc available here (c.3Mb PDF)

h1

Free SAN for your Home/Work ESX Lab

May 25, 2008

 

VM/Etc have posted an excellent article about a free iSCSI SAN VM appliance that you can download from Xtravirt

it uses replication between 2 ESX hosts to allow you to configure DRS/HA etc.

Excellent, I’m going to procure another cheap ESX host in the next couple of weeks so will post back on my experiences with setting this up, my previous plan meant I’d have to get a 3rd box to run an iSCSI server like OpenFiler to enable this functionality, but I really like this approach.

Sidenote  - Xtravirt also have some other useful downloads like Viso templates and an ESX deployment appliance available here

h1

SpinVox: The Future of Voicemail

May 20, 2008

 

SpinVox is changing the game for busy people..

I don’t know about you but I tend to treat my mobile (USA:cellphone) phone as my personal contact device, in that I use it to manage both my inbound and outbound communications and plug that into my daily work/life workflow.

Because I travel about a lot for business (and in my spare time also) I give everyone my mobile number, rather than a fixed line as its far more likely to reach me and I don’t have to track numerous voicemail/UM numbers, I also gain a unified call log and history on a single device so I can refer back over time to find numbers I would have otherwise lost.

I have a fax to email service for the same reason for the odd occasion I need to receive a fax… I can get it anywhere and file it electronically.

However the fact that people have my mobile number does not (for me at least) set the expectation that I will be at their beck and call, or answer on demand - I make use of caller ID to screen my calls, I’ll make no secret of that; I manage my workflow during the day and quite often other people’s sense of “urgent” is different from my own [unless you are actually my boss of course - when your calls will usually be answered directly], and at the end of the day I need to balance the needs (…of the many) people who want me to do something for them, and my ability to actually do so and carry on with my day to day workload.

So for example people that ring from lines with withheld numbers will almost always be allowed to go to voicemail, unless I am expecting such a call; I know most people have no control over corporate switchboards but I’ve never understood the logic of withholding caller-ID, especially from a large organisation as you can make the number almost anything, even a central or local office switchboard number if you don’t want to expose people’s regional DDI’s. it also works to their advantage as I’ll be better prepared to speak to them if I know what they want to know - clever as I am I don’t always know everything off the top of my head!

This often means I have a fair number of voicemail’s building up to listen to, and unfortunately more often than not the spare time I have to listen to the messages is whilst on a train or car when I don’t have a pen handy to jot down that number - or am more likely to leave the number written on the copy of the metro on the train.

Now, this is where I’ve found Spinvox really useful in the last couple of weeks; it’s essentially a paid-for service that you use to replace your normal o2/Vodafone/etc. voicemail service. you change your divert on busy/unavailable settings to point at an assigned geographical number (in my case in 0208 one, so it’s inclusive in any bundled minutes your tariff includes rather than a national rate 0870, 0845 etc.).

It offers the normal voicemail features where you can call a special number (again geographical, rather than national-rate etc.) to listen to the actual messages and set your greeting message etc.

But the advantage of SpinVox is it’s ability to convert the speech into text, which can be delivered to you either as an SMS text message or an email (my preference).

I was a bit skeptical at first, but I was very, very impressed after using the 7 day free trial. so much so that at one point I doubted that there was any technology behind it at all and that they were employing a large battery of English speaking monkeys to listen in and type it all up… their website assures me that this isn’t the case and they use a tiered architecture of several speech-text engines depending on the content as some are better at number recognition etc. (can’t find the original link to that article so will keep digging)

It also does an excellent job of transcribing phone numbers and extracts the caller-ID from the caller if it’s available so no hunting around for that elusive pen!

If there is a word in the message Spinvox can’t transcribe or has made a guess at it marks it with a “____” or (?) and if you want to hear the subtle intonation of the person who left the message, each message includes a quick code so you just dial the Spinvox retreival number and key in *03 for example and it will replay the message - a godsend compared to the usual next, next, next drudge with most voicemail systems.

For example - here is a real message left for me.. (names and numbers changed to protect the innocent, but if you really can do my extension cheaper than they can - please do call :)).

You received a new voicemail from +4420812312312:

———-

“Hi there Vinf my name is Bob. I’m calling from a company called XYZ Construction. We received your details via our website regarding your extension. I was wondering if you could give me a call back when you get the message. My telephone no. is 0800123123, in order to discuss the project further. Thank you, bye.”

- spoken through SpinVox

———-

Message received at May 8, 2008 1:25:55 PM

If you wish to listen to this message, call your voicemail on +44207xxxxxxx and press *08

For assistance, see www.spinvox.com or email service@spinvox.com

Thank you,

SpinVox

So, back to the point; email delivery of the text content of voicemail messages into my Outlook Inbox allows me to flag, follow-up, set reminders, file, delete etc. and integrate them into my normal daily workflow so I ensure I can manage any resulting actions.

Previously I’ve found where I have had a large number of unheard voicemail messages (due to holiday or long meetings) it takes longer than I’d like to listen to them all; as they often overlap or are irrelevant due to the elapsed time and let’s be honest people (myself included) tend to ramble when they are leaving information in brain-freewheeling mode on an answer machine, or just say it’s X - call me back, which isn’t all that helpful.

So dealing with such a pile of messages, especially when compared to the quick gratification of dealing with normal emails - where you can scan, easily re-read and file, mark for follow-up etc. means dealing with voicemail often fell to the bottom of my priority pile. This, in turn means I risk missing that one important message or take longer to respond to people (yeah I’m a fickle sort of guy - make my life easier and I’ll get back to you quicker… I’m sure I’m not the only one)

In meetings, it’s also ideal - because they’re delivered as SMS or email they also turn up on my Blackberry so I can glance at them during the meeting and make a value/balance decision on wether I should step outside to respond. Doing this in 1:1 meetings might be a bit rude as someone is dedicating their time for your use. But for larger meetings or conferences where you are not always involved or contributing to everything it’s a discrete way of making a judgement call on what requires your current attention.

image Overall I’m very impressed, sometimes I’ve seen it take up to 10mins to deliver a converted message (maybe there really are monkeys involved :)), and it’s a bit annoying that the caller (on my o2 network anyway) gets a “your call is being diverted, please hold..” message rather than just cutting to Spinvox as it does with o2’s own voicemail service - but I guess that’s a network feature rather than Spinvox and it’s not a huge deal.

The billing is interesting, and to be honest I think a little bit unclear, as you are basically signed up once your 7 day trial is finished and I’ve not really had any visibility of how they bill other than a message on the last day of the trial saying my account had been charged £5, call customer services otherwise. I can only assume it’s doing this via reverse-SMS billing - for me, this is handy rather than having to manage another subscription and set of card details, however I could see that bothering some people.

Note: I have a “company phone” and don’t always see the bills, so I’ll probably be expecting a call from accounts at the end of the month to query it!

Another use which I hadn’t thought of is for deaf and people with hearing problems, this is ideal as they often make heavy use of text and email to exchange information as they are often unable to call people directly as not everyone has a minicom type setup, I see they are offering text to speech services

They also have a variety of blog/social network interfaces on the way; I don’t think these would be much use for me, but you never know… it takes a while to type these things up, but I’m pretty sure it’s clearer if I’m forced to think about what I’m writing than if I were allowed to ramble at a translator :)

In summary it’s an excellent service, and one that I would be happy to pay for myself (even if the billing process is a little unclear, to me and the other user’s I’ve polled anyway) I wonder how long before this technology is adopted by the carriers themselves… it’s got to be the next step, everyone I know hates normal voicemail. most current Unified Messaging systems I’ve seen don’t offer this type of functionality, they’re still geared towards dealing with audio content.

Lastly, one feature that could be quite useful is a web based system for listening to the actual voicemail messages from a PC, rather than dialling into the Spinvox system - although I wonder if I really would use this, it’s so accurate in converting the audio!

Steve Richards blog on work/life balance has a good post on dealing with email overload, that could be extended to take on management of voicemail if you combined it with SpinVox as I mention above - it all ends up in one place which allows you to manage it… rather than drown in it.

I’m not the only one finding it useful, some further reading from other SpinVox Users…

http://www.atmasphere.net/wp/archives/2008/05/14/with-spinvox-im-reading-your-voicemail

http://darlamack.blogs.com/darlamack/2008/05/how-did-i-live.html

http://www.womworld.com/nokia/3305/spinvox-a-lifeline-for-busy-users/

http://davestronach.wordpress.com/2008/05/02/spinvox-voicemail-to-text/

h1

Running ESX 3.5 and 3i Under VMWare Workstation 6.5 Beta Build 91182

May 18, 2008

 

Following on from my earlier post I upgraded my installation to the new build of 6.5. it un-installed the old build and re-installed the latest without a problem, took about 30mins and required a reboot of the host OS.

All my previously suspended XP/2003 VM’s resumed ok without a restart but needed an upgrade to the VMTools which did require a restart of the guest OS - all completed with no problems.

Now, onto installing ESX….

I used the settings from Eric’s post here to edit my .vmx file

ethernet0.virtualDev = “e1000″

monitor.virtual_exec = “hardware”
monitor_control.restrict_backdoor = “true”

Note - you need to select an x64 Linux version from the VM type drop down, if you have to go back and change it via the GUI after you’ve edited the .vmx file it overwrites the Ethernet card “e1000″ setting to “vlance” so you need to edit again otherwise the ESX installer won’t find a compatible NIC and won’t install.

it was initially very slow to boot; 5mins on my dual core laptop with only one error - which was expected..

imageimage

To improve the performance I changed my installation to run the non-debug version of the Workstation binaries (rename the vmware-vmx.exe to vmware-vmx-debug.exe)

note: this isn’t recommended unless you know what you are doing, VMWare will rely on the output from the debug version of the code if you need to report any issues)

It also seems to work for the installable version of ESX 3i… (although I’ve not quite figured out the point of that version yet :)).

image

Install prompt

image

it did fail with an error the 1st time round..

image

this was because I had specified an IDE disk as per the ESX instructions, I changed it to a SCSI one and it worked ok.

image

Finished..

imageimage 

The ESX 3i install has a footprint of about 200Mb on disk, and ESX 3.5 uses 1.5Gb.

I’m going to keep the 3.5 install on my laptop and will try to use linked clones to maintain a couple of different versions/configs to save disk space.. I’m sure I could knock up a quick script to change the hostname/IP of each clone - if I do I’ll post it here.

Why would you want to do this? well because you can, of course :) and its handy for testing patch updates and scripts for ESX management etc.

I will  also try to get a ESX DRS cluster running under workstation with a couple of ESX hosts and shared storage over iSCSI using something like OpenFiler as shown here. won’t exactly be production performance, but useful for testing and demo’ing.

h1

New VMWare Workstation 6.5 Build(s) and ability to run ESX 3.5

May 18, 2008

 

As a result of this post from Eric Sloof I note there is a new build of Workstation 6.5 available; I hadn’t noticed this as I haven’t had much time to follow the forums and my beta/RC (as used in this post and installed here is build 84113) hasn’t notified me there is a new release as all the previous 4.x/5.x beta’s have.

Oddly I checked this morning before I saw Eric’s post and it reported no new builds available - assume this is because its still a beta programme.

Anyway - if you downloaded the previous build before 14th May then go to this page and you can update your registration for the new build (below).

image

I’ll be trying this out in the coming week and hopefully will be able to get ESX running on my laptop under VMWare Workstation (very handy mobile demo platform).

h1

Deleting a Virtual Machine from Virtual Center and Disk

May 14, 2008

 

If you deploy your VM’s from a master image using Virtual Center’s Deploy from template functionality (below).

image

When you try and delete a virtual machine you’ve created from disk

image 

You get the following prompt

Are you sure you want to delete this VM and it’s associated base disk?

Please note if other VMs are sharing this base disk, they will no longer have access to this disk.

image

This does not refer to the master VM image you deployed from; in other words if you delete the VM it does not break all other VMs deployed from the initial template.

One other point to note, when you perform “Deploy virtual machine from template” operation, the target field (below) is actually the name of the base image you are cloning, rather than the name of the eventual VM you are creating from it - odd, but that’s how it is (below)

image

h1

Solid Sate SAN, Storage vMotion and VMWare - HSM for your VMs

May 13, 2008

 

You’ve been able to buy solid state SAN technology like the Tera-RAMSAN from TMS which gives you up to 1Tb of storage, presented over 4Gb/s fibre channel or Infiniband @10Gb/s… with the cost of flash storage dropping its going to soon fall in to the realms of affordability (from memory a year ago 1Tb SSD SAN was about £250k, so would assume that’s maybe £150k now - would be happy to see current pricing if anyone has it though).

If you were able to combine this with a set of ESX hosts dual-connected to the RAMSAN and traditional equipment (like an HP EVA or EMC Clariion) over a FC or iSCSI fabric then you could possibly leverage the new Storage vMotion features that are included in ESX 3.5 to achieve a 2nd level of performance and load levelling for a VM farm.

image

It’s pretty common knowledge that you can use vMotion and the DRS features to effectively load level or average VM CPU and memory load across a number of VMWare nodes within a cluster.

Using the infrastructure discussed above could add a second tier of load balancing without downtime to a DRS cluster. If a VM needs more disk throughput or is suffering from latency then you could move them to/from the more expensive solid-state storage tiers to FC-SCSI or even FATA disks, this ensures you are making the best use of fast, expensive storage vs. cheap, slow commodity storage.

Even if Virtual Center doesn’t have a native API for exposing this type of functionality or criteria for the DRS configuration you could leverage the plug-in or scripting architecture to use a manager of managers (or here) to map this across an enterprise and across multiple hypervisors (Sun, Xen, Hyper V)

I also see EMC integrating flash storage into the array itself, would be even better if you could transparently migrate LUNS to/from different arrays and disk storage without having to touch ESX at all.

Note: This is just a theory I’ve not actually tried this - but am hoping to get some eval kit and do a proof on concept…

h1

Misc bits of Useful, Recent VMWare News

May 12, 2008

 

I’ve been really busy the last couple of weeks and I’ve had to trim down my incoming RSS feeds, as there was too much noise and I was missing important things like the following;

  • Scott Lowe’s summary of sessions from VMWare’s partner Exchange, some useful information on Site Recovery Manger
  • The new VMWare Certified Design Expert (VCDX) certification - next step up from VCP, will have to have a look into it now I’ve finally managed to re-schedule my cancelled QA course - official VM announcement here.
  • Official Microsoft Clustering Support with ESX 3.5 Update 1 here
  • Some workarounds for deploying Windows Server 2008 with virtual center here - would have been nice if support was in an official update from VMWare soon; it’s not like it’s been beta’ing for a while is it (errr!)
h1

Lifecycle Manager, Site Recovery Manager and Stage Manager Released

May 12, 2008

 

Linkage here.

VMWare are shaping up to have a really good set of management tools - lab and site recovery manager are of particular interest to me for several projects I’m working on.

h1

VMWare Workstation 6.5 Beta - Run Multiple Copies of Outlook/Exchange via Unity

April 30, 2008

 

I use a single laptop for my day-day use, it has all the stuff i need, I run Vista and Office 2007, for our corporate mail we use Exchange like everyone else and I use Outlook Cached Mode to work online/offline..

My own personal email is also an Exchange mailbox - provided by fasthosts (why - well, because..ok?) the problem with this is that I can’t have a single copy of Outlook connected to more than one Exchange server at the same time or run multiple instances of Outlook (I’ve tried all the hacks and Thinstall etc.), and to be honest even if I could it would probably violate the security policies of all the involved organisations as it would be quite simple for an Outlook-aware worm to try to propagate itself across multiple organisations or harvest confidential details.

The problem is further compounded by the fact that I often work on long-term customer projects and have to have a mailbox on their Exchange system as well… which leads to multiple diary sync nightmare, maybe I’ll blog about that some other time).

So at present I have 4 Exchange mailboxes that I need to keep track of, auto-forwarding mail between them is a no-no, I used to be an Exchange admin and I’ve lost many bank holidays due to corporate->Hotmail NDR mail loops!

So, up until now I’ve had to run one full Outlook client and multiple OWA clients in a browser, which is ok as long as I’m connected to the Internet, but no good if I’m on a train unless I want to close and restart Outlook with multiple profiles, which is a pain especially when you are collaborating on a project between multiple organisations. To be honest as good as OWA 2003 is it’s no substitute for a full outlook client. (still waiting for Fasthosts to go to Exchange 2007, oh and enable EAS!).

So, anyway a solution - VMWare Unity, this is a feature like Parallels for the Mac which lets you “float” an application window out of a guest VM to the host desktop meaning you can use the applications without working within a single VM’d desktop window.

VMWare Fusion also has the same feature, but Workstation 6.5 is the 1st time its been available on the PC platform.

To use Unity you need to have upgraded the virtual machine to 6.5 “hardware” by right clicking on the VM in the sidebar pane (below) and install the latest VM Tools - it also only seems to support XP at present, or at least it didn’t work on the Server 2003 VM I had.

image image

Boot the VM… and install the latest VM tools.

image image

VM Workstation Screen - note VM is set to “Unity mode”

imageimage 

My Vista desktop (yes, I have the start bar at the right hand side - widescreen laptop!) with the popup menu for the VM, showing all the start menu for applications installed within in it.

imageimage

 image

the following screen shot is Calculator running from inside the XP VM but in a single window on the Vista desktop - note the red border and the image icon, denoting that its presented via Unity.

image

It even shows up on the start bar with the correct icon; although this doesn’t seem to work until its been run a couple of times; I assume it needs to cache an icon or something.

image

it also seems to respect the window snapshots you get whilst Win-Tab between applications, even for pop-up windows

image 

Technically I can use this to run n x Windows XP/Outlook 2003 VM’s presenting Outlook through to my Vista desktop and comply with all organisations security policies, as each VM and its respective copy of Outlook runs in isolation from each other with the relevant company-specific AV client (or at worst, the same level as if I were using a machine connected to a public network in that they all share a vm network) - I don’t enable shared folders between the VMs.

It’s still a beta feature at the moment, and there seem to be a few bugs particularly when resizing windows sometimes it doesn’t work properly and double clicking to expand to full screen overlays the start-bar on my vista machine.

And it does seem to get confused sometimes and not allow keyboard input, so you have to flick back to non-unity mode and then back to continue, and sometimes a reboot of the guest VM but it is an early build so I would guess this will be resolved.

As an added bonus VM Workstation seems to allow the Vista host OS to go into sleep mode even whilst VMs are running, this is something I’ve not had much luck with in the past - it would generally refuse to sleep when I closed the lid (but thats not a scientific comparison… it may have just been bad luck!)

So, the pay-off - 2 copies of Outlook (2003 and 2007) seemingly running on the same desktop, alt-tab works ok and you have access to all the functionality of both without having to switch between or run multiple OWA sessions and from a security perspective it’s not really any different from having 2 physical PCs in front of you (slight memory overhead, but my laptop has 4Gb RAM, so not a huge issue).

Opening attachments is obviously going to be a bit of an issue, as you’ll technically need an individually licenced instance of Office 2003 in each VM as they can’t (yet) exchange data between them… and that would compromise the security principal.

image

h1

VMWare Server Performance - A Practical Example

April 19, 2008

 

The following screen dump is from an HP DL380G5 server that runs all the core infrastructure under VMWare Server (the free one) for a friend’s company which I admin sometimes.

It is housed in some co-lo space and runs the average range of Windows servers used by a small but global business, Exchange SQL, Windows 2003 Terminal Services.

As a result of some planned (but not very well communicated!) power maintenance the whole building lost power earlier today, when it was restored I grabbed the following screenshot as the 15 or so Virtual Machines automatically booted.

interesting to note that all the VM’s had been configured to auto-start with the guest OS, meaning there wasn’t any manual intervention required, even though it was a totally dirty shutdown for both the host and guest OS’es (No UPS, as the building and suite is supposed to have redundant power feeds to each rack - in this instance the planned maintenance was on the building wiring so required taking down all power feeds for a 5 yearly inspection..)

There are no startup delay settings  in the free version of VMWare Server so they all start at the same time, interesting to note the following points..

The blue line that makes a rapid drop is the pages/second counter, and the 2nd big drop (green) is the disk queue length. the hilighted (white) line is the overall %CPU time, note the sample frequency was 15 seconds on this perfmon.

image 

After it had settled down, I took the following screenshot, it hardly breaks a sweat during its working day. there are usually 10-15 concurrent users on this system from around the world (access provisioned via an SSL VPN device) and a pretty heavily used Exchange mail system.

image

The box is an HP DL380 G5 with 2 x quad core CPUs (8 cores in total) and 16Gb of RAM, it has 8 x 146Gb 15k HDDs in a single RAID 5 set + hot-spare, it was purchased in early 2007 and cost c.£8,000 (UK Prices)

It runs Windows 2003 Enterprise Edition x64 edition with VMWare Server 1.0.2 (yes, its an old build.. but if it ain’t broke..) and they have purchased multiple w2k3 ent-edition licences to take advantage of the virtualisation use-rights to cover the installed virtual OS’es.

It’s been in-place for a year and hardly ever has to be touched, its rock-solidly available and the company have noticed several marked improvements since they P2V’d their old servers onto this platform, as follows;

  • No hardware failures - moving from lots of low-end servers (Dell) and desktops to a single box (10:1 consolidation)
  • The DL380 has good redundancy built in, but it’s also backed up with a h/w maintenence contract, and they also have a spare cold-standby server to resume service from backups if data is lost.
  • Less noise, the old servers were dotted around their old offices in corners, racks etc - this is the main thing they liked!
  • Simple access anywhere - using a Juniper SA2000 SSL VPN,  its easy to get secure access from anywhere
  • Less reliance on physical offices and cheap DSL-grade data communications, now the servers are hosted on the end of a reliable, data centre class network link with an SLA to back it up. if an individual office looses its ADSL connection, no real issue - people pick up their laptop(s) and work from home/starbucks etc.
  • Good comms are cheaper in data centres than in your branch offices (usually)

Hopefully this goes to show the free version of VMWare’s server products can work almost as well if budget is a big concern, ESX would definitely give some better features and make backup easier, they are considering upgrading and combining with something like Veeam Backup to handle failover/backup.

h1

HP Rapid Deployment Pack - PXE Settings for Deploying Windows OS

April 17, 2008

 

The followign screens show a working configuration from the RDP 3.80 PXE Configuration Manager

image

Have had lots of problems with this deploying Windows OS’es and VMWare ESX 3.5 onto an HP c7000 Blade chassis, still not resolved all the problems, but this definitely works for deploying Windows!

The documentation reads like you should always use the Linux PE configuration and it handles switching between WinPE/LinuxPE depending on which OS job you drop on a target. in my experience this doesn’t work and you need to manually change the PXE configuration to default to LinuxPE or WinPE depending on the OS you want to target.

image

And

image

 

Still a work in progress as I have a c7000 to which I want to deploy a mix of Windows and ESX/Redhat OS’es….

I did get a previous installation to install ESX 3.5 by hacking the default ESX 3.02 job, but its since been re-installed and I can’t do it now

RDP 6.90 seems to list Windows 2008 and ESX 3.5 in the quickspecs, but I’ll be damned if I can find where to download it, going to have to call HP methinks!

As I’ve posted before installing via iLo is just a non-starter if you really do want a flexible and fast deployment configuration - so it has to be RDP.

More later…

h1

How to Convert Virtual Center from Evaluation to Licensed Version

April 10, 2008

or “How to convert virtual centre from evaluation to licenced version”… for us Brits… the “American English” is to help the international Googlers :)

I can’t believe I missed this, on a couple of platforms I’ve built I’ve had to start with an eval licence and then move to a proper licence but could never find how to change virtual center from eval to licenced mode.

ESX itself was fine you can do that via the VC GUI (below)

image

But despite a lot of googling I could never find out how to set Virtual Centre itself to use a licence server - so I ended up reinstalling/repairing and then selecting the option to use a licence server, my bad - it’s actually in the VI client GUI d’oh as Homer would say!

for my own reference, and for anyone else who has missed and is searching for how to convert Virtual Center from evaluation to licensed..

image

and then configure the setting here to point it at a proper licence server to enable full VC.

image

D’oh!!!

h1

How does an HP Fibre Channel Virtual Connect Module Work?

April 9, 2008

 

Techhead and I have spent a lot of time recently scratching our heads over how and where fibre channel SAN connections go in a c7000 blade chassis.

If you don’t know, a FC-VC module looks like this, and you install them in redundant pairs in adjacent interconnect bays at the rear of the chassis.

image 

You then patch each of the FC Ports into a FC switch.

The supported configuration is one FC-VC Module to 1 FC switch (below)

clip_image002[6]image 

Connecting one VC module to more than one FC switch is unsupported (below)

clip_image002[8]image

So, in essence you treat each VC module as terminating all HBA Port 1’s and the other FC-VC module as terminating all HBA Port 2’s.

The setup we had:

  • A number of BL460c blades with dual-port Qlogic Mezzanine card HBAs.
  • HP c7000 Blade chassis with 2 x FC-VC modules plugged into interconnect bay 3 & 4 (shown below)

image image

The important point to note is that whilst you have 4 uplinks on each FC-VC module that does not mean you have 2 x 16Gb/s connection “pool or trunk” that you just connect into.

Put differently if you unplug one, the overall bandwidth does not drop to 12Gb/s etc. it will disconnect a single HBA port on a number of servers and force them to failover to the other path and FC-VC module.

It does not do any dynamic load balancing or anything like that - it is literally a physical port concentrator which is why it needs NPIV to pass through the WWN’s from the physical blade HBAs.

There is a concept of over-subscription, in the Virtual Connect GUI that’s managed by setting the number of uplink ports used.

Most people will probably choose 4 uplink ports per VC module, this is 4:1 oversubscription, meaning each FC-VC port (and there are 4 per module) has 4 individual HBA ports connected to it, if you reduce the numeber of uplinks you increase the oversubscription (2 uplinks = 8:1 oversubscription,  1 uplink = 16:1 oversubscription)

image

Which FC-VC Port does my blade’s HBA map to?

The front bay you insert your blade into determines which individual 4Gb/s port it maps to and shares with other blades) on the FC-VC module, its not just a virtual “pool” of connections, this is important when you plan your deployment as it can affect the way failover works.

the following table is what we found from experimentation and a quick glance at the “HP Virtual Connect Cookbook” (more on this later)

FC-VC Port Maps to HBA in Blade Chassis Bay, and these ports are also shared by..
Bay3-Port 1, Bay-4-Port 1 1,5,11,15
Bay3-Port 2, Bay-4-Port 2 2,6,12,16
Bay3-Port 3, Bay-4-Port 3 3,7,9,13
Bay3-Port 4, Bay-4-Port 4 4,8,10,14

image

Each individual blade has a dual port HBA, so for example the HBA within the blade in bay 12 maps out as follows

HBA Port 1 –> Interconnect Bay 3, Port 2

HBA Port 2 –> Interconnect Bay 4, Port 2

 

Looking at it from a point of a single SAN attached Blade - the following diagram is how it all should hook together

image 

 Path Failover

Unplugging an FC cable from bay 3, port 4 will disconnect one of the HBA imageconnections to all of the blades in bays 4,8,10 and 14 and force the blade’s host OS to handle a failover to its secondary path via the FC-VC module in bay 4.

 

A key take away from this is that your blade hosts still need to run some kind of multi-pathing software, like MPIO or EMC PowerPath to handle the failover between paths - the FC-VC modules don’t handle this for you.

 

image 

FC Loading/Distribution

A further point to take away from this is that if you plan to fill your blade chassis with SAN attached blades, each with an HBA connected to a pair of FC-VC modules then you need to plan your bay assignment carefully based on your server load.

Imagine if you were to put heavily used SAN-attached VMWare ESX Servers in bays 1,5,11 and 15 and lightly used servers in the rest of the bays then you will have a bottleneck as your ESX blades will all be contending with each other for a single pair of 4Gb/s ports  (one on each of the FC-VC modules) whereas if you distributed them into (for example) bays 1,2,3,4 then you’ll spread the load across individual 4Gb/s FC ports.

Your approach of course may vary depending on your requirements, but I hope this post has been of use.

image

There is a very, very useful document from HP called the HP Virtual Connect Fibre Channel Cookbook that covers all this in great detail, it doesn’t seem to be available on the web and the manual and online documentation don’t seem to have any of this information, if you want a copy you’ll need to contact your HP representative and ask for it.