Note: This feature has been deprecated by VMware NSX-T 3.2 has been released, and has a ton of spiffy features. The NSX ALB integration is particularly neat, but while repeatedly (repeatably) breaking the integration to learn more about it, I ran into this error: When deploying NSX ALB appliances from the NSX Manager, …

Read More

Have you seen this selector when building machines on vSphere? This causes some fairly common issues in NOS VMs, as most don't really know what distribution the NOS is based on. "Guest OS Version" doesn't just categorize your workload, though. Selecting "Other Linux" instructs vSphere to maximize …

Read More

Why should an infrastructure engineer leverage REST APIs? I'm sure most IT workers have at least heard of REST APIs, or heard a sales pitch where a vendor insists that while a requested functionality doesn't exist, you could build it yourself by "using the API". Or, participate in discussions where people …

Read More

Have you ever seen this error before? This is a really important issue in enterprise infrastructure because unauthenticated TLS connections teach our end users to be complacent and ignore this error. TLS Authentication SSL/TLS for internal enterprise administration typically only addresses the confidentiality aspects …

Read More

Cryptographic security is an important aspect of hosting any business-critical service. When hosting a public service secured by TLS, it is important to strike a balance between compatibility (The Availability aspect of CIA), and strong cryptography (the Integrity or Authentication and Confidentiality aspects of CIA). …

Read More

Here's how to set both static IPv4 and IPv6 addressing on Debian 11. The new portions are outlined in italics. First, edit /etc/network/interfaces 1auto lo 2auto ens192 3iface lo inet loopback 4# The primary network interface 5allow-hotplug ens192 6iface ens192 inet static 7 address {{ ipv4.address }} 8 gateway …

Read More

Note: I created a common baseline for pre-requisites in this previous post. We'll be following VMware's Avi + NSX-T Design guide. This will be a complete re-install. Avi Vantage appears to develop some tight coupling issues with using the same vCenter for both Layer 2 and NSX-T deployments - which is not an issue that …

Read More

After a recent VCSA reboot, I was seeing the infamous no healthy upstream error from vCenter. The first place to check for issues like this is VMware's Virtual Appliance Management Interface (VAMI), located by default via HTTPS on port 5480. An administrator can use the appliance root password for this particular …

Read More

VMworld 2021 is online this year I'll really miss some of the sessions and exploration we've had in past years in person, but I think VMware made the right call this year. We can expect to see a fundamental shift with online conventions - and this will need some unique strategy compared to previous years. The Basics I …

Read More

DNS is a vital component of all computer networks. Also known as the "Internet Yellow Pages," this service is consumed by every household. DNS services are typically deployed in several patterns to support users and systems: DNS Forwarder: This deployment method is the most common. Everybody needs name …

Read More