Not every application is designed to leverage a load balancer. Early load balancing solutions capitalized on this fact - which may seem odd. The solution to the supportability issue creates new opportunity; we'll look at some examples here. Adjusting application behaviors quickly becomes a powerful tool when enhancing …

Read More

GitOps GitOps, a term coined in 2017, describes the practice of performing infrastructure operations from a Git repository. In this practice, we easily develop the ability to re-deploy any broken infrastructure (like application managers), but that doesn't really help infrastructure engineers. From the perspective of …

Read More

Idempotence and Declarative Methods - not just buzzwords Idempotence Coined by Benjamin Peirce, this term indicates that a mathematical operation will produce a consistent result, even with repetition. Idempotence is much more complicated subject in mathematics and computer science. IT and DevOps use a simplified …

Read More

**Note: This feature has been deprecated by VMware The Jetstreams Cloud operators now provide two completely different classes of service to customers: Self-Service, VMs, Operating System Templates Generally mature, some private cloud operators are smoothing out CMPs or such, but work as intended from a customer …

Read More

Note: This feature has been deprecated by VMware NSX-T 3.2 has been released, and has a ton of spiffy features. The NSX ALB integration is particularly neat, but while repeatedly (repeatably) breaking the integration to learn more about it, I ran into this error: When deploying NSX ALB appliances from the NSX Manager, …

Read More

Have you ever seen this error before? This is a really important issue in enterprise infrastructure because unauthenticated TLS connections teach our end users to be complacent and ignore this error. TLS Authentication SSL/TLS for internal enterprise administration typically only addresses the confidentiality aspects …

Read More

Cryptographic security is an important aspect of hosting any business-critical service. When hosting a public service secured by TLS, it is important to strike a balance between compatibility (The Availability aspect of CIA), and strong cryptography (the Integrity or Authentication and Confidentiality aspects of CIA). …

Read More

Note: I created a common baseline for pre-requisites in this previous post. We'll be following VMware's Avi + NSX-T Design guide. This will be a complete re-install. Avi Vantage appears to develop some tight coupling issues with using the same vCenter for both Layer 2 and NSX-T deployments - which is not an issue that …

Read More

VMworld 2021 is online this year I'll really miss some of the sessions and exploration we've had in past years in person, but I think VMware made the right call this year. We can expect to see a fundamental shift with online conventions - and this will need some unique strategy compared to previous years. The Basics I …

Read More

TL;DR If you see either of these errors, check grep 'ERROR' /opt/avi/log/cc_agent_go_{{ cloud }} for the potential cause. In my case, the / character was not correctly processed by Avi's Golang client (facing vCenter). The Problem When trying to configure NSX ALB + NSX-T on my home lab, I am presented nothing but the …

Read More