Wednesday, November 14, 2012

Friday, June 1, 2012

Interesting Virtual News and Posts - #4

Next vSphere version?
  • Beta on vSphere 5.1 currently is being tested. And new version probably will be announced at VMworld USA on August.
  • Fault Tolerance support for virtual machines running multiple vCPUs
  • Boot from Fiber Channel over Ethernet (FCoE)
  • Support for virtualized Microsoft Domain Controllers. Windows Server 2012 running as a virtual Domain Controller is virtualization aware. This means a snaphot of the virtual machine can be made and restored if needed without getting issues in AD because of the USN. This is currently advertised as a feature of Windows Server 2010 Hyper-V. It leverages an ability that Microsoft has added to Hyper-V called Generation ID. This new feature allows a virtual domain controller to know whether or not it’s the latest version of AD. This same technology also enables administrators to clone virtual domain controllers, making the DC deployment process much easier. Microsoft is working with other hypervisor vendors implement Gen ID in their own products to bring this capability to all users of virtual domain controllers.

How to add a new Hyper-V host to SCVMM 2012

Trend Micro Deep Security 8.0 SP1 released
The most significant changes in SP1 are:
  • On Demand scan agent based anti-malware on Linux. Supported versions are Red Hat Linux 5, 6 (64 bit only), Suse Linux 10, 11 (32 and 64bit)
  • Protecting ESX 4.1/ESXi 4.1 hosts with Deep Security 8.Deep Security can now provide protection for virtual machines running on ESX/ESXi 4.1 and 5.0. You can use the same Deep Security Virtual Appliance in combination with the proper version of the Filter Driver.
  • Improved anti-malware scan exclusions.Exclusions were only possible for files. Now directories, files and file extensions are supported for the anti-malware scan, either by listing them specifically or through the use of wildcards.
  • More Localization. The manager is now also available in Japanese and Simplified Chinese. The agent and notifier are also localized in German, French, Spanish, Italian, Russian, Japanese, Korean, Simplified Chinese and Traditional Chinese.

Thursday, May 31, 2012

GetBestInterface for Linux or How to get source IP by target IP

Lets assume that you need to know which source IP address will be used to send information to known target IP address.
In Windows you can use GetBestInterface function. But Linux doesn't have something the same (or I don't know about it :)
The possible solution is to create socket connection to the target IP and call getsockname function. It returns sockaddr struct that you can use to get source IP address for this connection.

I suppose that this approach works for Windows also but I preffer to use GetBestInterface for this OS.

Here you can find source code sample  :)

Tuesday, April 24, 2012

Interesting Virtual News and Posts - #3

virtuallyGhetto: vSphere Security Hardening Report Script for vSphere 5
William has upated his script that allows you to check your vSphere infrastructure hardening. It includes new  requirements from vSphere 5.0 Security Hardening Guide (public draft).

Well, the fact of the publishing of public draft vSphere 5.0 Security Hardening Guide is interesting news also :)
Here is a document with changes between 4.1 and 5.0.

VMware ESXi 5 snapshot changes
Post describes some traits of ESXi 5 snapshots. 

Vmware View 5.1 Rumours: new version will be released on May 9th.

Creating and Reviewing Windows crash dumps in VMware virtual machines
Instructions: how to create memory.dmp from from the running virtual machine with Windows

RVTools is a windows .NET 2.0 application which uses the VI SDK to display information about your virtual machines and ESX hosts. Interacting with VirtualCenter 2.5, ESX Server 3.5, ESX Server 3i, ESX Server 4i, VirtualCenter 4.0, ESX Server 4.0, VirtualCenter 4.1, ESX Server 4.1, VirtualCenter 5.0, VirtualCenter Appliance or ESX Server 5 RVTools is able to list information about VMs, CPU, Memory, Disks, Partitions, Network, Floppy drives, CD drives, Snapshots, VMware tools, ESX hosts, HBAs, Nics, Switches, Ports, Distributed Switches, Distributed Ports, Service consoles, VM Kernels, Datastores and health checks. With RVTools you can disconnect the cd-rom or floppy drives from the virtual machines and RVTools is able to update the VMware Tools installed inside each virtual machine to the latest version.

Tuesday, April 17, 2012

Debate: Hyper-V vs vSphere

There was interesting debate in about month ago "Can Windows Server 8's Hyper-V finally make inroads against VMWare?".

I want to share some interesting notes from this debate. My notes are written in italic type.
Green selection is for Hyper-V fighter, blue is for VMware.


"Currently available statistics show that only around 50% of workloads (e.g. Exchange, SQL Server, SharePoint, etc.) are currently virtualized."

"If I were in product marketing at Microsoft, however, I'd tell you that it's a VMware killer. That's just good business. Also, if you think that VMware isn't going to continue to innovate and produce in the field that it created, you're sadly mistaken. Microsoft's Hyper-V is basically an attempt to enter a committed market."


That's right. All cool Hyper-V features can be found in 3.0 version only that's only in Beta. And I think that only after about year we can try real Hyper-V 3.0.


"It's very difficult to compare a list of features between two products like VMware's vSphere 5 and Microsoft's Hyper-V 3. Why? Because Hyper-V 3 isn't available until next year and vSphere 5 will go through at least one major feature update between now and then. Hyper-V really comes out of the gate in catch-up mode and it will always be in catch-up mode compared to VMware."

"Hyper-V 3 is Microsoft's Great Virtual Hope because they realize that heavy, non-virtual operating systems are about to die a painful and malingering death by attrition"

"I believe that Red Hat and KVM-based offerings from the Open Virtual Alliance will offer a compelling solution for cloud providers who for whatever reason, will want a 100 percent open source virtualization solution and will want to roll their own infrastructure or rely on systems integrators to tie in most of the pieces. But I think this will be the exception rather than the norm -- the majority of enterprises are unlikely to go this route, they will want fully supported vendor solutions if they end up doing things in-house"

"Some people complain about VMware's pricing but those are not the decision makers, they are the techies. People who have the financial responsibility for SLAs and customers aren't going to bank on an unproven technology. When the techies are home playing video games or geeking out over a new gadget, the C-level executives are planning and constructing next year's budget and their long-term plans for expansion and they want stability, scalability and VMware's experience behind that."

Does Hyper-V really save money? How much?
"VMware costs can run 10 times Microsoft's costs"
"Hyper-V isn't free. You have to purchase the base OS, which is far from free. There might be a "free" version but you don't get any Windows licenses with it. That's useless. There are other free hypervisors available if you're looking for free ones.
To say that Hyper-V is free is really not being honest. If it's totally free, then can I run it on Linux? No, I have to buy a MS licensed OS first. That really isn't free
"

How easy is it to migrate from a Vmware infrastructure to a Hyper-V infrastructure?
"Very easy... First, System Center can manage both a VMware and a Microsoft environment, allowing co-existence and easy migration. Additionally, Hyper-V comes with Windows Server, so most customers already have it."
"What you really need to know is how difficult will it be to change back to VMware from Hyper-V, once you realize your mistake." I like it :)

Does the pain of migrating justify the cost-savings?

Absolutely...
No way. Absolutely not...   Did you have doubts? :)
"Even with a high migration cost of $600/VM, migrating from VMware can produce a savings of $4 million over 5 years, for a 1000 VM environment."
"Think of the Celsius to Fahrenheit temperature conversion formula when you think of converting from VMware to Hyper-V; double your current hardware requirements and add 32.
This is the step known as the "Microsoft Tax."
"

How about "private cloud"?
"Microsoft is the only company that has in-production private and public cloud offerings today. "
"If you want to lock-in to a vendor for public/private cloud services, then Microsoft might be for you."


What about the Netware comparison?
Perlow brought up the NT versus Netware race as comparable to Hyper-V versus Vmware. How and why does this comparison work, or why doesn't it?
"they (VMware) only have a virtualization stack, they do not have a NOS, they do not have end-to-end managment, and they do not have the application infrastructure. When compared to the overall MS ecosystem, VMware only has virtualization"
"Hyper-V, on the other hand, is really an unnecessary effort on Microsoft's part. These days data centers and desktops need no such consolidation or standardization. Management is (or should be) web-based so that workstations can be Linux, Mac, Windows, Chrome or mobile devices."

How do we tell who's winning in 2012?
"I believe when IT environments start looking at how they need to consolidate imporant, performance based workloads such as SQL server, Sharepoint, and Exchange, and start thinking about creating large shared infrastructure that can be easily provisioned, then we are going to see Hyper-V gather significant market share"
"2012 isn't the deciding year. 2013 won't be either. Your probably looking at 2015 before you'll see any sort of uptake or adoption of Hyper-V, if any. Why? Because of maturity...This isn't VMware's first rodeo, as we say in Texas, and by the time any companies might begin to embrace Hyper-V, VMware will have produced another major version or two, while Microsoft will still be patching Hyper-V version 3 with weekly "Patch Tuesday" updates or releasing its R2 version"

Summary
"VMware has a single area of specialization -- Virtualization, for which it charges a heavy premium. And that single area of specialization is an exposure when your competitor has a complete solution across the entire stack and your entire reason for being is to provide virtual access to your competitor's operating systems.
With Hyper-V in Windows Server 8, Microsoft will offer you a best in class hypervisor along with great deal more built-in features for a heck of a lot less money, which has become scarce in today's shrinking IT budgets. These financial constraints have been pressuring CIOs to do a lot more with a lot less, and it's a trend that is not going to change anytime soon.
The bottom line is that Hyper-V has been a stable, proven, high-performance virtual infrastructure solution for at least the last two years, and it has already been gaining some traction in enterprises for its ability to consolidate high-performance Windows workloads. Environments should not throw out their existing VMware infrastructure, but if your organization is looking to grow its virtualized Windows footprint, you'd be foolhardy not to give Hyper-V a very close look
"
"VMware has more soldiers than Microsoft does. Virtualization is VMware's only profession. Microsoft is a highly diversified software company that produces hundreds of different software programs including games, desktop applications, server applications, operating systems, servers and more. VMware invented x86 virtualization. Hyper-V is Microsoft's attempt to remain relevant in this cloud-oriented, virtualization-focused world"

Audience Favored: Hyper-V (54%)
My vote is for VMware. What's about you?

Monday, April 16, 2012

Interesting Virtual News and Posts - #2

Hotlink SuperVISOR – vCenter for Hyper-V, KVM, and XenServer
Hotlink announced a new version of its SuperVisor solution. Hotlink 1.5 allows you to manage vSphere, Microsoft Hyper-V, Red Hat KVM, and Citrix XenServer all from within you vCenter console. Additionally, Hotlink 1.5 adds the following extremely useful functinality:
  • Snapshot Manager – Administrators can create, utilize, and manage cross-platform snapshots inside the VMware vCenter console – providing a single point of management for heterogeneous virtual machines
  • Template Manager – Users are able to create and deploy a single template across all target hypervisors, eliminating the time-consuming and inefficient process of building and maintaining platform-specific virtual machine templates
  • Homogenous Live Migration – VMware vCenter is now extended to provide live migration (e.g. vMotion) of Hyper-V, XenServer, and KVM virtual machines within homogeneous clusters – enabling the robust VMware management capabilities to be utilized for cross-platform, critical workloads
-----------------

The tool can convert VM’s and VMware Virtual Disks (VMDKs) from vSphere 4.1 and 5.0 to Windows Server 2008 R2 SP1 Hyper-V and Hyper-V Server 2008 R2 SP1, uninstalling the VMware tools and installing the Hyper-V integration services while converting. It also supports offline conversion from VMDK to the Microsoft VHD format.

-----------------

Extracting SSL Thumbprint from ESXi
3 methods to avoid mistakes during the inventory of SSL Thumbprints.

-----------------

VMware vSphere 5 Memory Management and Monitoring diagram
VMware published the VMware vSphere 5 Memory Management and Monitoring diagram that provides a comprehensive look into the ESXi memory management mechanisms and reclamation methods.
-----------------

vSphere Security Hardening Policy and SRM 5Post describes issue with Site Recovery Manager 5.0 that requires to have VIX API enabled on all virtual machines. But this option should be disabled according to the VMware Security Hardening Guide. The author has organized a survey to see whether it can be a problem for you.

-----------------
That's just funny (useful dialog in vCenter)

Sunday, April 8, 2012

Enable remote syslog in ESXi 5.0 Update 1

VMware changed default firewall behavior with ESXi 5.0 Update 1.
So if you use remote syslog, you need to enable syslog service in firewall settings:

esxcli network firewall ruleset set –ruleset-id=syslog –enable=true
esxcli network firewall refresh

Interesting Virtual News and Posts - #1

"Trend Micro Deep Security reaches version 8.0" New version allows you to monitor file integrity on the guest OS with no agent installation. And this feature is fully integrated with vShield the VMware vShield Endpoint APIs. Integrity Monitoring is a key component of a layered defense approach, which can be effective in combating targeted attacks, also known as “APTs” or Advanced Persistent Threats.

--------------

How to prevent VM from starting. You need to convert VM into a template or remove the executable bit from the .vmx file.

--------------

VMware has released 3 hours of free online training:
vSphere Storage Profiles
Migration Hot & Cold Migration - Storage DRS
Migration – vMotion
VM Management - Cloning/Templating
VM Management - Install OS
Migration Hot & Cold Migration – HA
Storage - Thick & Thin Provisioning
Installation - ESXi 5
Networking - Distributed Virtual Switch
Storage – VMFS
Installation - vCenter Server

--------------

In depth: Windows Server 8 Hyper-V Replica. Interesting post about new Hyper-V feature "Replica". How and where does it work. And why do you need it.

Windows Server 8 Hyper-V Live Migration: what's new and details.



Saturday, February 25, 2012

Identify Virtual Machines in vCloud and vSphere

William Lam has published interesting posts about virtual machine identication in vSphere.
Part 1 (short overview) & Part 2 (technical details)

Friday, February 24, 2012

Hyper-V vs vSphere: new comparison


I just read interesting post-thought about Hyper-V future. Can Microsoft close the gap between Hyper-V and VMware vSphere with Hyper-V 3.0 release? In my opinion they can, but it will depend on its release date and released feature set. At least for now Hyper-V 3.0 looks very promising. Will see...
I recommend to check this post also to get interesting comprasion Hyper-V 3.0 and vSphere 5.0

Tuesday, January 17, 2012

Free tool to check VMware ESX/ESXi compliance

I'm pleasure to announce that we have released new version of vGate Compliance Checker (update June 25 2015: now we have Russian version only).

Compliance checker is a free reporting tool that allows you to verify whether your virtual environment complies with industry standards for information security: PCI DSS 2.0, CIS VMware ESX Server Benchmark, VMware Security Hardening Best Practices.

It is distributed as a single executable – no installation or registration is required.

Supported VMware product versions:
VMware vSphere 4 (Update 2)
VMware vSphere 4.1 (ESX & ESXi)
VMware vSphere 5.0

Enjoy :)