Skip to main content

Posts

Data Store housekeeping

  Data Store housekeeping In today’s world of Virtualization, we love to thin provision and overcommit. Be vary of the limitations…. When a vSphere datastore becomes full, several issues can arise that may impact virtual machine (VM) operations and the overall performance of the environment: Virtual Machine Operations Halt : If the datastore is full, VMs running on it may not be able to perform operations that require additional storage space; in the worst case, this may affect the writing of new data. VMs will become unresponsive or crash. Snapshots and Backups Fail : Snapshot creation and backup operations will fail because there is no space to store the snapshot data or backup files. Performance Degradation : As the datastore nears full capacity, performance may decline due to insufficient space for swap files and other temporary files that VMs may require. Inability to Power On VMs : If a VM is powered off, it may not be possible to turn it back on if there is not enough space ...
Post a Comment
Read more
Recent posts

Access Hierarchy in vCenter

  Access Hierarchy in vCenter Ever wondered how you can give a user access to some artifacts within a vCenter and then deny the same user access to other artifacts? The access hierarchy in vCenter is role-based , leveraging permissions applied at various object levels in the vSphere inventory. Here’s a breakdown Permissions = User/Group + Role + Object Access is granted when a user or group is assigned a role (set of privileges) on a specific inventory object (like a VM, cluster, or datastore). Hierarchical Structure of vCenter Inventory vCenter’s inventory is hierarchical and permission inheritance flows top-down unless explicitly disabled. Here’s the structure from top to bottom: vCenter Root │ ├── Datacenter(s) │ ├── Cluster(s) │ │ ├── Host(s) │ │ │ ├── VM(s) │ │ │ └── Resource Pools │ │ └── DRS/HA settings │ ├── Storage (Datastores, Datastore Clusters) │ └── Networking (Port Groups, dvSwitches) Inheritance Behavior Permissions propagate downward ...
Post a Comment
Read more

Securing vCenter and ESXi Hosts: A VMware Architect’s Guide

  Securing vCenter and ESXi Hosts: A VMware Architect’s Guide In the evolving threat landscape, vCenter Server and ESXi hosts remain high-value targets in the data center. As the foundational control and compute planes of your virtual infrastructure, securing them is essential. Whether you’re operating in a regulated environment or simply looking to adopt best practices, this guide provides a comprehensive security baseline for hardened, resilient, and compliant vSphere deployments. 🔐 Securing vCenter Server (VCSA) Use a Dedicated Management Network Segment vCenter on a management VLAN. Apply firewall rules to restrict access to trusted IPs or jump boxes. Use NSX micro-segmentation for east-west traffic control (if you have this available). Identity Federation and MFA Integrate with an identity provider (Okta, ADFS, Azure AD). Enforce MFA for vSphere Client access. Avoid using Administrator@vsphere.local for daily use—use named accounts. Enable and Forward Logs Use remote syslo...
Post a Comment
Read more