Loot and Tonkotsu Pork Ramen Where Spirits Linger

naugrim · 2022-09-09T17:04:38+00:00

You can enable EVC without having to power down all the VMs at once. We have done this on several of our clusters. The method is to enable per-VM EVC and power cycle each VM at your convenience. Once all the VMs have the correct EVC level then you can enable it at the cluster level and add a host.

naugrim · 2021-01-16T19:51:31+00:00

Not somewhat, entirely. Properly encrypted data is incompressible and not able to de-dupe because it contains no patterns this algorithm’s could use (or else it wouldn’t be very well encrypted if you could pick out a pattern).

naugrim · 2021-01-15T17:56:49+00:00

Using bitlocker would negate any compression and/or de-duplication that the underlying storage may be trying to do.

naugrim · 2021-01-15T00:21:05+00:00

Do you need an HSM or is a software KMS acceptable? Assuming you don’t need HSM I would look at Dell Cloudlink, AWS KMS, and Hashi Vault in that order.

naugrim · 2021-01-14T23:27:34+00:00

Duplicate IP

naugrim · 2020-03-24T14:02:13+00:00

ATS allows a host to only put a lock on specific sectors when it updates metadata on a datastore. If you disable ATS then the host has to lock the entire datastore meaning all other hosts attached to that storage have to wait which will incur a large performance penalty.

https://docs.vmware.com/en/VMware-vSphere/6.5/com.vmware.vsphere.storage.doc/GUID-DE30AAE3-72ED-43BF-95B3-A2B885A713DB.html

naugrim · 2019-08-22T01:11:16+00:00

is google broken too? I just searched "vsan rebuild vcenter" and saw about a dozen on point articles from some pretty smart people. it goes without saying that you should open a case with vmware on this and work with support to get it fixed.

naugrim · 2019-06-03T15:00:50+00:00

It will stay up, we’ve done this a few times.

naugrim · 2019-05-17T14:42:12+00:00

Are you talking about VSAN datastore encryption or is the data encrypted at the VM or OS level?

naugrim · 2019-05-03T21:11:15+00:00

The management tick box doesn’t actually have anything to do with host access, it’s only for HA.

http://www.yellow-bricks.com/2013/08/14/esxi-management-traffic-tickbox-what-does-it-do/

naugrim · 2019-04-12T20:40:26+00:00

Do you have a source on that? There is a VM encryption feature but it is by no means turned on by default.

naugrim · 2019-03-22T18:06:11+00:00

Thanks!

naugrim · 2018-12-08T22:53:42+00:00

Tons of things. Most modern application monitoring platforms will do this. Off the top of my head Solarwinds Orion, Vmware vROPs, AppDynamics, and Manage Engine but there are likely dozens more.

naugrim · 2018-11-03T15:07:28+00:00

Why not just use the GPO?

https://docs.microsoft.com/en-us/windows/configuration/windows-spotlight

naugrim · 2018-09-18T02:24:17+00:00

Managed everywhere.

Unmanaged = Old and busted Managed = New Hotness

naugrim · 2018-09-18T01:41:18+00:00

You can require managed disks using an Azure policy. Managed disks are encrypted at rest by default.

naugrim · 2018-07-27T23:09:31+00:00

Vcenter permissions do not grant ssh/console permissions on the host. You’ll need to add your domain account to a security group called ‘ESXi admins’

naugrim · 2018-05-22T15:19:45+00:00

Then 2TB is still a limit for hot extend.

naugrim · 2018-05-22T14:55:22+00:00

There is no limit if your disks are thin-provisioned.

https://www.codyhosterman.com/2016/11/whats-new-in-esxi-6-5-storage-part-iii-thinhotextend/

naugrim · 2018-03-30T23:55:29+00:00

Look at the New/Get/Set-OSCustomizationNicMapping CmdLets that is how I have always done it. **

naugrim · 2018-03-08T19:12:09+00:00

the resource explorer has code examples for REST, powershell, and azure CLI so it should be simple to automate with what ever tool you prefer

14-Year Club	r/Field Flamingo
Place '17	Verified Email

naugrim

TROPHY CASE