Description
Efnisyfirlit
- Title Page
- Copyright and Credits
- Mastering VMware vSphere 6.7 Second Edition
- About Packt
- Why subscribe?
- Packt.com
- Contributors
- About the authors
- About the reviewer
- Packt is searching for authors like you
- Preface
- Who this book is for
- What this book covers
- To get the most out of this book
- Download the color images
- Conventions used
- Get in touch
- Reviews
- Section 1: Getting Started
- Evolution to vSphere 6.7
- Introduction to VMware vSphere
- vSphere strategy – the foundation of your unified hybrid cloud
- Software-defined data center (SDDC)
- Virtualization versus containers
- VMware vSphere ecosystem
- Data centers and cloud computing
- Storage and availability
- Network and security
- End user computing
- Cloud management
- Cloud-native workloads
- Introduction to VMware Cloud on AWS
- Hardware specifications and sizing
- Physical location
- Pricing
- Interconnection with on-premises SDDC
- Connectivity to native AWS services
- Certifications
- What’s new in VMware vSphere 6.7?
- Key features
- vSphere Client (HTML-5)
- Improved vCenter Server Appliance (vCSA) monitoring
- Improved vCenter backup management
- ESXi single-reboot upgrades
- ESXi Quick Boot
- Support for Remote Direct Memory Access (RDMA)
- vSphere persistent memory
- Virtual Trusted Platform Module (vTPM)
- TPM 2.0
- Microsoft virtualization-based security (VBS)
- Per-VM Enhanced vMotion Compatibility (EVC)
- Hybrid linked mode
- Instant Clone
- Configuration maximums
- Virtual machine hardware 14
- ESXi 6.7 hypervisors
- vCenter Server 6.7
- VMware vSphere 6.7 Editions
- VMware vSphere Editions
- VMware vSphere Essentials Kits
- Remote Office Branch Office (ROBO) editions
- Reasons for and against upgrading
- Why upgrade?
- Why shouldn’t you upgrade?
- Upgrade paths
- Summary
- Questions
- Further reading
- Designing and Planning a Virtualization Infrastructure
- Planning a virtual infrastructure project
- Plan-Do-Check-Act (PDCA)
- Waterfall
- ITIL v3
- Improved waterfall
- Physical hardware considerations
- Physical form factor considerations
- Standard rack servers
- Blade servers
- Hyper-converged servers
- Resource comparison
- Hyper-converged systems
- Storage design considerations
- Standard storage arrays
- Software-defined storage
- Network design considerations
- Three-tier architecture
- Access
- Distribution
- Core
- Leaf spine
- Assess
- The design objective
- Requirements, constraints, assumptions, and risks
- Design
- Conceptual design
- Logical design
- Physical design
- ESXi host
- Compute
- Storage
- Network connectivity
- Management
- vCenter Server
- How to provide good documentation
- Best practices
- Reference architecture
- VVD
- Different scenarios
- Enterprise
- Business requirements
- Possible constraints
- Main risks
- Some design decisions
- Small and medium-sized business (SMB)
- Business requirements
- Possible constraints
- Main risks
- Some design decisions
- ROBO
- Business requirements
- Possible constraints
- Main risks
- Examples of design decisions
- Summary
- Questions
- Further reading
- Analysis and Assessment of Existing Environments
- Analyzing a physical environment before virtualizing
- Useful metrics from a physical environment
- Processor metrics
- Memory metrics
- Disk metrics
- Network metrics
- Are all workloads good candidates to be virtualized?
- Existing tools to analyze a physical environment
- VMware Capacity Planner (VCP)
- Virtual Storage Area Network (vSAN) sizing tools
- Dell Live Optics
- Microsoft Assessment and Planning (MAP) Toolkit
- Assessing an existing virtual environment
- Discovery and inventory
- Health check
- Benchmarks
- DVD Store
- Hyper-Converged Infrastructure Benchmark (HCIBench)
- Existing tools for analyzing a virtual environment
- RVTools
- VOA
- VMware vSphere Health Check
- Summary
- Questions
- Further reading
- Deployment Workflow and Component Installation
- vSphere components and workflow
- ESXi deployment plan
- Choosing the hardware platform
- Identification of the storage architecture
- Defining the network configuration
- ESXi installation
- Where should I install ESXi?
- Preparing for deployment
- Interactive installation
- Unattended installation
- Auto Deploy installation
- How Auto Deploy works
- Configuring DHCP
- Configuring TFTP
- Creating an image profile
- Creating deployment rules
- Auto Deploy modes
- Stateless installation
- Stateless caching installation
- Stateful installation
- vCenter Server components
- PSC
- Linked Mode
- vCenter Server
- Migration from vCenter for Windows to vCSA
- Where to install – physical or virtual?
- vCenter Server Appliance deployment
- Why deploy vCSA instead of the Windows version?
- Installing the vCSA PSC
- Installing the vCSA vCenter
- Installing the vCSA with Embedded Platform Service Controller
- vCSA HA
- vCenter HA configuration
- Summary
- Questions
- Further reading
- Configuring and Managing vSphere 6.7
- Using the VMware vSphere HTML5 client
- Configuring ESXi
- Management network configuration
- Enabling Secure Shell (SSH) access
- ESXi firewall
- Configuring the Network Time Protocol (NTP)
- ESXi 6.7 partition layout
- Boot banks
- Scratch partition
- Centralized log management
- vRealize Log Insight
- Free syslog servers
- Syslog configuration
- Backing up and restoring ESXi
- Backing up and restoring ESXi using CLI
- Backing up and restoring ESXi using PowerCLI
- Backing up using PowerCLI
- Restoring using PowerCLI
- Backing up all ESXi servers within a single vCenter server
- Configuring vCSA
- Basic setup using the vCenter Server Appliance Management Interface (VAMI)
- Modifying the IP address and DNS
- Exporting a support bundle
- Configuring time synchronization
- Changing the vCSA password
- Licensing
- Roles and permissions
- AD integration
- Configuring ESXi with AD authentication
- Installing the VMware Enhanced Authentication plugin
- vCSA and PSC
- Repointing the vCSA to another external PSC
- Pointing the vCSA with an embedded PSC to an external PSC
- Resetting the SSO password
- Exporting and importing the vCSA configuration
- The vCSA backup procedure
- vCSA restoration procedure
- Managing data centers, clusters, and hosts
- Creating a data center
- Adding a host to the vCenter Server
- Disconnecting a host from vCenter Server
- Removing a host from vCenter Server
- Creating a cluster
- Removing a host from a cluster
- Managing hosts
- Using tags
- Tasks
- Scheduling tasks
- Managing host profiles
- Automating tasks with scripts
- Automating with PowerCLI
- PowerCLI script examples
- vCenter REST API
- Summary
- Questions
- Further reading
- Life Cycle Management, Patching, and Upgrading
- Patching a vSphere 6.7 environment
- Upgrade flow to vSphere 6.7
- Upgrading the workflow and procedure
- Step 1 – pre-migration
- Step 2 – migration
- Step 3 – validation
- Upgrading vCSA 6.5 to vCSA 6.7
- Upgrading vCenter 6.5 for Windows to vCenter 6.7 for Windows
- PSC upgrade
- Upgrading vCenter Server
- Migrating vCenter 6.5 for Windows to vCSA 6.7
- Migration procedure
- Upgrading standalone ESXi servers
- ESXi compatibility checker
- Updating or patching ESXi hosts through the installation ISO
- Updating or patching ESXi hosts through the command line
- Rolling back to the previous version
- VUM
- Configuring VUM
- Working with baselines
- Baseline groups
- Attaching or detaching baselines
- Scanning VMs and hosts
- Staging and remediating patches
- Upgrading hosts with VUM
- Upgrading VM hardware
- Upgrading VM Tools
- Updating the vCSA
- Updating the vCSA through the command line
- Staging and remediating patches
- Updating the vCSA with VAMI
- Summary
- Questions
- Further reading
- Section 2: Managing Resources
- Managing Networking Resources
- Basic network overview
- OSI model
- Encapsulation and de-encapsulation
- MAC tables and MAC learning process
- Maximum Transmission Unit (MTU)
- Virtual LAN (VLAN)
- Transmission Control Protocol (TCP) versus User Datagram Protocol (UDP)
- IPv6
- Virtual networking with switches
- Standard virtual switch (vSwitch) overview
- Distributed vSwitch overview
- Comparing standard and distributed vSwitches
- Managing standard virtual networking
- Creating a new vSwtich
- New vSwitch from ESXi host client
- New vSwitch from vCenter Server
- New vSwitch from ESXi CLI
- Working with port groups
- Creating a new port group from ESXi host client
- Creating a new port group from vCenter Server
- Creating a new port group from ESXi CLI
- Working with VMkernel adapters
- Creating a new VMkernel adapter from ESXi host client
- Creating a new VMkernel adapter from vCenter Server
- Working with physical NICs
- TCP/IP stacks
- Managing distributed virtual networking
- Creating a distributed vSwitch
- Attaching the ESXi host to the distributed vSwitch
- Creating distributed port groups
- Properties and configuration options of the distributed vSwitch
- Topology
- Link Aggregation Control Protocol (LACP)
- Private VLAN (PVLAN)
- NetFlow
- Port mirroring
- Health check
- Ports, hosts, and VMs
- Migrate VM networking
- NIOC
- Network resource pools
- Direct allocation on VM
- Advanced network functions
- Single Root I/O Virtualization (SR-IOV)
- Enabling SR-IOV
- Configuring VM for SR-IOV
- Traffic filtering and marking
- Summary
- Questions
- Further reading
- Managing Storage Resources
- Storage basics
- Storage arrays
- Storage performance
- The RAID level
- Deduplication
- Replication
- Physical storage device types
- SSDs and AFAs
- Asymmetric Logical Unit Access (ALUA) arrays
- VMware vSphere storage types
- Storage types at the ESXi logical level
- Storage types at the ESXi physical level
- Storage types at VM logical levels
- Storage types at the VM physical level
- Persistent memory (PMem)
- VMware vSphere storage configuration
- FC storage
- FCoE storage
- iSCSI storage
- NFS storage
- SIOC and storage DRS
- SIOC
- Reservations, limits, and shares
- Reservations
- Limits
- Shares
- RLS calculations
- SIOC versions
- Storage DRS
- Datastore clusters
- Anti-affinity rules
- Advanced storage features
- Virtual Machine File System (VMFS) 6
- Automatic space reclaim
- Instant clones versus linked clones
- Storage DRS versus storage tiering
- RDM
- Permanent Device Loss (PDL) and All-Paths-Down (APD)
- Flash Read Cache
- Storage integration
- VMware vSphere SPBM
- Pluggable Storage Architecture (PSA)
- Multipathing
- VMware vStorage API for Array Integration (VAAI)
- VMware vSphere APIs for I/O Filtering (VAIO)
- VASA
- VVols
- Introducing VMware vSAN
- Planning and designing
- Device considerations
- vSAN configuration
- Health monitoring
- vSAN policies
- Creating VM on vSAN
- Summary
- Questions
- Further reading
- VM Deployment and Management
- The components of a virtual machine
- Virtual hardware
- vCPUs
- Memory
- Network adapter
- Virtual disks
- Storage controller
- File structure
- Changing the default file position
- Virtual machine tools
- OVT
- Deploying VMs
- Creating a new VM
- Hardware version
- Setting the default hardware version
- Installing the OS
- Installing Virtual Machine Tools
- Cloning a VM
- Deploying a VM from a template
- VM customization Specifications
- Content library
- Creating a content library
- Local content library
- Subscribed content library
- Working with the content library
- Uploading ISO images
- Uploading templates and OVF files
- Deploying VMs from the content library
- ISO files from the content library
- Managing VMs
- Adding or registering an existing VM
- Removing or deleting a VM
- Managing the power state of a VM
- Managing VM snapshots
- Creating a snapshot
- Reverting to a snapshot
- Committing changes
- Snapshot consolidation
- Importing and exporting VMs
- Deploying Open Virtual Format (OVF) and Open Virtual Appliance (OVA) templates
- Exporting a virtual machine and an Open Virtual Format (OVF)
- Converting VMs
- P2V conversion
- V2V conversion
- Summary
- Questions
- Further reading
- VM Resource Management
- Virtual machine resource management
- Reservations, limits, and shares
- Shares
- Reservations
- Limits
- CPU resources
- Memory resources
- VM swapping
- ESXi host memory states
- TPS
- Ballooning
- Compression
- Host swapping
- Virtual machine migration
- Compute vMotion
- Storage vMotion
- vMotion without shared storage
- DRS
- Virtual network-aware DRS
- Managing DRS rules
- VM-VM affinity rule
- VM-Host affinity rule
- DRS recommendations
- DRS utilization
- Managing power resources
- Resource pools and vApps
- Resource pool configuration
- Expandable resource pool
- Resource allocation monitoring and calculations
- Managing resource pools
- vApps
- Network and storage resources
- Summary
- Questions
- Further reading
- Section 3: Advanced Topics
- Availability and Disaster Recovery
- VMware vSphere HA
- vSphere HA configuration
- vSphere HA heartbeats
- vSphere HA network heartbeats
- vSphere HA storage heartbeats
- vSphere HA protection mechanism
- Virtual Machine Component Protection (VMCP)
- Proactive HA
- Admission control
- VM restart and monitoring
- VMware vSphere FT
- FT configuration
- Working with FT-enabled VM
- FT performance implications
- Virtual machine clustering
- Clustering features available in VMware vSphere
- RDM device and multi-writer flag
- Virtual machine backup
- Transport modes
- Backup solutions for VMware vSphere
- Veeam Backup and Replication
- NAKIVO Backup and Replication
- Altaro VM Backup
- Vembu VMBackup
- Deduplication appliances
- Hyper-scale solutions
- Cohesity
- Rubrik
- VMware vSphere Replication
- vSphere Replication installation
- Working with vSphere Replication
- Configuring vSphere Replication
- Disaster recovery and disaster avoidance
- DR of a virtual data center
- DR versus disaster avoidance
- DR versus stretched clusters
- VMware solutions
- VM Replication
- Stretched cluster
- SRM
- Summary
- Questions
- Further reading
- Securing and Protecting Your Environment
- Security and hardening concepts in vSphere
- Hardening vSphere
- Authentication and identity
- SSO configuration
- Password management
- Role-Based Access Control (RBAC)
- Active directory integration
- MFA
- Smart cards
- RSA SecurID
- vCenter Server, ESXi, and VM hardening
- ESXi hardening
- Lockdown mode
- Networking
- Transparent Page Sharing (TPS)
- VIB acceptance level
- Host encryption mode
- ESXi Secure Boot
- vCenter hardening
- VM hardening
- VM Secure Boot
- Other security aspects
- Log management
- Monitoring protocols
- Certification management
- Encryption options of the vSphere
- Protecting the data at rest
- VM encryption
- Protecting data in motion
- Encrypted vMotion
- Summary
- Questions
- Further reading
- Analyzing and Optimizing Your Environment
- Monitoring a virtual environment
- vSphere monitoring
- vCenter Server statistics levels
- Performance monitoring with vCenter Server
- ESXi health
- Working with alarms
- CLI monitoring
- ESXTOP
- PowerCLI
- VM optimization
- Using the default VM templates
- Using only the necessary virtual hardware
- Choosing the correct virtual network adapter
- VMware tools
- Paravirtual SCSI (PVSCSI) storage controller
- Don’t use snapshots in production
- Don’t oversize your VMs
- VMware OS Optimization Tool (OSOT)
- Log management
- vRealize Log Insight
- vRealize Operations
- vRealize Operations installation
- vRealize Operations analytics
- vRealize Operations integrations
- Other monitoring tools
- Veeam ONE
- Opvizor
- Summary
- Questions
- Further reading
- Troubleshooting Your Environment
- What is troubleshooting?
- Troubleshooting a virtual environment
- CLI tools
- esxcli commands
- esxcfg-*
- Ruby vSphere console
- vim-cmd
- vcsa-cli
- PowerCLI
- Logs
- ESXi host logs
- Troubleshooting vSphere components
- Troubleshooting the vCenter Server
- Troubleshooting the ESXi host
- Troubleshooting cluster HA or DRS
- Troubleshooting a virtual network
- Troubleshooting storage
- Troubleshooting VMs
- Summary
- Questions
- Further reading
- Section 4: Building Your Lab Environment
- Building Your Own VMware vSphere Lab
- The importance of lifelong learning
- Why build a lab?
- VMware Hands-On Lab (HOL)
- VMware forums
- Blogs
- Choosing the right platform
- Standard rack servers
- Desktop PC
- Small, dedicated PCs
- Cloud-based solutions
- A dedicated server in a data center
- Software components and licensing
- VMware licensing
- VMware EVALExperience
- Windows licensing
- Other software components
- Storage
- Networking
- Architecture and logical design
- The architecture of the lab
- The Master ESXi hypervisor
- iSCSI storage
- Virtual router
- Management station
- AD
- IP address plan
- Management network
- vMotion network
- iSCSI network
- Production network
- A detailed implementation guide
- Master ESXi server configuration
- Network configuration
- Virtual switches
- Port groups
- Virtual machines
- Virtual router
- Virtual router configuration
- Firewalls and access to the virtual router
- DNS configuration
- License configuration
- VLAN configuration
- Windows infrastructure
- DC01.learnvmware.local
- DC02.learnvmware.local
- Mgmt.learnvmware.local
- iscsi.learnvmware.local
- Storage design
- iSCSI target configuration
- DNS configuration
- Centralized management
- iSCSI target configuration
- ESXi servers
- Network configuration
- vSwitches
- Port groups
- VMkernel ports
- Network verification
- Storage configuration
- The vCenter Server
- vSphere configuration
- Summary
- Assessment
- Chapter 1: Evolution to vSphere 6.7
- Chapter 2: Designing and Planning a Virtualization Infrastructure
- Chapter 3: Analysis and Assessment of Existing Environments
- Chapter 4: Deployment Workflow and Component Installation
- Chapter 5: Configuring and Managing vSphere 6.7
- Chapter 6: Life Cycle Management, Patching, and Upgrading
- Chapter 7: Managing Networking Resources
- Chapter 8: Managing Storage Resources
- Chapter 9: VM Deployment and Management
- Chapter 10: VM Resource Management
- Chapter 11: Availability and Disaster Recovery
- Chapter 12: Securing and Protecting Your Environment
- Chapter 13: Analyzing and Optimizing Your Environment
- Chapter 14: Troubleshooting Your Environment
- Other Books You May Enjoy
- Leave a review – let other readers know what you think