Category Archives: Uncategorized

A few years ago I found an interesting vulnerability in the VMware Hands On Labs. I reported it and it got fixed but I found out at VMware Explore this year that I can disclose what I found. So 3 or 4 years later here we go. TLDR: outbound connections to any IP from internetContinue reading “VMware Hands On Labs Vulnerability”

I’m sure we’ve all used VM backup utilities that allow for access to base VMDKs for backups. There are a couple of way this works. Hotadd just adds a snapshotted disk to a backup proxy and it reads the base disk. You can backup via block or file this way. There are a couple ofContinue reading “VMware Disk Access”

Quick post today. I was looking for how to deploy HCX via powershell to my AVS cloud. There didn’t seem to be any examples and the documentation was hard to read. So in case someone else needs it: Not to hard just not well documented. You will need to set your environmental variables correctly.

I’ve wanted to test out NVME over TCP as a datastore from an ESXi host for some time. You may say “But Kenyon the Linux NVME implementation doesn’t support fused commands.” And you’d be right at one point I went through the configuration of an NVME target via the nvmet-cli tools. While this works forContinue reading “NVME over TCP”

Ran into something odd the other day. I was observing a 30 second power on delay for VMs on an ESXi host. I messed with it for a few weeks, dug through logs, and opened a VMware SR. Got nothing from all of the normal avenues. After the ticket was open for a good weekContinue reading “ESXi VM Power On Delay”

A while ago I wrote a post about ICMP latency: https://vskeeball.com/2021/09/14/ping-is-not-a-real-latency-measurement/. While we all conceptually understand this I recently helped build a testing framework to show a few types of tests running from AVS to Azure Native. Actually seeing the data brought home the points from the last post. These tests were all run oneContinue reading “TCP/UDP vs ICMP Latency”

I recently had a question from a colleague about how to move the gateway for a layer 2 extended network in HCX. The move gateway operation in HCX forces you to unextend the network. This is fine if all the workloads on the segment have been migrated but the story I’ve always been told andContinue reading “NSX-T HCX or L2 VPN and VDR MAC”

I’ve gotten a lot of questions from customers about how to monitor their NSX-T edges in AVS. Since the edges are considered management components customer don’t get access to the edge VMs in AVS (or most other clouds). This is done to protect the customer from breaking their environment by accidentally doing something to theContinue reading “NSX-T Edge Interface Monitoring”

A few month ago I thought it would be nice to have a vSphere content library on blob store. I did some googling and found Trevor Davis had posted this: https://avs.ms/centralized-avs-content-library-on-azure-blob/. I read it and thought there has got to be a better way than making the library on my machine running William Lam’s scriptContinue reading “vSphere Content Library on Azure Blob”

There have been quite a few blog posts about third party firewalls or in Azure speak NVA (Network Virtual Appliance) in AVS. Why Azure calls these NVAs and not VNFs (Virtual Network Function) like the rest of the world is a question I’d like to have answered. While the DFW (Distributed Firewall) should be usedContinue reading “Third Party Firewalls in AVS”