Over the last 6-9 months, I have been reviewing the vast majority of a new book just released to print by Frank Denneman and Niels Hagoort – The vSphere 6.5 Host Resources Deep Dive. This book is, without a doubt, the most in-depth look at host design I have ever read, we are not talking […]
Recent Posts
Enabling IPv6 with DHCPv6-PD and PPPoE on a Fortigate
Out of morbid curiosity (and lack of IPv4 public address space available to me), I decided I wanted to enable IPv6 in my lab. However, before taking the plunge there, I would try it out on my residential ADSL line, I use the same brand of firewall there as in my lab so the experience […]
Vote for your top vBlogs and podcasts!
It’s time for the annual Top 100 vBlog voting as hosted every year by Eric Siebert. This year is notable as some of the long-standing champs of the blogging scene have chosen to withdraw (notably Frank Dennemann and Duncan Epping) to allow some new blood to enter the top 10. For good reason, as Duncan […]
Implementing a multi-tenant networking platform with NSX
This post is part of the Multi-tenant IaaS Networking course.
So we have covered the typical challenges of a multi-tenant network and designed a solution to one of these, it’s time to get down to the bones of it and do some configuration! Let’s implement it in the lab, I have set up an NSX ESG Cust_1-ESG and an NSX DLR control VM Cust_1-DLR with […]
Designing a networking platform for IaaS multi-tenancy
This post is part of the Multi-tenant IaaS Networking course.
Based on my last post, you’ll understand some of the challenges that are faced with traditional approaches to datacenter networking so let’s get into the high-level conceptual design here of how we might solve one of these problems. Most service providers have or are at least familiar with using MPLS for customer segregation in a […]
Networking
Recovering NSX Manager with corrupt filesystem
I had a bit of a storage outage in my lab due to a funky behaviour on the Synology that I use as primary storage for all my VMs: Today I Learned: Adding IP address to interfaces on Synology causes reboots :/ Lab now in not such great shape. 80 VMs with APD. #vExpert — […]
Designing a modern multi-tenant DC network
This post is part of the Multi-tenant IaaS Networking course.
Over the last 12 months my posting has been dialled back, this isn’t for lack of wanting or ideas, mainly a lack of time and mental bandwidth. Reason being, I have been designing and implementing a new cloud platform (namely “STC”1https://www.novosco.com/cloud-solutions/single-tenant-cloud) for my employer, Novosco – as with any new service or product this requires […]
My VCIX6-NV exam experience
I’ve been putting off doing VCAP level exams for a long time, probably longer than I should have in hind-sight. But a month ago I took my brave pills and booked what would be my first VCAP level exam: VCIX6-NV. So the date was set and I have been studying in pretty much all the […]
Setting up Duo 2FA for Fortigate admin authentication
I protect any account I have with two factor auth, at least the ones that support it (this site for example has 2FA for admin logon), it’s not that inconvenient (especially not with Authy/Duo) and greatly increases security of your critical accounts. Let’s start with the endgame: However, I haven’t protected my publicly accessible firewall […]
Enabling Mini Jumbo Frames (RFC4638) on OpenReach FTTC
I swapped out my single Fortigate 100D at home a while back for a cluster of two in active/passive, as part of this migration, that I have written about before I needed to terminate any DHCP or PPPoE interfaces on a different piece of kit than the clustered firewalls. I have had this in the […]
