Scribd Logo
Upload

Welcome to Scribd!

  • 39 views

    Vca-Dcv: Esxi: RJP Infotek PVT LTD

    Uploaded by

    Ankit Dalmia
    This document provides an overview of VMware ESXi 6.X, including its features such as security, hardware abstraction, management access methods, and new capabilities in ESXi 6.X like expanded guest operating system support and NVMe enhancements. It also covers ESXi configuration topics like NTP synchronization, lockdown modes, and shell-based management.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    Vca-Dcv: Esxi: RJP Infotek PVT LTD

    Uploaded by

    Ankit Dalmia
    39 views11 pages
    This document provides an overview of VMware ESXi 6.X, including its features such as security, hardware abstraction, management access methods, and new capabilities in ESXi 6.X like expanded guest operating system support and NVMe enhancements. It also covers ESXi configuration topics like NTP synchronization, lockdown modes, and shell-based management.

    Original Title

    ESXi

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    This document provides an overview of VMware ESXi 6.X, including its features such as security, hardware abstraction, management access methods, and new capabilities in ESXi 6.X like expanded guest operating system support and NVMe enhancements. It also covers ESXi configuration topics like NTP synchronization, lockdown modes, and shell-based management.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    39 views11 pages

    Vca-Dcv: Esxi: RJP Infotek PVT LTD

    Uploaded by

    Ankit Dalmia
    This document provides an overview of VMware ESXi 6.X, including its features such as security, hardware abstraction, management access methods, and new capabilities in ESXi 6.X like expanded guest operating system support and NVMe enhancements. It also covers ESXi configuration topics like NTP synchronization, lockdown modes, and shell-based management.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    of 11

    VCA-DCV : ESXi

    RJP Infotek Pvt Ltd


    An Introduction to ESXi 6.X
    Ø ESXi – Elastic sky!
    Ø Hypervisor that Abstracts HW resources to offer to different VMs
    Ø VMM (Virtual Machine Monitor) receives request from VM & presents it to the VMKernel (ESXi)
    Ø Installable on hard disks, SAN LUNs, USB devices, SD cards, and diskless hosts
    Ø Small Disk footprint (less than 400MB)
    Ø Highly Secure :
    Memory hardening - Store in non-predictable memory locations
    Kernel module integrity - Digital signing of modules & applications
    Ø Host-based firewall – Restricts Access
    Ø UEFI secure boot
    Ø Lockdown modes – Normal, Strict
    Ø Trusted platform module

    Ø It can synchronize time with an NTP server


    Ø 64bit VM Kernel & hence runs only on 64 bit Processors that support (Virtualisation)
    Ø Access from DCUI (Direct Console User Interface), SSH, ESXi Shell, vCLI, PowerCLI, vSphere client, Web Client
    (vCenter), vSphere API/SDK, CIM (Common Information Model)
    Secure Boot

    • Secure Boot is:


    – 1. Intended to prevent boot-sector malware or kernel code injection.
    – 2. Hardware-based code signing.
    – 3. Extension of the UEFI BIOS architecture.
    – 4. Enabled or disabled through the BIOS (UEFI Boot Mode).

    • Each boot loader launched during the boot process is digitally signed and that signature is
    validated against a set of trusted certificates embedded in the UEFI BIOS. Secure Boot
    validates the software identity of the following components in the boot process:

    – i. UEFI drivers loaded from PCIe cards


    – ii. UEFI drivers loaded from mass storage devices
    – iii. Pre-boot UEFI shell applications
    – iv. OS UEFI boot loaders
    contd..
    Physical and Virtual Architecture

    • ESXi provides a virtualization layer that abstracts the processor, memory, storage, and networking
    resources of the physical host into multiple virtual machines.
    ESXi Features
    • ESXi includes a firewall that is enabled by default.
    • The ESXi firewall blocks incoming and outgoing traffic, except for the traffic
    that is enabled in the host’s security profile
    • Lockdown mode : Normal and strict.
    – With normal lockdown mode, no users but vpxuser have authentication permissions. Also, users
    cannot perform operations against the host directly.
    – In strict lockdown mode, the DCUI service is also stopped. If the connection to the vCenter Server
    system is lost the host can be accessed only if the vSphere ESXi Shell and SSH services are
    enabled and authorized users are added to the Exception Users list
    • NTP : An ESXi host can be configured as an NTP client. It can synchronize
    time with an NTP server on the Internet or your corporate NTP server.
    – For accurate performance graphs
    – For accurate time stamps in log messages
    – So that virtual machines have a source to synchronize with
    What’s New ?
    • Expanded Support for New Hardware, Architectures and Guest Operating
    Systems: Expanded support for the latest x86 chipsets, devices and drivers.
    NVMe enhancements (VM Hardware), and several new performance and
    scale improvements. NVMe controllers reduces software overhead by over
    50% compared to AHCI SATA SCSI device. Reduced guest I/O processing
    overhead with virtual NVMe devices.
    • Guest OS and Customization Support: Continue to offer broad support for
    GOSes, including recent Windows 10 builds, the latest from RHEL 7.x,
    Ubuntu 16.xx, SUSE 12 SPx and CoreOS 899.x. and Tech Preview of
    Windows Server 2016.
    • VMware Host Client: HTML5-based UI to manage individual ESX hosts.
    Supported tasks include creating and updating of VM, host, networking and
    storage resources, VM console access, and performance graphs and logs to
    aid in ESX troubleshooting.
    Maximums @ a glance
    • Host CPU maximums :
    – Logical CPUs per host : 576
    – NUMA Nodes per host 16
    – Maximums Virtual machines per host : 1024
    – Virtual CPUs per host : 4096
    – Virtual CPUs per core : 32
    – RAM per host : 12 TB
    – Virtual Disks per Host : 2048
    – NFS mounts per host : 256
    – LUNs per host : 512
    – ntg3 1 Gb Ethernet ports (Broadcom) : 32 (100 Gb Qlogic - 2)
    – Total virtual network switch ports per host: 4096
    ESXi 6.X – LAB
    • Determine the no. of CPU & RAM size, utilization
    • Determine if HT is enabled
    • Determine storage (Name, Capacity, free space)
    • What Network is the ESXi connected with for VMs to connect to &
    how many NICs are present in your ESXi
    • Determine the disk read & write rates (kbps)
    • Which Option allows you to change the GW & DNS IPs
    • How can you join your ESXi in a Domain
    • How can you sync the ESXi time to an NTP server
    • Determine the port numbers used by vSphere Web Client
    • What built-in roles are found by default
    ESXi Shell: Lower Level Management & control of ESXi

    • Esxcli –help
    • Esxcli system time get
    • Esxcli hardware memory get
    • Esxcli system maintenanceMode set –e true / false
    • Esxcli system shutdown reboot
    • Esxcli system shutdown poweroff
    • Esxcli system version get
    • Esxcli storage core device list
    • Esxcli storage core adapter list
    • Esxcli storage filesystem list
    ESXi Shell - Associated with vSphere API, built on top of the
    hostd that implements the APIs

    • vim-cmd vmsvc/getallvms (Lists all vm's running on hypervisor and provides vmid)

    • vim-cmd vmsvc/power.off vmid (Powers off vmid referenced from getallvms command)

    • vim-cmd vmsvc/power.off vmid (Powers off vmid referenced from getallvms command)

    • vim-cmd vmsvc/power.reboot vmid (Reboots vmid referenced from getallvms command)

    • vim-cmd vmsvc/destroy vmid (Deletes the vmdk and vmx files from disk)

    • vim-cmd hostsvc/maintenance_mode_enter (Puts hypervisor into maintenance mode)

    • vim-cmd hostsvc/maintenance_mode_exit (Takes hypervisor out of maintenance mode)

    You might also like