Cloud Foundation on VxRail is Even More “Dynamic” and “Power”-ful
Wed, 03 Aug 2022 21:32:14 -0000|
Read Time: 0 minutes
Dell Technologies and VMware are happy to announce the availability of VMware Cloud Foundation 4.3.1 on Dell EMC VxRail 7.0.241. This new release extends flexible VxRail platform principal storage options with Dell EMC Fibre Channel storage, new VxRail storage integration enhancements, new VxRail dynamic node and 15th generation hardware platform support, new LCM enhancements, and security and deployment updates. Read on for details!
Cloud Foundation on VxRail: Storage Enhancements
VMFS on FC Principal Storage with Dell EMC PowerMax, PowerStore, and Unity XT Storage, and 14th Generation VxRail Dynamic Nodes
More co-engineered goodness makes its way into this release with new support for VMFS on FC Principal storage options for VI Workload Domains.
First, VxRail 7.0.241 supports deploying clusters using VMFS over FC storage as its principal storage instead of vSAN when using new 14th Generation VxRail dynamic nodes. Customers of Dell EMC PowerMax, Dell EMC Powerstore-T, and Dell EMC Unity XT can now leverage their existing storage array investments for VxRail environments. They can also take advantage of the benefits of the VxRail HCI System Software cluster validation, automation, and life cycle management for the compute, hardware, and software infrastructure components.
This principal FC storage support also extends into use cases for Cloud Foundation on VxRail. VCF 4.3.1 now provides updated SDDC Manager awareness of these new types of VMFS on FC principal storage-based 14th Generation VxRail dynamic node clusters. In addition, we have also updated SDDC Manager workflows to support adding either VMFS on FC principal storage-based 14th Generation VxRail dynamic node clusters or vSAN based principal storage VxRail HCI node clusters into VI Workload Domains.
With this latest enhancement VCF on VxRail delivers even more storage flexibility to best meet your workload requirements. The figure below illustrates the different ways in which storage can be leveraged in VCF on VxRail deployments across workload domain types and across principal and supplemental storage use cases. (Note that external storage, including remote vSAN HCI Mesh datastores, were already supported with VCF on VxRail but as supplemental storage prior to this latest release.)
Figure 1: Cloud Foundation on VxRail Supported Storage Options
To get some hands on with creating a new VxRail VI workload domain using VMFS on FC principal storage and VxRail dynamic nodes with PowerStore-T, check out this new interactive demo that walks you through the process.
Cloud Foundation on VxRail LCM Enhancements
SDDC Manager LCM Precheck and Cluster Operation Workflows Integrated with VxRail Health Check API
SDDC Manager has always enabled VCF administrators to perform ad hoc LCM prechecks. These prechecks are used to validate the VCF environment health and configuration status of workload domains, to avoid running into issues while executing LCM and cluster management related workflows.
This latest release includes more co-engineered enhancements to these prechecks by integrating them with native VxRail Health Check APIs. As a result, SDDC Manager ad hoc precheck, LCM, and cluster management related workflows will call on these VxRail APIs to obtain detailed VxRail system-specific cluster health and configuration checks. This brings administrators a more turnkey platform experience that now factors in underlying HCI system HW/SW delivered by VxRail, all within the native SDDC Manager administration experience.
Figure 2: Integrated VxRail Health Check API with SDDC Manager LCM precheck
VxRail Hardware Platform Enhancements
Intel-based 15th Generation VxRail HCI Nodes and 14th Generation VxRail Dynamic Nodes
The VxRail 7.0.241 release brings about new HW platform support with Intel-based 15th Generation VxRail HCI nodes and new 14th Generation VxRail dynamic nodes. For more information on the latest VxRail hardware platforms, check out these blogs:
- Our fastest and biggest launch ever! - We’ve also made it simpler
- It’s Been a Dell EMC VxRail Filled Summer
- Learn more about the latest major VxRail software update: VxRail 7.0.240
Cloud Foundation on VxRail Deployment Enhancements
New VxRail First Run Options to Set Network MTU and Setting Multiple VxRail System VDS via UI
As part of the management cluster prep for VCF on VxRail deployments, the network MTU size of the management cluster system network must be configured before Cloud Builder executes the VCF Bring up. This ensures that the management cluster can support the prerequisites for the deployment and installation of NSX-T, and to align it with the required VCF best practice design architecture.
Prior to this release, these network settings would have needed to be manually configured. Now, they are set as part of the standard VxRail First Run cluster deployment automation process. Doing this streamlines prerequisite management cluster configuration for VCF and speeds up VCF on VxRail deployments, to bring about a faster Time-To-Value (TTV) for customers.
One can now also use the VxRail Manager First Run UI Deployment Wizard to deploy VxRail clusters with Multiple System VDS configured. In previous versions of VxRail, this was only available when using the VxRail API. This wizard allows you to configure this and other cluster settings to simplify cluster deployments, while delivering on more flexible cluster configurations options.
Cloud Foundation on VxRail Security Enhancements
ESXi Lockdown Mode For VxRail Clusters
No blog post is complete without calling out new security feature enhancements. And VCF 4.3.1 on VxRail 7.0.241 delivers. Introduced in this release is new support for ESXi lockdown mode for VxRail clusters.
After a workload domain and a corresponding VxRail cluster have been created, a user can use the vSphere Web Client to configure lockdown mode on a given VxRail host. VCF also allows you to enable or disable lockdown mode for a workload domain or cluster by using the SOS command line utility. Using the SOS command automates the process of enabling or disabling this feature over several hosts quickly. (Important: VCF currently only supports the implementation of normal lockdown mode. It is the SOS utility that configures this lockdown mode. ‘Strict’ lockdown mode is currently not supported.)
Well there you have it. Tons of new VCF on VxRail goodies to ponder for now. As always, for more information on VxRail and VCF on VxRail, please check out the links at the end of this blog and other VxRail related blogs here on the InfoHub.
Author: Jason Marques
Twitter - @vWhipperSnapper
Related Blog Posts
What’s New: VMware Cloud Foundation 4.5.1 on Dell VxRail 7.0.450 Release and More!
Thu, 11 May 2023 15:55:52 -0000|
Read Time: 0 minutes
This latest Cloud Foundation (VCF) on VxRail release includes updated versions of software BOM components, a bunch of new VxRail platform enhancements, and some good ol’ under-the-hood improvements that lay the groundwork for future features designed to deliver an even better customer experience. Read on for the highlights…
VCF on VxRail operations and serviceability enhancements
View Nvidia GPU hardware details in VxRail Manager vCenter plugin ‘Physical View’ and VxRail API
Leveraging the power of GPU acceleration with VCF on VxRail delivers a lot of value to organizations looking to harness the power of their data. VCF on VxRail makes operationalizing infrastructure with Nvidia GPUs easier with native GPU visualization and details using the VxRail Manager vCenter Plugin ‘Physical View’ and VxRail API. Administrators can quickly gain deeper-level hardware insights into the health and details of the Nvidia GPUs running on their VxRail nodes, to easily map the hardware layer to the virtual layer, and to help improve infrastructure management and serviceability operations.
Figure 1 shows what this looks like.
Figure 1. Nvidia GPU visualization and details – VxRail vCenter Plugin ‘Physical View’ UI
Support for the capturing, displaying, and proactive Dell dial home alerting for new VxRail iDRAC system events and alarms
Introduced in VxRail 7.0.450 and available in VCF 4.5.1 on VxRail 7.0.450 are enhancements to VxRail Manager intelligent system health monitoring of iDRAC critical and warning system events. With this new feature, new iDRAC warning and critical system events are captured, and through VxRail Manager integration with both iDRAC and vCenter, alarms are triggered and posted in vCenter.
Customers can view these events and alarms in the native vCenter UI and the VxRail Manager vCenter Plugin Physical View which contains KB article links in the event description to provide added details and guidance on remediation. These new events also trigger call home actions to inform Dell support about the incident.
These improvements are designed to improve the serviceability and support experience for customers of VCF on VxRail. Figures 2 and 3 show these events as they appear in the vCenter UI ‘All Issues’ view and the VxRail Manager vCenter Plugin Physical View UI, respectively.
Figure 2. New iDRAC events displayed in the vCenter UI ‘All Issues’ view
Figure 3. New iDRAC events displayed in the VxRail Manager vCenter Plugin UI ‘Physical View’
Support for the capturing, displaying, and proactive dial home alerting for new iDRAC NIC port down events and alarms
To further improve system serviceability and simplify operations, VxRail 7.0.450 introduces the capturing of new iDRAC system events related to host NIC port link status. These include NIC port down warning events, each of which is indicated by a NIC100 event code and a ‘NIC port is started/up’ info event.
A NIC100 event indicates either that a network cable is not connected, or that the network device is not working.
A NIC101 event indicates that the transition from a network link ‘down’ state to a network link ‘started’ or ‘up’ state has been detected on the corresponding NIC port.
VxRail Manager now creates new VxM events that track these NIC port states.
As a result, users can be alerted through an alarm in vCenter when a NIC port is down. VxRail Manager will also generate a dial-home event when a NIC port is down. When the condition is no longer present, VxRail Manager will automatically clear the alarm by generating a clear-alarm event.
Finally, to reduce the number of false positive events and prevent unnecessary alarm and dial home events, VxRail Manager implements an intelligent throttling mechanism to handle situations in which false positive alarms related to network maintenance activities could occur. This makes the alarms/events that are triggered more credible for an admin to act against.
Table 1 contains a summary of the details of these two events and the VxRail Manager serviceability behavior.
Table 1. iDRAC NIC port down and started event and behavior details
Let’s double click on this serviceability behavior in a bit more detail.
Figure 4 depicts the behavior process flow VxRail Manager takes when iDRAC discovers and triggers a NIC port down system event. Let’s walk through the details now:
1. The first thing that occurs is that iDRAC discovers that the NIC port state has gone down and triggers a NIC port down event.
2. Next, iDRAC will send that event to VxRail Manager.
3. At this stage VxRail Manager will validate how long the NIC port down event has been active and check whether a NIC port started (or up) event has been triggered within a 30-minute time frame since the original NIC port down event occurred. With this check, if there has not been a NIC port started event triggered, VxRail Manager will begin throttling NIC port down event communication in order to prevent duplicate alerts about the same event.
If during the 30-minute window, a NIC port started event has been detected, VxRail Manager will cease throttling and clear the event.
4. When the VxRail Manager event throttling state is active, VxRail Manager will log it in its event history.
5. VxRail Manager will then trigger a vCenter alarm and post the event to vCenter.
6. Finally, VxRail Manager will trigger a NIC port down dial home event communication to backend Dell Support Systems, if connected.
Figure 4. Processing VxRail NIC port down events, and VxRail Manager throttling logic
Figure 5 shows what this looks like in the vCenter UI.
Figure 5. VxRail NIC port down trigger alarm in vCenter UI
Figure 6 shows what this looks like in the VxRail Manager vCenter Plugin ‘Physical View’ UI.
Figure 6. VxRail Manager vCenter Plugin ‘Physical View’ UI view of a VxRail NIC port down event
VCF on VxRail storage updates
Support for new PowerMax 2500 and 8500 storage arrays with VxRail 14G and 15G dynamic nodes using VMFS on FC principal storage
Starting in VCF 4.5.1 on VxRail 7.0.450, support has been added for the latest next gen Dell PowerMax 2500 and 8500 storage systems as VMFS on FC principal storage when deployed with 14G and 15G VxRail dynamic node clusters in VI workload domains.
Figure 7 lists the Dell storage arrays that support VxRail dynamic node clusters using VMFS on FC principal storage for VCF on VxRail, along with the corresponding supported FC HBA makes and models.
Note: Compatible supported array firmware and software versions are published in the Dell E-Lab Support Matrix for reference.
Figure 7. Supported Dell storage arrays used as VMFS on FC principal storage
VCF on VxRail lifecycle management enhancements
VCF Async Patch Tool 188.8.131.52 update
This tool addresses both LCM and security areas. Although it is not officially a feature of any specific VCF on VxRail release, it does get released asynchronously (pun intended) and is designed for use in VCF and VCF on VxRail environments. Thus, it deserves a call out.
For some background, the VCF Async Patch Tool is a new CLI based tool that allows cloud admins to apply individual component out-of-band security patches to their VCF on VxRail environment, separately from an official VCF LCM update release. This enables organizations to address security vulnerabilities faster without having to wait for a full VCF release update. It also allows admins to install these patches themselves without needing to engage support resources to get them applied manually.
With this latest AP Tool 184.108.40.206 release, the AP Tool now supports the ability to use patch VxRail (which includes all of the components in a VxRail update bundle including VxRail Manager and ESXi software components, and VxRail HW firmware/drivers) within VCF on VxRail environments. This is a great addition to the tool’s initial support for patching vCenter and NSX Manager in its first release. VCF on VxRail customers now have a centralized and standardized process for applying security patches for core VCF and VxRail software and core VxRail HCI stack hardware components (such as server BIOS or pNIC firmware/driver for example), all in a simple and integrated manner that VCF on VxRail customers have come to expect from a jointly engineered integrated turnkey hybrid cloud platform.
Note: Hardware patching is made possible due to how VxRail implements HW updates with the core VxRail update bundle. All VxRail patches for VxRail Manager, ESXi, and HW components are delivered in a the VxRail update bundle and leveraged by the AP Tool to apply.
From an operational standpoint, when patches for the respective software and hardware components have been applied, and a new VCF on VxRail BOM update is available that includes the security fixes, admins can use the tool to download the latest VCF on VxRail LCM release bundles and upgrade their environment back to an official in-band VCF on VxRail release BOM. After that, admins can continue to use the native SDDC Manager LCM workflow process for applying additional VCF on VxRail upgrades. Figure 8 highlights this process at a high level.
Figure 8. Async Patch Tool overview
In this latest release, the new features and platform improvements help set the stage for even more innovation in the future. For more details about bug fixes in this release, see VMware Cloud Foundation on Dell VxRail Release Notes. For this and other Cloud Foundation on VxRail information, see the following additional resources.
Author: Jason Marques
- VMware Cloud Foundation on Dell VxRail Release Notes
- VxRail page on DellTechnologies.com
- VxRail Info Hub
- VCF on VxRail Interactive Demo
New Year’s Resolutions Fulfilled: Cloud Foundation on VxRail
Thu, 10 Feb 2022 13:24:57 -0000|
Read Time: 0 minutes
New Year’s Resolutions Fulfilled: VMware Cloud Foundation 4.4 on VxRail 7.0.320
Many of us make New Year’s resolutions for ourselves with each turn of the calendar. We hope everyone is still on track!
The Cloud Foundation on VxRail team wanted to establish our own resolutions too. And with that, Dell Technologies and VMware have come together to fulfill our resolution of continuing to innovate by making operating and securing cloud platforms easier for our customers while helping them unlock the power of their data.
And as a result, we are happy to announce the availability of our first release of the new year: VMware Cloud Foundation 4.4 on Dell VxRail 7.0.320! This release includes Cloud Foundation and VxRail software component version updates that include patches to some recent widely known security vulnerabilities. It also adds support for Dell ObjectScale on the vSAN Data Persistence Platform (vDPp), support for additional 15th generation VxRail platforms, new security hardening features, lifecycle management improvements, new Nvidia GPU workload support, and more. Phew! So be resolute and read on for the details.
VCF on VxRail Storage Enhancements
Support for vSAN Data Persistence Platform and Dell ObjectScale Modern Stateful Object Storage Services
Initially introduced in vSphere 7.0 U1, the vSAN Data Persistence Platform (vDPp) is now supported as part of in VCF 4.4 on VxRail 7.0.320. Check out this great VMware blog post to learn more about vDPp.
Beginning in this release, support for running the new Dell ObjectScale data service on top of vDPp is also available. This new next-gen cloud native software defined object storage service is geared toward those IT teams who are looking to extend their cloud platform to run Kubernetes native stateful modern application data services. To learn more about ObjectScale please refer to this blog post. Note: VCF on VxRail currently supports using vDPp in a vSAN “Shared Nothing Architecture Mode” only.
The following figure illustrates the high-level architecture of vDPp.
Figure 1 – vDPp and ObjectScale
As a result of this new capability, VCF on VxRail customers can further extend the storage flexibility the platform can support with S3 compatible object storage delivered as part of the turnkey cloud infrastructure management/operations experience.
Giving customers more storage flexibility resolution: Check!
VCF on VxRail Lifecycle Management Enhancements
Improved SDDC Manager LCM Prechecks
This release brings even more intelligence that is embedded into the SDDC Manager LCM precheck workflow. When performing an upgrade, the SDDC Manager needs to communicate to various components to complete various actions as well as requiring that certain system resources be configured correctly and are available.
To avoid any potential issues during LCM activities, VCF administrators can run SDDC Manager prechecks to weed any issues out before any LCM operation is executed. In this latest release SDDC Manager now adds six additional checks. These include:
- Password validity (including expired passwords)
- File system permissions
- File system capacity
- CPU reservation for NSX-T Managers
- Hosts in maintenance mode
- DRS configuration mode
All these checks apply to ESXi, vCenter, NSX-T, NSX-T Edge VMs, VxRail Manager, and vRealize Suite components in the VCF on VxRail environment. Figure 2 below illustrates some examples of what these prechecks look like from the SDDC Manager UI.
Figure 2 – New SDDC Manager Prechecks
Giving customers enhanced LCM improvements resolution: Check!
vRealize Suite Lifecycle Manager Flexible Upgrades
VCF 4.4 has been enhanced to allow vRealize suite products to be updated independently without having to upgrade the VCF SDDC stack.
Figure 3 – vRSLCM Flexible Upgrades
This means that from VCF 4.4 on, administrators will use vRSLCM to manage vRealize Suite update bundles and orchestrate and apply those upgrades to vRealize Suite products (vRealize Automation, vRealize Operations, vRealize Log Insight, Workspace ONE Access, and more) independently from the core VCF version upgrade to help better align with an organization’s business requirements. It also helps decouple VCF infrastructure team updates from DevOps team updates enabling teams to consume new vRealize features quickly. And finally, it enables an independent update cadence between VCF and vRealize versions which boosts and improves interoperability flexibility. And who doesn’t like flexibility? Am I right?
One last note with this enhancement: SDDC Manager will no longer be used to manage vRealize Suite component update bundles and orchestrate vRealize Suite component LCM updates. With this change, future versions of VCF will not include vRealize Suite components as part of its software components. vRSLCM will still be a part of VCF software components validated for compatibility for each VCF release since that will continue to be deployed and updated using SDDC Manager. As such, SDDC Manager continues to manage vRSLCM install and update bundles just as it has done up to this point.
Giving customers enhanced LCM flexibility resolution: Check!
VCF on VxRail Hardware Platform Enhancements
Support For New 15th Generation Intel-Based VxRail Dynamic Node Platforms
VxRail 7.0.320 includes support for the latest 15th Generation VxRail dynamic nodes for the E, P, and V series models. These can be used when deploying VMFS on FC Principal storage VxRail VI Workload Domain clusters. Figure 4 below highlights details for each model.
Figure 4 – New 15th Generation VxRail dynamic node models
Also, as it relates to using VxRail dynamic nodes when deploying VMFS on FC Principal storage, support for using NVMe over FC configurations has also been introduced since it is a part of the VxRail 7.0.320 release that VCF on VxRail customers can just inherit from VxRail. It’s like finding a fifth chicken nugget in the bag after ordering the four-piece meal! Wait, it is New Year’s—I should have used a healthier food example. Oops!
Support For New 15th Generation Intel-Based VxRail With vSAN Platforms (S670 and E660N)
In addition to new 15th generation dynamic nodes, this release introduces support for two new 15th generation VxRail node types, the S670 and E660N. The S670 is our 2U storage density optimized hybrid platform based on the PowerEdge R750 while the E660N is our 1U “everything” all NVMe platform based on the PowerEdge R650.
Giving customers more hardware platform choices resolution: Check!
VCF on VxRail Developer and AI-Ready Enterprise Platform Enhancements
NVIDIA GPU Options for AI and ML Workload Use Cases
As AI and ML applications are becoming more critical within organizations, IT teams are looking at the best approaches to run them within their own data centers to ensure ease of manageability and scale, improved security, and maintaining governance.
As a follow on to the innovative and collaborative partnerships between Dell Technologies, VMware, and NVIDIA that were first introduced at VMworld 2021, we are happy to announce, with this VCF on VxRail release, the ability to run GPUs within VMware Cloud Foundation 4.4 on VxRail 7.0.320 to deliver an end-to-end AI-Ready enterprise platform that is simple to deploy and operate.
Figure 5 – VCF with Tanzu on VxRail + NVIDIA AI-Ready Enterprise Platform
VMware Cloud Foundation with Tanzu, when used together with NVIDIA certified systems like VxRail and NVIDIA AI Enterprise Suite software, deliver an end-to-end AI / ML enterprise platform. And with VxRail being the first and only HCI Integrated System certified with NVIDIA AI Enterprise Suite and its supported GPUs, IT teams can deliver and provision GPU resources quickly in a variety of ways, while also allowing data scientists to easily consume and scale GPU resources quickly when they need it.
While getting into all the details on getting this set up is beyond the scope of this blog post, you can find more information on using NVIDIA GPUs with VxRail and NVIDIA AI Enterprise Software Suite using the link at the end of this post. VMware has additional information about this new support in a blog post that you can check out using the link at the bottom of this page.
Giving customers a simple path to unlock the power of their data resolution: Check!
VCF on VxRail Operations Enhancements
Configure DNS/NTP From SDDC Manager UI
This new feature simplifies and streamlines DNS and NTP Day 2 management operations for cloud administrators. In previous releases, all DNS and NTP configuration was included in the VCF Bring Up Parameter file that was used by Cloud Builder at the time of VCF on VxRail installation. But there was no straightforward way to make updates or changes to these settings once VCF on VxRail has been deployed. Now, if additional modifications are needed to these configurations, they can be performed within the SDDC Manager UI as a simple Day 2 operation. This feature integrates SDDC Manager with native VxRail APIs to automate VxRail cluster DNS/NTP settings. The figure below shows what this looks like.
Figure 6 – DNS/NTP Day 2 Configuration From SDDC Manager UI
Giving customers a simpler and more flexible day 2 operations experience resolution: Check!
VCF on VxRail Security Enhancements
Activity Logging For VCF REST API Call-Driven Actions
Administrators can now ensure audit tracking for activity that takes place using the VCF REST API. In this release, SDDC Manager logs capture SDDC Manager API activity from SDDC Manager UI and other sources with user context. This can be used to ensure audit tracking of VCF activity and making analyzing logs easier to understand. Figure 5 below illustrates this activity. The log entries include the following data points:
- Client IP
- User agent
- API called
- API method
Figure 7 – SDDC Manager REST API Activity Logging
Each of the SDDC Manager core services has a dedicated activity log. These logs are in the respective /var/log/vmware/vcf/*service*/ service directories on the SDDC Manager VM.
Giving customers enhanced security logging resolution – Check!
Enhanced Access Security Hardening
This release disables the SSH service on ESXi hosts by default, following the vSphere security configuration guide recommendation.
This applies to new and upgraded VMware Cloud Foundation 4.4 on VxRail 7.0.320 deployments.
Giving customers enhanced default platform security hardening resolution: Check!
Log4j and Apache HTTP Server Fixes
No security conversation is complete without addressing the headache that has been the talk of the technology world recently and that is the Log4j and Apache HTTP Server vulnerability discoveries. VCF on VxRail customers can be rest assured that as a part of this release fixes for these vulnerabilities are included.
Kicking Log4j and Apache HTTP bugs to the curb resolution: Check!
To wrap up…
Well, that about covers it for this new batch of updates. For the full list of new features, please refer to the release notes listed below. There are additional resource links at the bottom of this post. We hope to continue making good on our VCF on VxRail platform resolutions throughout the year! Hopefully, we all can say the same for ourselves in other areas of our lives. Now, where is that treadmill...?
Author: Jason Marques