darrylcauldwell.com On a journey around the datacenter and public cloud.

VMware Data Encryption At Rest

Encryption of data at rest is a requirement for many customers, with VMware hosted Virtual Machines (VMs) there are two ways to achieve this. VM data can be encrypted using vSAN whole-datastore encryption or using Storage Policy (VMcrypt). Both VM Encryption and vSAN Encryption require a Key Management Interoperability Protocol (KMIP) 1.1 compliant Key Management Server (KMS), the same KMS provider can be used for both types of encryption.

(Read more...)

vRealize Orchestrator NSX Plug-in Troubleshooting

The NSX-V Plug-in for vRealize Orchestrator offers some great functionally, however creating custom workflows caused me some headaches.

(Read more...)

VMware NSX-T 2.0 Homelab

NSX-T that can provide network virtualization for a multi-cloud and multi-hypervisor environment. NSX-V (NSX for vSphere) Manager integrates into vCenter and leverages the vSphere dvSwitch. NSX-T Manager can be used with vSphere but does not integrate with vCenter or dvSwitch, instead NSX Manager is managed its API and the Transport Zone creates an Open vSwitch on each host.

(Read more...)

Controlling vSphere & NSX With Python

I am tasked with working with VMware again for now, it seems like a good opportunity to try and manage the infrastructrure configuration as code as we do with AWS. My former colleagues had made me aware of pyVmomi an open source library which VMware provide and mostly maintain for managing vSphere, so its here I shall start. Since then NSX for vSphere has also an open source library NSX RAML Client provided by VMware so I’ll then move to that.

(Read more...)

DynamoDB Python Test Environment with Cloud Formations

The goal of this post is to walk through the creation of a AWS test environment which I use to explore the Python SDK interactions with DyanmoDB. For learning I use the free tier and so used to create the environment as needed manually. After doing this once I decided to encapsulate the configuration in a Cloud Formations template and then deploy the stack when I needed it.

(Read more...)