vExpert 2024

I was selected for the seventh time. I am fortunate to be apart of a community that has helped me tremendously in my career. For example, receiving a blogger pass for Explore made it much easier to be able attend the event. I am wondering if we’ll see Broadcom in the next vExpert logo and what changes will happen during this pivotal year.

Global VCAP Stats

I like statistics so it’s neat when VMware releases the amount of certification achievers. The most recent numbers are from June 2023. I wrote an article on the numbers from May 2020 that covers VCAPs and VCPs.

There are 4,783 VCAPs in the United States and 20,847 worldwide. That’s an increase of 24% and 54% respectfully over the past 3 years. Great to see an increase, but those are much smaller increases than in the past. From 2017 to 2020, the amount nearly tripled in the United States. I see a lot of value in getting to the VCAP level and hope to see these numbers increase more rapidly. The deploy exam is not as difficult as it use to be and the design exam is significantly better than it was in the v6 and prior days.

Check out the link below to see VMware official article on this topic and another for the numbers from 2021. I also have the PDF from VMware linked here.

https://blogs.vmware.com/learning/2023/06/20/get-certified-and-join-the-thousands-of-global-vmware-certified-advanced-professionals-vcaps/
https://blogs.vmware.com/learning/2021/02/01/vcps-and-vcaps-around-the-world-are-you-on-the-map/

VMware Explore 2023 Las Vegas Analysis

It was great for VMware Explore 2023 to be back in Las Vegas. I am sure attendance was higher than last year, but still not as many as before the pandemic. It’s definitely on the right track for continuing to grow. The Venetian is an amazing venue. It was nice not having to walk across a city block to attend sessions as it was with the Moscone Center. Though, I still, somehow, ended up with about the same amount of steps as last year. I really like everything with the Explore theme and I thought it was more embraced this year.

I have an article about vSphere announcements and vSAN announcements so I will focus on other areas in this article. As expected, AI was the main topic during the general session. I was impressed with VMware’s announcement of VMware Private AI. It makes a lot of sense to be able to have a platform to utilize AI, but without giving up your privacy. Many companies are not adapting quickly to AI because they see it as a security risk. You could be essentially giving up your data if you don’t own and control the AI model. With Private AI, that will not be an issue. Another announcement was VMware NSX+, which is another addition that makes sense. Customers can have one cloud console to manage NSX for both on-prem and cloud. That means consistent policies and management in one interface to keep VMware environments uniform.

The Hub had the best setup this year. Everything community related was in one big room. It felt too disjointed in past years. VMTN, Virtually Speaking Podcast, VMware Rewards, and a few other groups all had a setup in The Hub, and it was close to the expo.

The food was not as good as last year. Two days out of four days for lunch was sandwiches and salads. Vegas has great food so no one wants multiple days of sandwiches. I hope VMware can step it up next year.

The expo area is always a favorite of mine. It was nice to have a lot of seating and gaming options around and in the expo. Though, many vendor booths were a bit scaled back compared to last year. I hope vendors see how great this year’s event was and will be able to increase their event budgets next year. There were a lot of nice giveaways for watching a short presentation, such as Nintendo Switches from Tintri, Lego sets from IBM, and tablets from Lenovo. I also need to give a shout out to Cohesity as they always deliver for vExperts with a nice gift.

Be on the look out for more VMware Explore events this year as there’s more events this year than ever before with four more events. These events will be in Barcelona, Singapore, São Paulo, and Tokyo. It will be exciting to see what information VMware will announce at these events. I am also excited to see the US side will be back at The Venetian in Vegas next year.

vSphere Announcements at VMware Explore 2023 Las Vegas

VMware has a lot of vSphere related announcements for their next big update, which is vSphere 8 Update 2. It is scheduled to be released Q3 2023 so that’s just around the corner. Core product announcements are usually my favorite because they touch the daily work for all VMware admins.

I know we all want to keep our vCenters running the latest version, but it can be tough to coordinate downtime with 7+ patches every year. It can easily take one hour for each upgrade in a medium sized environment. Keep in mind that the following doesn’t apply to vCenters in ELM and HA at the moment. Now there’s reduced downtime for upgrades of vCenter. It will only be down for about 5 minutes! This is accomplished due to the following. A new vCenter server is deployed with a temporary IP address, even for a minor patch. Data is copied from the old to new vCenter. Then the short downtime occurs when switching over and starting up services. On top of that, there’s an automatic LVM snapshot taken during patching, which can be resumed on a failure or rolled back. Being able to resume is nice because sometimes a upgrade fails for a very minor reason and need to start over. Now can fix it and resume the upgrade.

Renewing or replacing certificates has never been fun, but there’s been improvements over the past few years. Now there’s a new enhancement that everyone will appreciate. vCenter certs can now be renewed or replaced without restarting services so no downtime.

This next enhancement is useful if stuck in a bad situation with your vDS not being synced up with all hosts. This can happen when a backup is taken, a vDS change occurs, and then a restore. You will no longer have vDS inconsistencies when restoring from a backup. vDS changes will be pushed from cluster(s) to vCenter. This is also supported with a vDS using NSX.

At a previous job, I have had Microsoft engineers not thrilled with no vCenter identity provider federation support with Entra ID.  By the way, Microsoft recently changed Azure AD to now be called Entra ID. Now Entra ID is supported and all existing identity providers are still available. There’s another great addition on the Microsoft side. Adding an AD OU path is an option when going through the VM customization wizard. No more computer objects going to the computers container or automation needed outside of the wizard to do this.

I think we have all been in a situation where a backup or something has a lock on a VMDK. Then it’s a pain to track it down via CLI and logs. Now there is a detailed error message when a file is locked with the IP address and MAC of the host holding the file lock.

With AI and ML getting bigger and bigger, GPUs need to have better features at the hypervisor level. There have always been many caveats with a VM having a vGPU enabled. Now there has been further improvements with placement for vGPU enabled VMs. DRS now makes better deployment decisions with an initial placement of a VM. Also, vGPU enabled VMs are automatically migrated when needed to accommodate for larger VMs. There’s one other addition that I think is cool for vGPU enabled VMs. No more guessing how much time a user will be affected with a vMotion. You can now view a stun time estimate in edit settings of a VM.

Whenever there’s a big update, you can expect a new VM hardware version to be released. Now up to version 21.

Those are the features and improvements that I am looking forward to most in vSphere 8 Update 2, but wait, there’s more. There are many other advancements, such on the DevOps side. Give it a try on a VMware Hands-on Lab and check out VMware’s documentation for further details.

Storage Announcements at VMware Explore 2023 Las Vegas

There’s a lot to unpack with all of the storage related announcements at VMware Explore. You can easily tell why vSAN still has the lion’s share in the HCI space at 40% of the market. With announcements like vSAN ESA last year, it’s no surprise VMware is on top. Now there’s further advancements in the newly announced vSAN 8 Update 2 and the announcement of vSAN Max.

Let’s dig into the flexibility side. vSAN Max is disaggregated storage, which means that you can have a cluster with only compute hosts access vSAN storage from a dedicated storage cluster. This isn’t something hobbled together with iSCSI or NFS. This is an all native vSAN stack. For example, you can have a regular vSAN cluster purely on blades without drives and then the storage comes from a vSAN Max cluster. Could have this similarly before, but this is now optimized. Now up to 200% higher write throughput and up to 70% reduction in latency. vSAN Max makes it easier to add more storage by simply adding a new storage host. vSAN Max can be used in a stretched cluster on the storage and compute side.

Deploying a vSAN cluster will now give three options; vSAN HCI, vSAN Compute Cluster, and vSAN Max. Then you can select if a stretched cluster or not. On the compute cluster side, just a couple of selections needed and then can mount the remote datastore. You can check out the performance for vSAN Max and connected clusters on one dashboard. There is no support for in place upgrades from all existing vSAN editions and those existing licenses cannot be used for vSAN Max. It will use a new per-TiB licensing model.

Now let’s switch gears to core platform advances. There is now feature parity with with vSAN file services in ESA and OSA. That means file services, such as NFS and SMB, are available in ESA. Also, ESA is now supported in VCF 5.1 along with vSAN Max.

There have been a lot of performance improvements with ESA. Users should expect higher throughput and lower latency on write intensive workloads. DBAs will love this.

ESA can now support up to 500 VMs per host. That’s a big jump from the previous limit of 200 VMs. This is great news for VDI clusters.

ESA can now support much lower specs for a ReadyNode. This is as low as 16 cores, 128GB of memory, 10 GB network, and 3.2TB of storage per host. You will still get the benefit of the new snapshots, smaller failure domains, and improved efficiency to drive down costs. This should make ESA more appealing in small deployments.

I will now wrap up with enhanced management. It’s now more straightforward to view capacity overheads in the UI. There’s now support for the key expiration standard with a KMIP based v1.2 KMS. The key expiration attribute is for OSA and ESA. It’s integrated with Skyline Health so you will find the warnings in that area. Now there are more options for recommendations on troubleshooting an issue. For example, there will be a default option and an alternative. If you have a finding, there is improved information on the risk of not remediating. It accounts for the specific version of vSAN that you are running. Also, you can now manage the lifecycle of all types of witness appliances in vLCM. These are improvements available in OSA and ESA.

There are also other improvements and features that I didn’t mention in this article so be sure to check out everything in VMware’s release notes. Put this all together and it’s a straightforward decision to go with ESA on new deployments with all of the new features and enhancements, but makes sense to keep using OSA if using legacy hardware. I am looking forward to implementing ESA.

Last Minute Tips for VMware Explore 2023 Las Vegas

VMware Explore 2023 Las Vegas is only a couple of days away and I am excited! I will be arriving on Sunday night and staying a couple extra days for fun. I have put a lot of time into preparing for this trip and have some tips to share.

Most of the parties are fully booked. Though, I did hear yesterday that the Elevate Technology User Group meeting still has room. Check out Russell Hamker’s Explore party list for the most extensive list that I have found.

There’s a lot of giveaways. VMware has a long list of their prizes. Rubrik and Oracle are both doing headshots. ControlUp will have a daily raffle at 11:45a. Rackspace will be giving a way a prize for people that go through a VR tour of one of their data centers. There’s many more giveaways from other companies, but these stuck out the most to me.

I received some inside details about food during the event. The food was lame in 2019, but much better in 2022. This year looks even better. For breakfast there will be a continental option, quinoa oatmeal, and sandwiches. Lunch will have a hot buffet that includes chicken cacciatore, beef tenderloin, salads, and desserts. I am glad to see a buffet option back at an event and makes sense being Vegas. There’s also a boxed lunch option with a sandwich. Gluten free, vegetarian, kosher, and halal meals are available if you selected them during your registration.

I will be posting a couple of articles on some of VMware’s latest announcements during the event next week so please check back. I will also dust off my Twitter account and will tweet throughout the event.

Getting ready for an awesome time at VMware Explore Las Vegas

We are only 2 months away from VMware Explore and I am pumped! Go register before the price goes up again. Looks like many people are excited the event is back in Las Vegas. Details about the event have been trickling in and I am sure more details will be released about the event very soon.

I will be arriving on Sunday to get settled down before the bulk of the event kicks off and pick up my badge. The broad agenda is the same from last year. With Monday having some smaller activities and the welcome reception. Then the general session on Tuesday kicks off the first full day. In other years, the event was one day longer. The hall crawl on Tuesday night and VMware’s big party on Wednesday. It will be exciting to see what they have in store for that one. The event ends on Thursday with a half day.

I always came away with a tremendous amount of new knowledge every time I went to VMworld or Explore. Yes, you can watch some of the sessions at home. However, there’s something electric in the air when you are there in person interacting with everyone. Also, there’s exclusive TAM sessions that are not recorded, meet the expert sessions, and networking in person is unmatched to any other media.

I came across a few parties so far. On the Monday, the Elevate Technology User Group (formerly named the CONVERGED User Group) is having a party at Yardbird. All are welcome to register and attend. I went to their party last year and it was great. The VMUG party is on Tuesday at the Pinball Hall of Fame. I cannot yet find a website for registration for this event. Rubrik is having an event Tuesday night at the Wakuda Lounge. I will make another post later when I come across more parties and other details related to the event.

The Content Catalog currently has over 600 sessions. You can favorite them, but you cannot yet add them to your schedule or see when a session is occurring. Scheduling will open on July 11th. Make sure you do your homework ahead of time to be ready to schedule the sessions you’re interested in. Some sessions fill up quickly. Also, only a fraction of the stand by line could be accommodated during one of the sessions I was trying to get into last year so no guarantee if it’s not on your schedule.

I took a preliminarily look and added the following sessions to my favorites. I am sure more sessions will be added so I will update my list later or create another article on the topic. I am looking forward to see what VMware code sessions are being planned. They always have cool, interactive sessions, such as with Raspberry Pis or NUC like devices.

10 Big New Benefits of vSphere That You Absolutely Need to Know
Best Practices for Hardening Your VMware Infrastructure
NSX Operations and Troubleshooting: Best Practices
CLI Troubleshooting Nuggets
Scripting Inside the vSphere Client

EDIT:
Here are a couple great sources that have a lot of parties listed.
Russell Hamker Explore party list
VMblog’s Explore party list

vRealize Log Insight Internal Certificate Expiration and Vulnerabilities

A lot of vRLI customers, including me, were caught off guard in recent weeks that a certificate is expiring on April 30th. I figured taking care of this shouldn’t be a big hassle, but I was wrong. VMware provided a long list of instructions for applying a workaround, which are linked below. Seemed like a lot of trouble for an internal certificate.

https://kb.vmware.com/s/article/91441?lang=en_US
https://docs.vmware.com/en/vRealize-Log-Insight/8.10/com.vmware.log-insight.administration.doc/GUID-89D2FDFC-2869-43C0-B6D6-23146DB5E4FE.html

https://docs.vmware.com/en/vRealize-Log-Insight/8.10/com.vmware.log-insight.administration.doc/GUID-C5144813-F22A-4476-9E0E-BEC5B60417BF.html

I figured VMware wouldn’t leave us all hanging and I decided to wait to see if a patch would be released before the end of the month. I am glad I did because patch 8.12 was released on the 20th. Applying the patch resolves all of the vulnerabilities (CVE-2023-20864, CVE-2023-20865) and the upcoming expiration of the certificate. I upgraded from 8.10.2 and had no issues with the upgrade. Very fast and straightforward with taking a powered off snapshot and applying the update through the web UI. Check out the link below for the VMware KB on this update.

https://kb.vmware.com/s/article/91831

The patch also provides more. vRLI is now VMware Aria Operations for Logs within the product. Will everyone call it vAOL? I figured the name change will happen sometime soon, but I didn’t think it would on a small patch. There are also a few other updates. Check out the link below for the release notes.

https://docs.vmware.com/en/VMware-Aria-Operations-for-Logs/8.12/rn/vmware-aria-operations-for-logs-812-release-notes/index.html