After a recent VCSA reboot, I was seeing the infamous no healthy upstream error from vCenter. The first place to check for issues like this is VMware's Virtual Appliance Management Interface (VAMI), located by default via HTTPS on port 5480. An administrator can use the appliance root password for this particular …

Read More

VMworld 2021 is online this year I'll really miss some of the sessions and exploration we've had in past years in person, but I think VMware made the right call this year. We can expect to see a fundamental shift with online conventions - and this will need some unique strategy compared to previous years. The Basics I …

Read More

DNS is a vital component of all computer networks. Also known as the "Internet Yellow Pages," this service is consumed by every household. DNS services are typically deployed in several patterns to support users and systems: DNS Forwarder: This deployment method is the most common. Everybody needs name …

Read More

TL;DR If you see either of these errors, check grep 'ERROR' /opt/avi/log/cc_agent_go_{{ cloud }} for the potential cause. In my case, the / character was not correctly processed by Avi's Golang client (facing vCenter). The Problem When trying to configure NSX ALB + NSX-T on my home lab, I am presented nothing but the …

Read More

World WiFi Day We (human beings) have several weird superpowers, but the ability to communicate over vast distances has always fascinated me the most. I've had the privilege of meeting some of the most truly capable pioneers in this field - but the reality here is that we're faced with a very unequal world. Authors …

Read More

At some point, we can't "do it all" with one block of code. As developers, we need to store persistent data for a variety of reasons: We want it for later execution (or to compare it to another result) We're sick of storing variables in code. This matters a lot more in compiled languages than runtime ones We …

Read More

NSX Advanced Load Balancer - Logging and Troubleshooting Cheat Sheet Get into the OS Shell (all elements) 1sudo su Controller Log Locations Note: Everything in /var/lib/avi/logs is managed by Elasticsearch. I wouldn't mess with it. Events published to the GUI: /var/lib/avi/logs/ALL-EVENTS/ The primary log directory for …

Read More

Pre-Requisites Before beginning the Avi installer, I configured the following in my environment: Management Segment (NSX-T Overlay). This is set up with DHCP for quick automatic provisioning - no ephemeral addresses required Data Segments (NSX-T Overlay). Avi will build direct routes to IPs in this network for vIP …

Read More

For this example deployment, I'll be using my NSX-T Lab as the fabric, VyOS for the Overloaded Router role, and trying out hyperglass: Installation (VyOS) I already have a base image for VyOS with its management VRF set up - and updating the base image prior to deployment is a breeze due to the vSphere 7 VM Template …

Read More

If Avi Vantage IPAM cannot allocate an address for a new vIP, it will advertise an all-zeros host address - 0.0.0.0/32: This will cause Palo Alto PAN-OS to restart a peer - even if it is not the immediate downstream prefix. Palo Alto uses routed as their dynamic routing engine - so this is probably default behavior …

Read More