VMware iFix Webspace Performance Issues - JAVA

We have consolidated some JAVA based workloads into ESXi and some performance issues found us.
Specifically, we virtualized the GE Webspace product for our manufacturing equipment and after a few concurrent users it would respond erratically - either slowly or just crash outright.

After attending a VMware support session they talked about how JAVA was one of their Top-10 support calls.  Webspace is a JAVA based application.

Here is the link to the Support Best Practices from VMware for JAVA:
http://www.vmware.com/resources/techresources/1087

What I found - use the RAM reservation!!

I enabled the RAM reservation and rebooted the server and all of our performance issues went away.  There are several other best practice suggestions in the document and I'm sure they will help in an environment that is more heavily utilized then ours.  But for us, the RAM reservation solved the problem.

First Step to Virtualizing - Consolidation

Several people I have talked too think that virtualizing their environment with VMware is just too expensive.  They are looking at the whole pie and not taking individual pieces.

Step #1 - Consolidation

How many physical servers do you have in a server room (or closet as the case may be)?

For most mid-size companies this could be 10-15 or more servers.  In our case it was close to 30 servers and growing when I started our virtualization project.

So how to start?  This seems to be one of the thorniest issues around.  Do you go "all-in" or start slow with some small scale proof-of-concept P2V (physical-to-virtual) conversions?  Truth is, go with what you are comfortable with.  If you have zero virtualization experience, I suggest starting with a workstation product for a few weeks to get used to working in a virtualized environment. 
If you are more comfortable in virtualization then find an older server and install on of the free hypervisors - my preference is VMware ESXi free edition.  It is exactly the same as the super expensive vSphere Enterprise Plus edition but just does not contain all the management tools and features.  A great way to start down the path.

Also, don't be fooled by the hype - Consolidation ratios published by VMware are TRUE!!
I have achieved 12 to 15 server consolidation ratio.  That is, on a single dual processor server I am running, in production, 12-15 virtualized servers.  The largest constraint on consolidate I have found is - RAM.  Not disk I/O, not network performance, not CPU but physical RAM in the server.

We have virtualized SQL Server 2005, Exchange 2007, Red-Hat Linux, Hyperion, GE iFix WebSpace and many other production, "Tier 1" applications.

Next post - Step 2 - Physical Servers and why you don't need to purchase the newest, greatest fire-breathing monster of a server for virtualization.  Chances are you either have one today you can use or you can get one rather inexpensively.
So, get out there and go for it!

New Blog Focus - Virtualization in the Middle of SMB

I am going to try and renew some focus to this blog and my work on virtualization projects.

Specifically - how do you virtualize a Middle size business and do so within the constraints of small budgets.

So - stay tuned, more to come

Gestalt IT - VMworld contest

Gestalt IT is running a contest to "Get away to VMworld"

Just go to this site:
http://gestaltit.com/all/tech/virtualization/stephen/vmworld-contest-enhanced-extended/

The contest askes for a "Pay it Forward" idea for your free trip to VMWorld.

Sponsers:
     Zetta, Veeam, Xsigo and Symantec

VSphere 4 ESXi iSCSI - Iomega IX-200 setup

I purchased a Iomega IX-200 2TB NAS and was getting it setup for my ESXi server to connect to.

• Setup an iSCSI share in the IX-200
• Run the VSphere Client and connect to your ESXi system
• Go to the configuration tab
• Click on the Networking section
• Add Networking
• Add a VMKernal
• Setup on either the same vSwitch if you only have one or on a secondary NIC
• Assign it to a static IP address on your network
• Click on the Storage Adapters section
• Click on the iSCSI entry under Software Adapters
• Click on Properties
• Click on the box to enable iSCSI
• Click on the tab for Dynamic Discovery
• Add the IP address of the IX-200
• Rescan all the adapters to find the iSCSI share on the IX-200
• Once the new iSCSI share is found you can create a new storage datashare

Windows 7 64bit VPN client - Cisco ASA

Had a minor issue with connecting my 64bit Win7 client to our Cisco ASA.
Our ASA does not currently support the AnyConnect Cisco client (our firmware/software combo does not support this yet).

So, I had to go looking for a VPN client that could connect my laptop....found it with a company called NCP.  Look for their Universal IPSec client.

http://www.ncp-e.com/

Purchased their client - installed the client.
Now - how do I configure this thing.....

Turns out it is very, very easy.

Just do a file/open in NCP and point it at your Cisco config file - it magically does the rest.

Fully configured and ready to go without my having to do anything other than an installation.

I Love it!

Software List - WIndows 7 64bit

Here is my updated list of software I have running on my Windows 7 64bit machine:

• Flash 10
• Apple iTunes with iPhone support
• Java 6 update 17 (32 and 64 bit)
• JRE 1.6.0_10
• KeePass 2.09
• Microsoft Live Meeting
• Microsoft Forefront Client
• Microsoft Office Communicator 2007 R2 (OCS)
• Microsoft Office 2007 Professional Plus
• NCP VPN Client (for 64 bit VPN access to Cisco ASA)
• Nitro PDF Pro
• OpenEdge 10.1B
• PGP Desktop
• QuickTime
• Royal TS
• Skype 4.1
• TinyTerm
• TreeSize Pro 5.3.2
• Vmware Infrastructure Client 2.5
• VMware Workstation
• WebEx Client
• Windows Live Essentials
• Windows XP Mode (just about to ditch this and go total VMware Workstation)
• WinRAR

Forefront Corporate AV Malware Solution - Single Server

I have finished a project to install and configure a Forefront single server solution.  We are using this to replace a current TrendMicro Officescan product.
     My experience with Trend was that it did great with AV but was very lacking in tools and detection of malware.  So far Forefront has been excellent at detection and cleaning of malware issues.

This solution is installed under VMWare ESX v3.5 running a guest OS of Windows 2003 R2.

Installed Forefront server in a single server mode using most of the default settings.
http://technet.microsoft.com/en-us/library/bb404225.aspx

Once installed you have to setup your initial Forefront policies - this is done in the admin console.  Once you have defined a policy for scanning and what the client will allow you have the option to either add this to an existing GPO or create/link a new GPO.  This is very easy and the software does most of the work for you.

Now that you have a policy linked in GPO you have to deploy the client software.
For us, we use SCCM and this was setup to push to all of our Office grade machines.  Just created a silent installation package and pushed it via SCCM.
       This link my help in locating the new Forefront client installation MSI:
http://blogs.technet.com/fcsnerds/archive/2009/04/01/slipstreaming-a-client-security-client-installation.aspx
       Here is a good blog entry on how to create the package in SCCM (it is very straightforward to do)
http://blogs.microsoft.co.il/blogs/yanivf/archive/2008/02/20/deploying-forefront-client-security-using-sccm-2007-step-by-step.aspx

Lastly, we have to setup SCCM to update all the definitions.  I used the following post as a template for how to get this done:
http://technet.microsoft.com/en-us/library/dd185652.aspx

I have had great success with this setup.  If you want to experiment with Forefront prior to your own installatoin I suggest the Technet Virtual Labs:
http://technet.microsoft.com/en-us/forefront/clientsecurity/bb499665.aspx