灣仔新景園茶餐廳
可能是香港最好吃的豬扒飯。
鮮茄牛肉飯 咖哩豬扒飯
可能是香港最好吃的豬扒飯。
鮮茄牛肉飯 咖哩豬扒飯
Part of the above were quoted from Eric Siebert’s newly revised Installing VMware vShield Zones for a virtual firewall and don’t forget to review his article on “Top 10 VMware security tips for vShield users”
Update: Oct 30, 2011
I found the solution to my last question in how to avoid vShield Zone VM to be moved away during Maintenance Mode by DRS, the answer is at the end of the Install vShield Zone PDF (Page 13, can’t believe I missed this extremely important piece of information). Basically, you need to set vShield Zone VM Restart Priority to Disable under HA and Automation Level to Disabled under DRS.
To prove it’s working I did a test, I put the host in to Maintenance Mode, DRS was able to vmotion away everything to other available nodes except the vShield Zone VM, then it shuts it down nicely, everything is done automatically.
Bravo!
這是最近台灣大眾銀行激動人心的廣告﹐令人不得不再次思考這個嚴肅的問題。
1963年﹐前美國人權領袖馬丁路德曾經講過“I have a dream”﹐去年“老男孩”這套很給力的網絡影片也是圍繞著類似的主題﹐的確人是要有夢想﹐沒夢想的人生就如失去了靈魂的軀殼般冰冷。
No more guessing, I finally got it working and performed the firmware updates on ESX. So now it’s time for Dell to make its vCenter Plugin product for FREE?
So the following is what I did today, btw, many thanks for local Dell Pro-Support as well:
1. Download the latest version of Dell Repository Manager (v1.2.158) and install it with all the default options.
2. Start DRM in Server Mode (Client Mode is for desktop and notebook).
3. Create a new inventory, select the options with care and according to your requirement ONLY, this wil greatly reduce the total update package size, like Rack, R710, Windows Package Only.
* IMPORTANT: You will ONLY NEED TO DOWNLOAD the LATEST Windows Package, no need to download any Linux Package as USC or Life Cycle Controller 1.4 or above will only support SUU ISO/USB with Windows Package anyway, so using Windows DUP (Dell Update Package) to update Powerdge server firmware even with ESX installed is perfectly O.K.!
4. Export the whole update to ISO, select Export as Server Update Utility (SUU) ISO.
5. Reboot your ESX server (of course migrate your VM away to another ESX host first) and then use iDRAC console to enter USC (ie, F10), select firmware update, mount virtual media with the DRM SUU ISO created in the above step. Soon you will encounter “Catalog file not authenticated correctly”, Don’t Worry! Just ignore it and continue the ISO export because the exported SUU is simply NOT digitally signed.
6. Select firmwares need to be updated and then reboot, system will return to USC by default, go to firmware update again, and compare the update result with DRM ISO if needed.
Finally, the catalog.xml on dell.ftp.com is always a few months behind the latest update. This is where Dell RM does the magic that you can simply Add the latest firmware to an existing inventory and customize to whatever you want it to be, just remember to download those latest firmware first to any folder, Dell RM will copy it over again to root of the RM’s inventory folder, then save it and export a new SUU ISO again.
PS. I just found another great article “The Easiest Way To Update A Dell Server’s Firmware
Update Jul-19-2011
After reading page 77-79 of the latest Dell vCenter Plugin 1.0.1 User Guide, I found DVP still requires a manual creation of a Fimrware Repository like the above (and requires CIFS or NFS). So this step really renders DVP obsolete as we can achieve the same result using Dell Repository Manager with even better control and management.
In that sense, I strongly believe Dell will make its Dell vCenter Plugin for Free within the next 12-24 months.
Update Nov-26-2011
The following improvements have been made in Repository Manager v1.3 which was released in July 2011:
I am starting to put different capping policies on VM resources such as CPU, Memory, Storage and Network this week.
The concept is very simple, but implementation takes a lot more thinking and planning than the followings:
High: 2000 vCPU, 20 VM RAM
Normal: 1000 vCPU, 10 VM RAM
Low: 500 vCPU, 5 VM RAM
High:Normal:Low = 4:2:1
For example, a VM with 1 vCPU and 1GB (1024MB) RAM Shares = NORMAL
So CPU Shares will show 1000 and Memory Shares wil show 10240.
In fact, after the capping starts to kick in, I begin to fall in love with VMware’s Resources Managment!
Xangati for ESX (Free Edition) is always ranked as one of the top 10 Free ESX Appliances. I finally got time to test it although not very successful, the following is my findings.
Recently, I tried to configure vSphere VLAN 802.1q VST Mode with external Netgear switch. On Netgear side, VLAN (ID=10) was set correctly on ports by using Tagged Port (ie, 802.1q), the same VLAN ID is also assigned to ESX Portgroup, but the connected VMs couldn’t visit the outside Internet.
I did a simple test by giving a private IP 10.0.18.10 to VM1 on ESX Host 1 which is on vlan 10, then I did the same for VM2 on ESX Host 2 which is also on vlan 10.
Guess what? They can ping each other!
To future prove my original Netgear VLAN setting is correct, I did the following tests as well:
Test 1. Change vlan 10 to vlan 20 on ESX Host 1, now VM1 cannot ping VM2, so original VLAN tagging or 802.1q is working!
Test 2. Change Netgear Port 11 & Port 12 (both on ESX Host 1) to Untag, now VM1 cannot ping VM2, so original VLAN tagging or 802.1q is working indeed!
After researching for several days, I found the following, BINGO!
For example, consider the organization whose servers plug into distribution layer switches. These distribution layer switches then connect to a core switch. If the connections between the core switch and the distribution switch are not already configured as VLAN trunks, i.e., are capable of carrying multiple VLANs simultaneously, then using VST is impossible. Each of the distribution switches only carries a single VLAN and is only capable of carrying a single VLAN.
I thought I don’t need to get my Netgear to talk to data center’s core switch in order to have ESX VST working, this is exactly I was wrong! After talking to my data center, I got it working finally, but I still decided not to use VLAN (VST mode) on public IP addresses as it doesn’t provide real benefits and ESX Portgroup won’t allow traffic sniffer anyway, so it’s pretty secure, rather I found a private or local 802.1q VLAN is more useful say to configure a Private LAN between VMs (sometimes, you need a private LAN for backup)
今天經過書局發現Octane的封面是“法拉利DINO vs F355 ”﹐恰好兩款都是我的心愛之選﹐所以當然這期不能錯過啦﹗
“阿飛正傳”仍然是自己最喜歡的一套戲﹐不論是情節﹑畫面﹑音樂等﹐都覺得配合得天衣無縫。是的﹐八年過去了﹐原來是真的﹐要記得的﹐永遠都會記得﹗