Lets assume you’re wishing to deploy a vRA 7.x blueprint into an environment where NSX 6.3.x has been deployed, and the DFW default rule is set to deny. During the provisioning of the vRA VMs they will of course need firewall access for services such as Active Directory and DNS to allow them to customise successfully, and here in lies the problem.
You might assume you could go about creating your security policies and security groups as normal and simply include the security tag within the blueprint to grant access to these services. However; vRA won’t assign the security tag until after the machine has finished customizing. So that creates us a potential issue as the VM won’t have access to the applicable network resources such as AD & DNS to finish customizing successfully as the default DFW is set to deny.
So to design around this you need to consider having some shared services rules at the top of the DFW rule table which allow services such as Active Directory and DNS access to these VMs, this will allow the vRA VMs to have the necessary network access to finish deploying & customizing successfully. You could achieve is in a number of ways such as creating a security group based on OS name of “Windows” and VM Name that equals the name of your vRA VM’s. Therefore as soon as vRA creates the VM object it will be assigned to the correct shared services security group and given the correct access, you can then layer in additional services using security tags as originally intended.
Intro to Converged Blueprints in vRA 7
vRealize Automation 7 delivers a new unified graphical canvas for designing machines, software components and application stacks with an underlying single unified model for both machine and application blueprints for Private and Public Cloud. vRealize Automation 7 also gives you the ability to extend or define external integrations in the canvas through XaaS. In this video we are going to focus on building several types of blueprints to demonstrate this functionality.
Another VMware Cloud in Action — The Hut Group Maximizes Online Retail and Minimizes Revenue Loss with Cloud-Based Disaster Recovery
With more than 60 websites ranging from health and beauty to fashion, The Hut Group needed to reduce downtime to zero. As one of the fastest growing companies in the United Kingdom, The Hut Group has a lot to lose — up to £500,000 a day — if its sites were to go offline. The […] The post Another VMware Cloud in Action — The Hut Group Maximizes Online Retail and Minimizes Revenue Loss with Cloud-Based Disaster Recovery appeared first on VMware vCloud Blog .
The Power of Partnership in the Cloud Era
Enterprise IT has a near-impossible strategic task. It must ensure that the company has the tools and capabilities it will need, without knowing for certain what those needs will be. Two VMware cloud executives explain the need for partnership and how global is the new neighborhood in the cloud era and how a new mindset […] The post The Power of Partnership in the Cloud Era appeared first on VMware vCloud Blog .
#VMware Delivers New Public Cloud Enhancements for Its Unified Hybrid Cloud
Today at VMworld 2015 Europe, VMware, Inc. announced enhancements to the company’s unified hybrid cloud platform that will accelerate application development, delivery and deployment, while also providing deeper insights into customers’ hybrid cloud deployments.