Recently I was in charge of designing and implementing a new vSphere and vSAN infrastructure for a customer.

Everything went just fine, except that we all have experienced many network outages due to misconfiguration of some Firewall Virtual Appliances where the whole infrastructure relies on.

As a result, all ESXi got disconnected from the vCenter and this happened many times!

Anyway, the network team in the end fixed the issue and the network was finally stable but I have to say that I’m not a fan of firewall virtual appliance as it brings some limitations and complexity. Unfortunately, those outages had a bad impact on the virtualization network as some warnings appeared showing some ESXi hosts out of sync with the distributed switch.

This could not be a big deal at the beginning but this kind of issue definitely needs to be addressed to avoid any network problem in the future.

Continue reading →