Posts

Showing posts with the label Azure

VMware | AVS: Content Library or Non vCenter objects on VSAN produces unassociated but valid objects

Image
Summary: Creating or Subscribing to a Content Library on vSAN is typical practice, but the annoying side effect?  Objects created on vSAN datastore that show up as "unassociated" objects and guess what, they simply inherit the Cluster's default VSAN policy at time of import.  Yeah, dumb right?  Also, by vSAN Operations Guide Standards section 6721 subsection 4 , you shouldn't do this. So then what? In Azure VMware Solution(AVS) , you have a couple of options.  You can do what the operations guide tells you that you shouldn't do or you can do something better.  Regardless of these options, the one thing you should do, is create a global content library.   Create Global Content Library:  here are instructions to create one on an Azure blob store. You should do this, makes life easier if you can. Also a fun little experiment to play w/ Azure Functions Centralized Storage of your ISO/OVF's etc. Attach external storage (Not necessary, but I'll explain ...

Powershell: Azure submitting JIT Request via Powershell

Image
Summary: If you make use of Azure Security Center w/ your VM's, you can enable Just in Time VM Access (JIT) .  This allows you to open up ports for a finite period of time to access your VM via its public IP.  I make use of this a lot working in my environments to sshuttle in.  Connection will stay active as long as I maintain it, otherwise I get disconnected and have to go through JIT process again. Anyway, going through the portal can get very cumbersome requesting this access, so you can use the below powershell example to automate opening ports, setting time frame, and setting an allowed public IP address source.

Powershell/Azure: Looking for Global Reach enabled ExpressRoutes? Yeah, me too.

Summary: My colleague asked if there is a way to see in the UI whether an ER circuit is enabled for Global Reach .  After a quick check, there doesn't appear to be any obvious way to know.  So I decided to make something in powershell using the AZ module to return circuits that are Global Reach enabled and to return the data in a human readable form. Script: I'm using nothing but "Gets" so it's pretty safe to use.  Has come in handy on more than one occasion.  Anyway feel free submit feedback on gist or transform it for your use cases.