• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

vCloud Director Multi-Tenancy

K

KapsZ28

2[H]4U
Joined
May 29, 2009
Messages
2,114
I know you can obviously have tenants with access to their own VMs and nobody else. Can you have a tenant that can create sub-tenants with their own permission and not be able to access other tenants?

I hope that makes sense. Basically we have a potential client that wants to be able to resell vCloud Director to other customers. Although I have setup vCloud Director, I have not played around with it much. This would be for version 5.5.
 
Anyone? I tried setting up a test organization, but I am not able to access that organization using the URL vCloud provided, so I am having trouble even testing.
 
Not as far as i know, in order to be able to create Orgs and Org VDC's you need to have global administrator privileges, you'd have to give them access to everything.
 
With only 30 orgs ever using it and it being end of life soon. Might be time to try something else.
 
4saken said:
With only 30 orgs ever using it and it being end of life soon. Might be time to try something else.
Click to expand...

Are you serious? vCloud Director is going EOL? I hope that is true. I have no interest in it, but management wants to push it.
 
KapsZ28 said:
Are you serious? vCloud Director is going EOL? I hope that is true. I have no interest in it, but management wants to push it.
Click to expand...

Well its interesting, its EOL for enterprises, but will remain in some form or fashion for service providers. That being said, after 5.5 there are some changes to the service and focusing more on vCHS. Most are recommending to work with vmware and vCAC if that is a path you want to go down. Wondering if lopoetve can offer more insight on that. It's at least in a state of limbo that would make me question whether to invest in the service or look towards other private/hybrid cloud solutions.
 
vCloud Director 5.6 will be the last version for non-Service Providers. It is highly suggested you start looking to migrate to vCloud Automation Center (vCAC) if you are currently on vCD..and do not do any more vCD deployments. There are some things that vCD does that vCAC currently does not... Network segmentation is one of those...but it's coming along.

Service Providers will still be able to use vCloud Director as VMware is still developing it for them and their own vCHS (vCloud Hybrid Service) public cloud.
 
4saken said:
Well its interesting, its EOL for enterprises, but will remain in some form or fashion for service providers. That being said, after 5.5 there are some changes to the service and focusing more on vCHS. Most are recommending to work with vmware and vCAC if that is a path you want to go down. Wondering if lopoetve can offer more insight on that. It's at least in a state of limbo that would make me question whether to invest in the service or look towards other private/hybrid cloud solutions.
Click to expand...

Yeah, I just read. We are a service provider with VSPP and this is what it says.

"SERVICE PROVIDERS – vCD will continue to be available through the VMware Service Provider Program (VSPP) in the cloud bundle and is still the recommended solution for service providers. VMware will continue on-going development for vCD to meet the specific needs of service providers and will provide further details at a later date."


I guess I am stuck supporting it.
 
But I still need to know for sure about the multi-tenant situation. If everything is based on organizations, I don't see how one of our tenants would be able to resell VMs through us. I mean, obviously he can sell the VM's, but he wants his customers to have control over their own VMs and not be able to access other customers. I guess kind of like we own the building and are renting a suite to him and he wants to rent out the offices within that suite but without any offices being visible to one another.
 
What about nesting it then? Additional licensing costs, but it may work?
 
0V3RC10CK3D said:
Allow them to resell the service but your company can provision the end user organization
Click to expand...

Yeah, I guess that is possible, but probably won't provide his customers with the pricing he wants since he is just trying to resell his own resource pool.

I guess there is no way to separate permissions at the organization level?
 
You're trying to fit something where it doesn't. vCD multitenancy is based on Orgs period.

You could stand up a new vCD Cell just for them so that they could provide their service via the Organizations but at that point, you're really just a hosting organization.
 
Vader said:
You're trying to fit something where it doesn't. vCD multitenancy is based on Orgs period.

You could stand up a new vCD Cell just for them so that they could provide their service via the Organizations but at that point, you're really just a hosting organization.
Click to expand...

Cool. I don't want to do this. It is a customer inquiring and a boss pushing me to find out. My answer is simple. "It is not meant to do what the customer is looking for, period."
 
4saken said:
Well its interesting, its EOL for enterprises, but will remain in some form or fashion for service providers. That being said, after 5.5 there are some changes to the service and focusing more on vCHS. Most are recommending to work with vmware and vCAC if that is a path you want to go down. Wondering if lopoetve can offer more insight on that. It's at least in a state of limbo that would make me question whether to invest in the service or look towards other private/hybrid cloud solutions.
Click to expand...

vCAC is the magic path forward. vCD for enterprises is effectively dead, although some of the features that enterprises want (parts of the multi-tenancy, networking, resource abstraction) will be moving to vCAC and VC.

NetJunkie said:
vCloud Director 5.6 will be the last version for non-Service Providers. It is highly suggested you start looking to migrate to vCloud Automation Center (vCAC) if you are currently on vCD..and do not do any more vCD deployments. There are some things that vCD does that vCAC currently does not... Network segmentation is one of those...but it's coming along.

Service Providers will still be able to use vCloud Director as VMware is still developing it for them and their own vCHS (vCloud Hybrid Service) public cloud.
Click to expand...

You can do network segmentation with vCNS / NSX with vCAC 6.0, but only for multi-machine blueprints. 5.2 I don't remember, been a bit since I used it.

vCAC is the future.
 
KapsZ28 said:
Yeah, I guess that is possible, but probably won't provide his customers with the pricing he wants since he is just trying to resell his own resource pool.

I guess there is no way to separate permissions at the organization level?
Click to expand...

No, it's not designed for that. You could hack something together with manual permissions on a per-vm basis, but manually that would be nasty. Something else with vCO could be done, but that's still not gonna scale in a sane way at all.
 
Has anyone ever seen an issue where the Internet page is not display when going to another Organization URL?

I am trying to go to https://vcloudurl.com/org/Customer1 but I just get page cannot be displayed. Since I can't get to this page, I can't log in as the customer to see what their view looks like.
 
I think the networking is broken. When vCloud Director was setup, everything was working. Then I wold told to stack a couple of switches and setup LAG. After doing that and changing the distributed switches and ports, it seems like it broke vCloud. I can't even get rid of the Organization that is in there now so I can re-create it.
 
If you log into vCloud and click the Administration Tab then down to Public Addresses. Is this correct for a domain or subdomain pointed at a public IP mapped to your vCloud cell?
 
0V3RC10CK3D said:
If you log into vCloud and click the Administration Tab then down to Public Addresses. Is this correct for a domain or subdomain pointed at a public IP mapped to your vCloud cell?
Click to expand...

Yeah. Right now it is only internal anyway. The IP address works to get me to the main /cloud login screen.

Since I can't even remove the last Org, I was thinking of creating a new SQL DB and re-registering the vCloud cell to start fresh. Hopefully it is that easy. I don't feel like reinstalling vCloud.
 
Just drop the db, recreate, and re-run the installer. It's dead simple
 
lopoetve said:
Just drop the db, recreate, and re-run the installer. It's dead simple
Click to expand...

Yup that is what I did. Part driving me nuts now is the Storage Policy. I created a storage policy in vCenter and enabled it, but it doesn't appear to be active and I can't select it while creating a VDC in vCloud.
 
The org sites and login is now working. Just need to figure out the storage profile so I can allocate the correct datastores. At least everything is fixed for the most part.
 
you have to tell it to rescan for the policies
but I can't remember where.
 
lopoetve said:
you have to tell it to rescan for the policies
but I can't remember where.
Click to expand...

Yeah, I tried that. I think it is because I did prepare the hosts again. I had to manually uninstall the old vCloud agent, and I am now reinstalling it. Hopefully once it is done, the rescan will now show the storage policy.
 
Order of operations:

1. From the WebClient Main Page, choose Storage Policies and enable Storage Policies.
2. Go to the Datastore or Datastores and Assign a Tag like Gold Policy for Tier I Storage, Silver for Tier II..etc.
3. Go back to Storage Policies and create a Policy and assign the tag you created.
4. Right Click on vCenter in vCD and choose refresh Storage Profiles.

There are details under some of these, but it walks you through it.
 
Last edited:
That did the trick, thanks! Now let's see if this Edge Gateway will deploy. Was having an issue with that too.
 
Looks like I need to setup some additional networking settings in vShield first.
 
You must log in or register to reply here.
Back
Top