• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

Virtualization Log Files and Virtual Firewalls

tallman23

n00b
Joined
Nov 26, 2008
Messages
30
Two questions on the topic of virtualization:

1. Performance loss from using a Physical firewall on Virtual network: In a virtual environment, one might choose to utilize the firewall on the physical network to scan VM traffic. This requires the virtual switch to backhaul traffic from the virtual server to the physical network firewall for inspection and then it must be sent back to the virtual sever; it's an impact to performance. Is there a metric or way to test the significance of the impact (i.e. is traffic reduced XX percent)? Can we quantify the loss of throughput?

2. Specific logs to monitor in a virtual instance: Logging is very important in a virtual environment, a VMware ESX server's /var/log will capture VM configuration data, operating system in use, error messages, and configuration of host servers. Logging changes to these files as well as changes associated with authentication & authorization, additions to monitored networks, and network assignment changes all need to be logged. That's great, but what specific log files should we look for (from a VMware perspective)? That is, what are names of the log files? Where are they typically located?
 
1. Negligible.

2.
Classic:
/var/log/vmkernel (host messages)
/var/log/vmkwarning (subset of vmkernel)
/var/log/vmware/hostd.log (host management agents)
/var/log/vmware/vpx/vpxa.log (VC agent)
/var/log/vmware/aam/Lots (HA agents)
/var/log/messages (Linux service console VM logs)

ESXi
/var/log/messages (vmkernel+messages combined)
/var/log/hostd.log (or /var/log/vmware/hostd.log) (same)

the rest are the same. Config info will not be in those logs
 
Back
Top