Support for Active Directory on vSphere

I heard something interested today from a customer, a storage vendor who sells predominantly block storage products was trying to tell them that Active Directory domain controllers are not supported on vSphere when using NFS datastores.

The context was the vendor was attempting to sell a traditional block based SAN, and they were trying to compete against Nutanix. The funny thing is, Nutanix supports block storage too, so it was a uneducated and pointless argument.

None the less, the topic of support for Active Directory on vSphere using NFS datastores is worth clarifying.

There are two Microsoft TechNet articles which cover support for  topic:

  1. Things to consider when you host Active Directory domain controllers in virtual hosting environments
  2. Support policy for Microsoft software that runs on non-Microsoft hardware virtualization software

Note: There is no mention of storage protocols (Block or File) in these articles.

The second article states:

for vendors who have Server Virtualization Validation Program (SVVP) validated solutions, Microsoft will support server operating systems subject to the Microsoft Support Lifecycle policy for its customers who have support agreements when the operating system runs virtualized on non-Microsoft hardware virtualization software.

VMware has validated vSphere as a SVVP solution which can be validated here: http://www.windowsservercatalog.com/svvp.aspx

The next interesting point is:

If the virtual hosting environment software correctly supports a SCSI emulation mode that supports forced unit access (FUA), un-buffered writes that Active Directory performs in this environment are passed to the host operating system. If forced unit access is not supported, you must disable the write cache on all volumes of the guest operating system that host the Active Directory database, the logs, and the checkpoint file.

Funnily enough, this is the same point for Exchange, but where the Exchange team decided not to support it, the wider organisation have a much more intelligent policy where they support SCSI emulation (ie: VMDKs on NFS datastores) as long as the storage ensures writes are not acknowledged to the OS prior to being written to persistent media (ie: Not volatile memory such as RAM).

This is a very reasonable support statement and one which has a solid technical justification.

In Summary, running Active Directory is supported on vSphere including both block (iSCSI, FC, FCoE) and file (NFS) based datastores where the storage vendor complies with the above requirements.

So check with your storage vendor to confirm if the storage your using is compliant.

Nutanix 100% complies with these requirements for both Block and File storage. For more details see: Ensuring Data Integrity with Nutanix – Part 2 – Forced Unit Access (FUA) & Write Through

For more information about how NFS datastores provide true block level storage to Virtual Machines via VMDKs, check out Emulation of the SCSI Protocol which shows how all native SCSI commands are honoured by VMDKs on NFS.

Related Articles:

  1. Running Domain Controllers in Hyper-V

This post covers the requirement for FUA the same as with vSphere and recommends the use of UPS (to ensure write integrity) as well as enterprise grade drives which are also applicable to vSphere deployments.

Nutanix support on vSphere – No Bull!

Recently it seems the spreading of Fear, Uncertainly and Doubt (FUD) about Nutanix has ramped up, probably due to Nutanix ongoing success and enormous growth.

Still It’s unfortunate when large companies, and especially people in senior positions at these companies try to bully smaller companies. Luckily at Nutanix, we’re like HoneyBadgers, and we don’t care. We Hyper-converge anyway!

honey_badger_don__t_care_by_gatorvenom-d40h28z

While this sort of attention is expected when you work for a disruptive start-up who according to independent sources such as IDC, put Nutanix as the hyperconverged market leader with 52% market share.

However when the FUD creates confusion for customers, that’s where it crosses the line and I need to correct the misinformation for the benefit of the customers, which is what Nutanix focus is, the customer experience.

The specific FUD I am talking about which was chucked around the blog/twittersphere in the last 24 hours is as follows:

  • “… Nutanix is not entitled to support VMware customers”
  • “Any support you (Nutanix) provide is not “Official”
  • “Your (support) model puts customers in a grey area”
  • “Nutanix (is) providing unofficial customer support for both VMware and Nutanix”
  • “Nutanix should be transparent to customers regarding what services they are entitled to provide, and which ones they aren’t”.

How would I describe the above comments, simple:  Total Bull (shit)!

Now, that made me think of an Australian company (Pedders – logo below) who made the term “No Bull” famous with a series of TV commercials about car servicing and suspension. The ads made light of car mechanics who overcharge people for unnecessary work on vehicles, and making the point Pedders giving the right advice and “No Bull”.

NoBull

So this post is inspired by Pedders and is about giving you the facts, and No Bull (Shit)!

So is Nutanix a supported platform for vSphere? YES!

How do I know this, I personally completed the hands on certification work and submitted the successful certification logs to VMware prior to them being approved. In fact, I am still involved in keeping our certifications up to date.

But if you don’t believe me, its easy enough to verify. All you need to do is check the Official VMware Hardware Compatibility List (HCL).

To do this simply visit http://www.vmware.com/go/hcl and select Storage/SAN as shown below.
HCL1

Next select the following:

  • Product Release Version : All
  • Partner Name : Nutanix
  • Storage Virtual Appliance Only : Yes
  • Features Category : All

HCL2
Hit Update and View Results and you will get a view like the below.

NutanixHCL

The above shows all Nutanix node types from the NX1000 series all the way to our All-Flash NX-9000 series with support for vSphere 5.1 through vSphere 6.0.

If you check on one of the node types you will see Nutanix is also supported for VAAI-NAS, and as I highlighted in my post “Not all VAAI-NAS solutions are created equal“, Nutanix supports all 4 VAAI-NAS primitives, not a subset which is common especially in the hyperconverged market.

Note: Some HCI solutions have no VAAI support at all!nutanixhclvaai

So with a quick check of the VMware HCL, we all can see Nutanix is a fully certified and supported solution by VMware Global Support Services (GSS).

What does this mean?

Put simply, Any Nutanix customer with up to date Support and Subscription (SnS) can call VMware GSS directly and get support.

Nutanix customers are also welcome and encouraged to contact Nutanix directly. As a result, customers get the best of both worlds, or choose which vendor they call based on the quality of support.

What does Nutanix support provide?

End to End support including (but not limited too):

  • The Hypervisor (ESXi, Hyper-V or KVM)
  • The Nutanix layer
  • Performance troubleshooting
  • Networking support
  • Application support such as MS SQL / MS Exchange / Oracle etc

So Nutanix support is really a “One throat to choke” service.

Not only is our service “One throat to choke”, Nutanix also has one of, if not the highest Net Promoter Score in the I.T industry, with a score of +88 out of a scale of -100 to +100.

Omega-award (1)

 

I challenge anyone to show me a company with a better NPS in the I.T industry!

Nutanix System Reliability Engineers (SREs) are more often than not Level 3 engineers. Nutanix does not hire the typical Level 1 engineer who essentially just takes a phone call and needs to escalate most calls to another engineer.

Nutanix has numerous VCAP level certified support engineers, as well as the ability to call on one or more of our 12 VMware Certified Design Experts (VCDXs) if/when required. I personally have been involved in numerous escalations, in some cases I have travelled to customer sites to investigate and drive to successful resolution of non Nutanix issues such as hypervisor bugs. The escalation was done free of charge, to ensure our customers have the best experience possible.

In the event Nutanix support finds a problem with something which is not Nutanix, such as a Hypervisor bug, we don’t hand you off to another vendor, we log the bug on your behalf, manage the case with the Hypervisor vendor and follow it through to conclusion.

To be clear, Nutanix is not an OEM partner of VMware, nor do we ship ESXi with our platform. Does this matter? Not at all. What it does mean is the support costs customers pay to VMware are not shared with Nutanix, that’s all.

Nutanix can and does provide support for vSphere, just as Systems Integrators (SIs), managed service providers and other non OEM VMware partners do.

To cover unusual situations, Nutanix is also member of TSAnet which is a multi-vendor support network along with Microsoft, VMware which ensures even in the event your problem is not strictly covered by a support contract, or its not a supported configuration, Nutanix will make every effort to ensure the problem is resolved directly with the other vendor/s via TSAnet.

This post was brought to you by my two favourite Chuck’s, and “No Bull”!

Chuck1 -Chuck_Norris-_01

Fight the FUD! – Not all VAAI-NAS storage solutions are created equal.

At a meeting recently, a potential customer who is comparing NAS/Hyper-converged solutions for an upcoming project advised me they only wanted to consider platforms with VAAI-NAS support.

As the customer was considering a wide range of workloads, including VDI and server the requirement for VAAI-NAS makes sense.

Then the customer advised us they are comparing 4 different Hyper-Converged platforms and a range of traditional NAS solutions. The customer eliminated two platforms due to no VAAI support at all (!) but then said Nutanix and one other vendor both had VAAI-NAS support so this was not a differentiator.

Having personally completed the VAAI-NAS certification for Nutanix, I was curious what other vendor had full VAAI-NAS support, as it was (and remains) my understanding Nutanix is the only Hyper-converged vendor who has passed the full suite of certification tests.

The customer advised who the other vendor was, so we checked the HCL together and sure enough, that vendor only supported a subset of VAAI-NAS capabilities even though the sales reps and marketing material all claim full VAAI-NAS support.

The customer was more than a little surprised that VAAI-NAS certification does not require all capabilities to be supported.

Any storage vendor wanting its customers to get support for VAAI-NAS with VMware is required to complete a certification process which includes a comprehensive set of tests. There are a total of 66 tests for VAAI-NAS vSphere 5.5 certification which are required to be completed to gain the full VAAI-NAS certification.

However as this customer learned, it is possible and indeed common for storage vendors not to pass all tests and gain certification for only a subset of VAAI-NAS capabilities.

The below shows the Nutanix listing on the VMware HCL for VAAI NAS highlighting the 4 VAAI-NAS features which can be certified and supported being:

1. Extended Stats
2. File Cloning
3. Native SS for LC
4. Space Reserve
NutanixVAAI-NAS

This is an example of a fully certified solution supporting all VAAI-NAS features.

Here is an example of a VAAI-NAS certified solution which has only certified 1 of the 4 capabilities. (This is a Hyper-converged platform although they were not being considered by the customer)

vaai-naslol

Here is another example of a VAAI-NAS certified solution which has only certified 2 of the 4 capabilities. (This is a Hyper-converged platform).

vaainasc

So customers using the above storage solution cannot for example create Thick Provisioned Virtual Disks, therefore preventing the use of Fault Tolerance (FT) or virtualization of business critical applications such as Oracle RAC.

In this next example, the vendor has certified 3 out of 4 capabilities and is not certified for Native SS for LC. (This is a traditional centralized NAS platform).

VNXvaainas

So this solution does not support using storage level snapshots for the creation of Linked Clones, so things like Horizon View (VDI) or vCloud Director FAST Provisioning deployments will not get the cloning performance or optimal capacity saving benefits of fully certified/supported VAAI-NAS storage solutions.

The point of this article is simply to raise awareness that not all solutions advertising VAAI-NAS support are created equal and ALWAYS CHECK THE HCL! Don’t believe the friendly sales rep as they may be misleading you or flat out lying about VAAI-NAS capabilities / support.

When comparing traditional NAS or Hyper-converged solutions, ensure you check the VMware HCL and compare the various VAAI-NAS capabilities supported as some vendors have certified only a subset of the VAAI-NAS capabilities.

To properly compare solutions, use the VMware HCL Storage/SAN section and as per the below image select:

Product Release Version: All
Partner Name: All or the specific vendor you wish to compare
Features Category: VAAI-NAS
Storage Virtual Appliance Only: No for SAN/NAS , Yes for Hyperconverged or VSA solutions

generichcl

Then click on the Model you wish to compare e.g.: NX-3000 Series

hclnutanix1

Then you should see something similar to the below:

ClickViewButtonHCL

Click the “View” link to show the VAAI-NAS capabilities and you will see the below which highlights the VAAI-NAS features supported.

Note: if the “View” link does not appear, the product is NOT supported for VAAI-NAS.

nutanixvaainasresults

If the Features do not list Extended StatsFile CloningNative SS for LCSpace Reserve the solution does not support the full VAAI-NAS capabilities.

Related Articles:

1. My checkbox is bigger than your checkbox@HansDeLeenheer

2. Unchain My VM, And Set Me Free!(Snapshots)

3. VAAI-NAS – Some snapshot chains are deeper than others