[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 341
  • Last Modified:

Port binding in vmware

I have done some reading about ports binding in vmware : Static,Dynamic,ephemeral, but since I have never had to use them in the past, I do not know what they mean, and when they come into play.



Any help on clearing this up, will be very much appreciated

Thanks
0
jskfan
Asked:
jskfan
  • 3
  • 3
4 Solutions
 
Zephyr ICTCloud ArchitectCommented:
Hi,

This KB explains them better than I can write down: http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1022312

What is it exactly that is not clear to you?
0
 
AbhilashBloggerCommented:
Static is used for a secure environment. Where a switch reserves a port for a VM.
Dynamic is for an environment where over provisioning is okay. Imagine if you have 10 ports with you and you have 15 machines(of course you know only 10 will be powered on at any given time), then you can go with dynamic as the port association is removed when the machine is powered off.
Ephemeral port groups should be used only for recovery purposes when you want to provision ports directly on host bypassing vCenter Server, not for any other case.
0
 
jskfanAuthor Commented:
is port binding related to Virtual switches or Physical switches .?
I believe that Virtual switches can provide a huge number of ports, so I do not see where the port binding factors in.
I still can not understand where the concern about  the ports is, to the extent of implementing port binding.

Thanks
0
Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

 
AbhilashBloggerCommented:
Its on virtual switches. Yes they can provide around 4k ports. Imagine about a service provider or a big organization.
Ports are you main concern. Its about security. you cannot have a random unused ports in your network which can allow people from outside and create a VM on the hos and cause damage. For that issue you cannot have just Static binding as you will run out of ports. And if you don't have ephemeral when the vcenter is down then you will be in trouble.
The VMware hardening guide says you cannot have more number of unused ports on your switch as its a security concern. So you cannot create a switch with 4k odd ports and keep them open. You will need to create them when needed.
There are more use cases which all of us are not aware of. They would not have done it without a reason.
0
 
jskfanAuthor Commented:
they explain it here:
http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2038869

to my understanding if all Vmkernel interfaces (for iSCI) are in the same subnet, you should use port binding…else do not…
I cannot remember we had to configure port binding, when we configured vmkernel ports to use a different NIC than VM port group
0
 
AbhilashBloggerCommented:
Not just that. When you have a cloud environment and have no control over the network layer(per port) you will need these kind of bindings. Till 1.5 vCloud director used to create dv portgroups using ephemeral binding and now it creates it with static binding. You will need bindings as a measure of security when the ports are being bound to machines automatically when they are created.
0
 
jskfanAuthor Commented:
Thank you
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now