Nested Virtualization

[Omid_Heravi]

Hi Guys,

Is there any security issue for my infrastructure to provide Nested Virtualization for my customer's VM?

Please advice me in this regard

[jburen · Accepted solution]

Afaik there are no security issues related to nested virtualization but it is NOT SUPPORTED for production environments. So personally I would not use it at a customer site. Maybe for a small test environment but definitely not for production.

[scott28tt]

Moderator: Moved to Nested Virtualization

[T180985]

Is there a specific reason you want to run nested virtualization and not just run the VM in your existing environment?

[Omid_Heravi]

Some customer needs to run apps that needed nested VM ...

I want to know is there any issue ( security or any ) to provide nested VM for customer ?

[Omid_Heravi]

Some customers need to run apps that needed nested VM.

so you don't advice this feature for Production Environment?

[T180985]

Its one of those things thats technically possible but completely unsupported. Its not recommended for any production environments

[jburen]

That's what I said...

[sjesse]

If they truly need to run virtual machines, they probably shouldn't be virtualized in the first point. Its mainly desktops in general that have reasons to run vms as part of the app, in general server apps don't. As someone that uses nested virtualization regulary don't do it outside of a lab, wierd things can happen and isn't worth the headache.

[DustinCour]

Can you clarify 'not supported for production environments'?  VMware publishes ESXi nested virtualization as non-supported, but that's all I'm able to find. Is there support article you're aware of?

[sjesse]

What are you looking for? You kinda answered your own question

Can you clarify 'not supported for production environments'?  VMware publishes ESXi nested virtualization as non-supported,     

they've never published anything more specific then that I've seen

[scott28tt]

VMware Knowledge Base

[scott28tt]

VMware Knowledge Base