Best configuration for ISCSI virtual switches

[theblackknight]

I know this is an open ended questions., but what is the best config options for setting up software ISCSI for performance and redundancy from a virtual switch stand point?

I have a total of 6 nics.

Can someone point me to a pdf or other suggestions?

[kjb007]

For the most robust config for iSCSI, it is always better to isolate it on its own vSwitch with its own set of pNICs. You will isolate the traffic by the vSwitch, and team 2 pNICs together for redundancy.

Use another set of pNICs for your vm's, and the remaining 2 pNICs for mgmt traffic (SC/VMotion)

-KjB

[weinstein5]

Also do not forget for the software iSCSI initiator the SC must be able to route to the iSCSI Storage system - so either have routing place from the management network or you can place an SC port on the iSCSI vswitches -

[Texiwill]

Hello,

Also remember if you use iSCSI-HBAs the iSCSI Authentication still goes over the SC link. So your SC must participate in the iSCSI network either directly, routed, or firewalled.

Best regards,

Edward L. Haletky

VMware Communities User Moderator

====

Author of the book 'VMWare ESX Server in the Enterprise: Planning and Securing Virtualization Servers', Copyright 2008 Pearson Education.

CIO Virtualization Blog: http://www.cio.com/blog/index/topic/168354

As well as the Virtualization Wiki at http://www.astroarch.com/wiki/index.php/Virtualization

[theblackknight]

As usual, things changed...

Now we only have 5 nics avavilable because one of the 6 nics needs to be used for a NOC.

What would be my best option with only 5 Pnics?

[Texiwill]

Hello,

Why would the NOC need a pNIC for anything.... If you use VLANs, have their VLAN traffic flow over everything else. This sounds quite silly. Is this pNIC going to be another SC port? Or will it be something the VMs use?

If its VMs, put it on the VLAN for the VMs and not its own pNIC.

Best regards,

Edward L. Haletky

VMware Communities User Moderator

====

Author of the book 'VMWare ESX Server in the Enterprise: Planning and Securing Virtualization Servers', Copyright 2008 Pearson Education.

CIO Virtualization Blog: http://www.cio.com/blog/index/topic/168354

As well as the Virtualization Wiki at http://www.astroarch.com/wiki/index.php/Virtualization

[ctigeorge]

This question sounds vaguely familiar...

Do I know you? :smileygrin:

[BenConrad]

Edward,

When using iSCSI HBA's (such as a Qlogic QLA4050C) the service console DOES NOT need access to the iSCSI SAN. Qlogic iSCSI HBA's perform CHAP/IP/IQN authentication directly from the IP address on the port on the card. That is how you get iSCSI boot-from-san working before you have the vmkernel up and running.

theblackknight,

2 dedicated iSCSI pNics are a good start. One thing to note is that since the VMKernel IP address is performing all the iSCSI xfers you don't get actual load balancing across your iSCSI pNics unless you have multiple IP addresses available on your target & use 'route based on IP hash'.

Ben