Hello!
We have a strange problem when moving a virtual machine via VMotion behind a virtual Astaro firewall. Please consider the following situation:
- a three node ESXi 4.0 Cluster, let's say node A, B and C
- an Astaro virtual appliance FW 8.301 and several Windows 2008 R2 virtual machines running inside the ESXi cluster and evenly spread over the nodes.
- the internal nic of the Astaro FW and the windows server nics are in a private VLAN. Clients connect to the Windows server through a site-to-site-vpn tunnel consisting of the Astaro virtual app FW inside ESXi and an Astaro hardware FW on the other site. I don't know more technical details at the moment because I'm only administrator of the virtual infrastructure and neither of the virtual servers nor the Astaro firewalls.
- when installing a new server inside ESXi everything is fine, all clients can connect to the new server through the tunnel with acceptable speed.
And now the problem is:
Let's say this new server X is running on ESXi node A since installation. When I move this server X to node B or C via VMotion the speed of the network connection slows down to an inacceptable value. The connection isn't broken but it is extremly slow. "VMotioning" back server X to node A and everything is fine again. Only connections from outside through the tunnel are affected, communication between the servers and the firewall inside the private VLAN inside ESXi cluster aren't.
VMware support has checked the configuration, everything ok, VMotion has worked fine a thousand times in our virtual infrastructure without any problems but this one.
Shutting down all servers and the virtual firewall, moving them around and starting up again (after a certain time) doesn't help. Moving back the whole system to the initial state and it works again. Believe it or not, it seems the servers remember the "place where there were born"
Any ideas or any advices to troubleshoot this?
Kind regards
Uli
We have a strange problem when moving a virtual machine via VMotion behind a virtual Astaro firewall. Please consider the following situation:
- a three node ESXi 4.0 Cluster, let's say node A, B and C
- an Astaro virtual appliance FW 8.301 and several Windows 2008 R2 virtual machines running inside the ESXi cluster and evenly spread over the nodes.
- the internal nic of the Astaro FW and the windows server nics are in a private VLAN. Clients connect to the Windows server through a site-to-site-vpn tunnel consisting of the Astaro virtual app FW inside ESXi and an Astaro hardware FW on the other site. I don't know more technical details at the moment because I'm only administrator of the virtual infrastructure and neither of the virtual servers nor the Astaro firewalls.
- when installing a new server inside ESXi everything is fine, all clients can connect to the new server through the tunnel with acceptable speed.
And now the problem is:
Let's say this new server X is running on ESXi node A since installation. When I move this server X to node B or C via VMotion the speed of the network connection slows down to an inacceptable value. The connection isn't broken but it is extremly slow. "VMotioning" back server X to node A and everything is fine again. Only connections from outside through the tunnel are affected, communication between the servers and the firewall inside the private VLAN inside ESXi cluster aren't.
VMware support has checked the configuration, everything ok, VMotion has worked fine a thousand times in our virtual infrastructure without any problems but this one.
Shutting down all servers and the virtual firewall, moving them around and starting up again (after a certain time) doesn't help. Moving back the whole system to the initial state and it works again. Believe it or not, it seems the servers remember the "place where there were born"
Any ideas or any advices to troubleshoot this?
Kind regards
Uli