Académique Documents
Professionnel Documents
Culture Documents
9 November 2018
© 2018 A10 NETWORKS, INC. CONFIDENTIAL AND PROPRIETARY- ALL RIGHTS RESERVED
Information in this document is subject to change without notice.
PATENT PROTECTION
A10 Networks products are protected by patents in the U.S. and elsewhere. The following website is provided to satisfy the virtual patent marking provi-
sions of various jurisdictions including the virtual patent marking provisions of the America Invents Act. A10 Networks' products, including all Thunder
Series products, are protected by one or more of U.S. patents and patents pending listed at:
https://www.a10networks.com/company/legal-notices/a10-virtual-patent-marking
TRADEMARKS
A10 Networks trademarks are listed at:
https://www.a10networks.com/company/legal-notices/a10-trademarks
CONFIDENTIALITY
This document contains confidential materials proprietary to A10 Networks, Inc. This document and information and ideas herein may not be disclosed,
copied, reproduced or distributed to anyone outside A10 Networks, Inc. without prior written consent of A10 Networks, Inc.
Anyone who uses the Software does so only in compliance with the terms of the End User License Agreement (EULA), provided later in this document
or available separately. Customer shall not:
1. Reverse engineer, reverse compile, reverse de-assemble, or otherwise translate the Software by any means.
2. Sub-license, rent, or lease the Software.
DISCLAIMER
This document does not create any express or implied warranty about A10 Networks or about its products or services, including but not limited to fit-
ness for a particular use and non-infringement. A10 Networks has made reasonable efforts to verify that the information contained herein is accurate,
but A10 Networks assumes no responsibility for its use. All information is provided "as-is." The product specifications and features described in this pub-
lication are based on the latest information available; however, specifications are subject to change without notice, and certain features may not be
available upon initial product release. Contact A10 Networks for current information regarding its products or services. A10 Networks’ products and ser-
vices are subject to A10 Networks’ standard terms and conditions.
ENVIRONMENTAL CONSIDERATIONS
Some electronic components may possibly contain dangerous substances. For information on specific component types, please contact the manufac-
turer of that component. Always consult local authorities for regulations regarding proper disposal of electronic components in your area.
FURTHER INFORMATION
For additional information about A10 products, terms and conditions of delivery, and pricing, contact your nearest A10 Networks location, which can be
found by visiting www.a10networks.com.
Table of Contents
page 3
Installing vThunder on VMware ESXi
Contents
page 4
Feedback Installing vThunder on VMware ESXi
vThunder for VMware ESXi is a fully operational, software-only version of the ACOS Series Server Load
Balancer (SLB), Application Delivery Controller (ADC), SSL Insight (SSLi), IPv6 migration device, or a
Carrier-Grade Networking (CGN) device.
The maximum throughput of vThunder for VMware ESXi is variable and depends on which vThunder
software license was purchased. Install vThunder on a hardware platform running VMware ESXi 4.1
Update 2, VMware ESXi 5.0, VMware ESXi 5.5, VMware ESXi 6.0, or VMware ESXi 6.5.
The product name for the ACOS virtual appliance changed from “SoftAX” to “vThunder” beginning with
ACOS 2.7.1-P3 (SLB release) and ACOS 2.8.1 (IPv6 Migration release). This document uses the “vThun-
der” name, but some file names, directory paths, and screenshots may still refer to “SoftAX”.
Figure 1 shows vThunder running on top of commodity servers (which are running the VMware ESXi
hypervisor).
Feedback page 5
Installing vThunder on VMware ESXi
FeedbackFF
Minimum System Requirements FFee
e
The host on which vThunder is installed must meet the following minimal requirements:
• 16 GB disk space
NOTE: vThunder also supports configuring only one network adapter for all
interfaces (both data and management).
page 6
Installing vThunder on VMware ESXi
Feedback
Recommended System Requirements
• 1 vCPU
• Memory:
• For ACOS 4.1.4, 8 GB RAM memory (more RAM may be needed if you are using memory-inten-
sive features, such as Jumbo Frame or GSLB).
• For earlier ACOS versions, 4 GB RAM (more RAM may be needed if you are using memory-inten-
sive features, such as Jumbo Frame or GSLB).
• Virtual disk image size:
• VMware ESXi 4.1 Update 2 client (required unless you plan to install using ovftool)
• Separate port groups for each vThunder interface (see “Adding Extra Port Groups” on page 44),
configured before you begin installing vThunder
The host on which vThunder is installed must meet the following recommended requirements:
• 20 GB disk space
page 7
Installing vThunder on VMware ESXi
FeedbackFF
Global License Manager and Types of vThunder Licenses FFee
e
• 4 vCPUs
• Memory:
• Separate port groups for each vThunder interface (see “Adding Extra Port Groups” on page 44),
configured before you begin installing vThunder
vThunder requires a license. Without a license, the product cannot run production traffic, and the
amount of bandwidth is only sufficient for testing network connectivity. After you have downloaded
and installed the vThunder software, you need a license before you can run live traffic.
A10 Networks offers different types of licenses for your vThunder instance. vThunder supports the
following licensing models:
page 8
Installing vThunder on VMware ESXi
Feedback
Interfaces
• Pay As You Go (PAYG) license—This licensing model is subscription-based. There are two
types of licensing models under PAYG licenses. Both these licensing models require that the
vThunder instance has an Internet access to request the licenses from an A10 license server.
The license models are as follows:
• The Rental Billing Model (RBM) is designed for cloud service providers (CSPs) who offer
Advanced Delivery Controller (ADC) services. This model enables such providers to bill their
customers for a fixed amount of bandwidth, as well as adding surcharges for extra bandwidth
consumed.
• The Utility Billing Model (UBM) is based on actual data usage, in bytes, in which unlimited
vThunder instances can be deployed and in which no bandwidth settings are required.
For more information, see vThunder Pay-as-you-Go Licensing Installation and User Guide.
• Capacity Pool (FlexPool) license—This licensing model enables you to subscribe to a
specific bandwidth pool in the Global License Manager (GLM) for a specific period of time, with
an additional option of automatically renewing your license before the license expiry date. Unlike
previous license models supported by A10 Networks, capacity pool (FlexPool) license is not node
locked. You can configure multiple ACOS devices to share bandwidth from the common license
pool.
For more information refer to Capacity Pool License User Guide.
Interfaces
When installing vThunder from an OVA file, three ports are automatically created (one management
and two data ports). If required, you can add or remove data ports after the vThunder instance is
deployed. The default ports are:
To connect the vThunder to other devices, you must connect each vThunder interface to a separate
port group on the virtual switch (vSwitch) on the VMware host. In a typical deployment, one of the data
interfaces is connected to the server farm, and the other data interface is connected to the clients.
However, one-arm deployment is also supported which requires one data port and one management
port. You also can add additional data interfaces as needed.
For more information refer to “Adding Extra Ethernet Data Interfaces” on page 43 and “Adding Extra
Port Groups” on page 44.
page 9
Installing vThunder on VMware ESXi
FeedbackFF
Interfaces FFee
e
Figure 2 shows an example of vThunder interface connections. Each vThunder interface is connected
to a separate port group on the VMware host’s vSwitch. Each of the port groups is connected to a
separate physical interface (NIC).
vThunder also supports management connection to the command line interface (CLI) through the con-
sole in vSphere Client. The console is required for initial configuration. You can access the ACOS device
on the Mgmt (Management), Ethernet 1 (Eth1), and Ethernet 2 (Eth2) interfaces after you configure IP
addresses on them and connect them to a port group on a vSwitch.
page 10
Installing vThunder on VMware ESXi
Feedback
Feature Support
Feature Support
vThunder for VMware ESXi supports many of the same features as the Thunder Series hardware-based
models, but the exact set of supported features varies based on whether vThunder is running an ADC
(SLB) release, SSLi, or a CGN (IPv6 Migration) release.
Limitations
vThunder has the following limitations.
vThunder-1#show cpu
Time: Dec-22-2017, 14:08
1Sec 5Sec 10Sec 30Sec 60Sec
-------------------------------------------------------------------------------
Control1 11% 13% 20% 21% 36%
Data1 0% 0% 0% 0% 0%
Data2 0% 0% 0% 0% 0%
A similar issue is seen when the total CPU number is one for vThunder. An output similar to the follow-
ing is displayed:
page 11
Installing vThunder on VMware ESXi
FeedbackFF
Limitations FFee
e
• The virtualized Network Interface Card (VNIC) in the vSwitch to which the vThunder interface is
attached may also need to be set to non-promiscuous mode for proper functioning.
If these limitations are problematic, you may remove them by re-enabling promiscuous mode. A vThun-
der system that is running in non-promiscuous mode can be transitioned back to promiscuous mode
with the following command:
system promiscuous-mode
• HA is supported in releases prior to ACOS 4.0. In-line HA for vThunder is supported in promiscu-
ous mode.
• In ACOS 4.0 and later, HA is no longer supported. Redundancy can only be configured using
VRRP-A.
LACP
LACP trunk groups are not supported in vThunder.
page 12
Feedback Installing vThunder on VMware ESXi
You can either install vThunder using the vSphere Client, vCenter server, or the Web client. You can
either select an ISO image or an OVF image (OVA file) to install vThunder. Starting from ESXi 6.5,
VMware does not support the vSphere Client.
NOTE: You can also install vThunder using the ESXi CLI; see the VMware CLI
documentation for the procedure.
To download the vThunder software (trial), log into your Global License Manager (GLM) account and
see the following URL: https://glm.a10networks.com/downloads
The A10 sales team should have set up a GLM account for you when you first purchase the product. If
you do not yet have a GLM account, contact sales@a10networks.com.
Feedback page 13
Installing vThunder on VMware ESXi
FeedbackFF
Step 2. Installing the vThunder Instance FFee
e
If you are installing an ACOS version earlier than 4.1.4-P2, VMware Tools is not supported. You can use
either an OVA image or an ISO image to install vThunder for ESXi. Also, for such ACOS images, earlier
versions of ESXi is also supported.
After creating the VM, it might take some time for the VM to come up. This is expected behavior.
Based on the ACOS version, you can choose any of the following installation methods to install vThun-
der on ESXi:
1. Download or copy the vThunder OVA archive file into the virtual machine store folder.
2. Select File > Deploy OVF Template.
3. Click Browse and navigate to the vThunder OVA file, and then click Open.
4. Click Next.
The OVF Template Details screen is displayed.
page 14
Installing vThunder on VMware ESXi
Feedback
Step 2. Installing the vThunder Instance
page 15
Installing vThunder on VMware ESXi
FeedbackFF
Step 2. Installing the vThunder Instance FFee
e
11.Click Next.
The Disk Format screen is displayed.
12.Select Thick provisioned format. This option provides better performance than Thin
provisioned format.
13.The Network Mapping screen is displayed.
14.Map each vThunder network interface (Management, Ethernet 1, and Ethernet 2) to a separate
port group in the Destination Networks column.
15.To map a network interface, select a vThunder interface in the Source Networks column, and then
select the port group from the drop-down list in the Destination Networks column. For example,
select source network "Management" and destination network "Mgmt".
16.The actual names of the port groups may differ. Assign the names when you create them as a
prerequisite for vThunder installation.
page 16
Installing vThunder on VMware ESXi
Feedback
Step 2. Installing the vThunder Instance
page 17
Installing vThunder on VMware ESXi
FeedbackFF
Step 2. Installing the vThunder Instance FFee
e
18.Verify that all settings are correct, and click Finish. The vSphere Client deploys the new vThunder
virtual machine.
19.Open vSphere Client, if not already open.
20.In the virtual machines inventory, select the vThunder virtual machine.
21.From the menu bar, select Inventory > Virtual Machine > Power > Power On.
NOTE: The VMware Tools properties are available with the OVA file. To utilize
VMware Tools, download the vThunder image only as an OVA file. To
configure VMware Tools properties, use vCenter server to launch
vThunder.
page 18
Installing vThunder on VMware ESXi
Feedback
Step 2. Installing the vThunder Instance
page 19
Installing vThunder on VMware ESXi
FeedbackFF
Step 2. Installing the vThunder Instance FFee
e
• Click Deploy OVF Template on the VMs tab in the Host - Actions Pane.
3. Click Browse and navigate to the vThunder OVA file, and then click Open.
4. Click Next to open the Select template screen.
5. Select name and location in the Deploy OVF Template screen.
6. Click Next to open the Accept license agreements screen.
7. Review the license agreement, and if the terms are acceptable, click Accept.
8. Click Next to open the Name and Location screen. If required, edit the default name of the
vThunder template.
page 20
Installing vThunder on VMware ESXi
Feedback
Step 2. Installing the vThunder Instance
page 21
Installing vThunder on VMware ESXi
FeedbackFF
Step 2. Installing the vThunder Instance FFee
e
16.From the menu bar, select Inventory > Virtual Machine > Power > Power On.
page 22
Installing vThunder on VMware ESXi
Feedback
Step 2. Installing the vThunder Instance
1. Login to vCenter.
2. Open the vThunder CLI console by clicking the CLI icon on the Summary tab of vCenter.
3. Open the command prompt for CLI. Check if the version and interfaces are configured according
to the user specified values in vThunder, using the following commands, the IP address of
management interface is configured on vThunder.
vThunder(NOLICENSE)# show interfaces brief
vThunder(NOLICENSE)# sh run
page 23
Installing vThunder on VMware ESXi
FeedbackFF
Step 2. Installing the vThunder Instance FFee
e
interface management
ip address 10.1.0.171 255.255.255.0
ip default-gateway 10.1.0.1
enable
!
Prior to running the installation, ensure that the appropriate vSwitches, port groups, and interfaces are
created. In this example, three interfaces are created, out of which one is a management interface
while the rest of the two interfaces are data interfaces.
page 24
Installing vThunder on VMware ESXi
Feedback
Step 2. Installing the vThunder Instance
For the management interface, the Adapter type must be set to E1000. All data plane interfaces must
be set to Adapter type VMXNET3. For the Network option beside each vNIC, select the network to
which the vNIC is attached. Ensure Connect at Power On is checked for all the interfaces.
NOTE: Setting up a vSwitch and port groups are beyond the scope of this docu-
ment. Refer to the VMware documentation for more details.
FIGURE 13 Create/Register VM
3. In the New Virtual machine window, click Deploy a virtual machine from an OVF or OVA
file. Click Next.
4. In the Select OVF and VMDK files window, enter the name of the virtual machine.
5. Click the designated area to select the file and then browse to the OVA image. Click Open.
6. After the file is displayed in the box, click Next.
page 25
Installing vThunder on VMware ESXi
FeedbackFF
Step 2. Installing the vThunder Instance FFee
e
7. In the Select Storage window, select an appropriate datastore and click Next.
8. In the license agreements window, scroll to the bottom of the license to click I Agree and then
click Next.
9. In the Deployment options screen, complete the network mappings. Ensure Power on auto-
matically is selected. Click Next.
page 26
Installing vThunder on VMware ESXi
Feedback
Step 2. Installing the vThunder Instance
12.After the VM is created, click the VM and then open the console.
13.Log into vThunder with the default username admin and the default password a10.
login as: admin
Welcome to vThunder
Using keyboard-interactive authentication.
Password:***
type ? for help]
1. Click on the ESX host (IP shown), then select the Configuration tab.
2. Navigate to Hardware > Storage and from the available datastores, right-click the required
datastore to select Browse Datastore. The Datastore Browser window is displayed.
page 27
Installing vThunder on VMware ESXi
FeedbackFF
Step 2. Installing the vThunder Instance FFee
e
3. In the Datastore Browser window, click the Upload icon and then click Upload File.
4. Browse to the location where you have saved the vThunder ISO image and select the image.
The vThunder ISO image is uploaded.
page 28
Installing vThunder on VMware ESXi
Feedback
Step 2. Installing the vThunder Instance
page 29
Installing vThunder on VMware ESXi
FeedbackFF
Step 2. Installing the vThunder Instance FFee
e
For the management interface, the Adapter type must be set to E1000. All data place
interfaces must be set to Adapter type VMXNET3. For the Network option beside each vNIC,
select the network to which the vNIC is attached.
Ensure Connect at Power On is checked for all the interfaces.
NOTE: Setting up a vSwitch and port groups are beyond the scope of this
document. Refer to the VMware documentation for more details.
f. Create a Disk—Enter the virtual disk size and select Thick Provisioned Lazy Zeroed.
g. Ready to Complete—To edit the settings further before creating the vThunder VM, check the
Edit the virtual machine settings before completion checkbox and click Continue.
8. Under the Virtual Machine properties window, make the following edits:
a. Under Hardware, select Memory and specify the size.
Select CPUs and specifiy the number.
page 30
Installing vThunder on VMware ESXi
Feedback
Step 2. Installing the vThunder Instance
b. Select New CD/DVD (adding) and ensure Connect at power on is checked. Under Device
Type, for Datastore ISO File, click Browse and select your vThunder ISO image.
c. (Optional) Select New Floppy (adding) and click Remove.
9. Click Finish.
10.Power on the virtual machine and the system boots to the ISO image in the CD/DVD drive.
11.After the installation is complete, log in by using the following credentials:
localhost login: install and Password: password
12.Type YesS at the prompt to verify the installation.
page 31
Installing vThunder on VMware ESXi
FeedbackFF
Step 3. Modifying the vSwitch Settings FFee
e
13.Log into vThunder with the default username admin and the default password a10.
login as: admin
Welcome to vThunder
Using keyboard-interactive authentication.
Password:***
[type ? for help]
NOTE: The procedure below only applies to VMware's vSwitch. If you are using
a third-party virtual switch, such as the Cisco Nexus or Catalyst Series,
this procedure may not be necessary.
If the vThunder network interfaces are in a tagged VLAN, tagged VLAN mode also must be enabled on
the vSwitch. By default, tagged VLAN support is disabled.
page 32
Installing vThunder on VMware ESXi
Feedback
Step 3. Modifying the vSwitch Settings
NOTE: If you set enter 4095 in the VLAN ID field, both tagged and untagged
packets with any VLAN ID is received by vThunder. If the field is set to
None(0) in the VLAN ID field, only untagged packets are received by
vThunder.
10.Click OK.
11.Click Close to close the Properties tab.
page 33
Installing vThunder on VMware ESXi
FeedbackFF
Step 4. Accessing the vThunder Instance FFee
e
When you access vThunder by using the ESXi console, vThunder initially boots up with an IP address of
172.31.31.31/24. You can access the vThunder instance remotely by using the management interface,
which is also the first interface assigned in VMware. You can access vThunder remotely by using either
the CLI or the GUI.
To access the vThunder instance by using the console, perform the following steps:
NOTE: While keyboard support is active for a console window, you cannot
interact with other windows. To escape the console, press Ctrl+Alt.
Use the following information to log into the vThunder virtual appliance with for the first time when
using the CLI or GUI, as discussed in the next two sections.
page 34
Installing vThunder on VMware ESXi
Feedback
Step 4. Accessing the vThunder Instance
4. Generally, if this the first time the SSH client has accessed the vThunder instance, the SSH client
displays a security warning. Read the warning carefully, then acknowledge the warning to
complete the connection.
5. Press Enter.
The command prompt for the User EXEC level of the CLI is displayed:
vThunder(NOLICENSE)>
The User EXEC level allows you to enter a few basic commands, including some show commands
as well as ping and traceroute.
NOTE: The vThunder prompt indicates that the vThunder instance is not
licensed.
6. To access the Privileged EXEC level of the CLI and allow access to all configuration levels, enter
the enable command.
7. At the Password: prompt, press Enter.
The command prompt for the Privileged EXEC level of the CLI is displayed as follows:
vThunder(NOLICENSE)#
8. To access the global configuration level, enter the configure command. The following command
prompt is displayed:
vThunder(config)(NOLICENSE)#
To access the vThunder instance by using the GUI, perform the following steps:
page 35
Installing vThunder on VMware ESXi
FeedbackFF
Step 4. Accessing the vThunder Instance FFee
e
NOTE: To prevent the certificate warning from appearing in the future, you can
install a certificate signed by a Certificate Authority.
A login page is displayed as shown in Figure 23. The name and appearance of the dialog depends
on the browser you are using and the specific device which you are trying to access.
4. Enter your default username admin and default password A10 and click Login.
The Dashboard is displayed as shown in Figure 24, showing at-a-glance information for your
vThunder instance. You can access this page again at any time while using the GUI by selecting
Dashboard. Refer to the GUI online help for detailed information about this and all other GUI
screens.
page 36
Installing vThunder on VMware ESXi
Feedback
Step 4. Accessing the vThunder Instance
FIGURE 24 Dashboard
NOTE: GUI management sessions are not automatically terminated when you
close the browser window. The session remains in effect until it times
out. To immediately terminate a GUI session, click the Sign Out icon in
the menu bar.
page 37
Installing vThunder on VMware ESXi
FeedbackFF
Step 4. Accessing the vThunder Instance FFee
e
page 38
Feedback Installing vThunder on VMware ESXi
The procedure for applying a license to a vThunder instance depends on the type of license that you
have and is documented separately in the licensing guides. For more information, see “Global License
Manager and Types of vThunder Licenses” on page 8.
The vThunder is now network accessible for configuration under the new IP address and admin
password.
To write the current configuration to system memory, run the following command:
Feedback page 39
Installing vThunder on VMware ESXi
FeedbackFF
Configuring the Management Interface FFee
e
1. Configure the management interface IP address and default gateway. Starting with ACOS release
4.1.0, ACOS obtains an IP address for the management interface in the following order:
a. If there is a management port IP configuration (either a static IP address or DHCP) in the active
startup-config file, then ACOS either assigns the static IP to the vThunder management
interface or attempts to get the IP address from the DHCP server.
b. If there is no management port IP configuration (neither a static IP address nor DHCP), then
vThunder attempts to get an IP address from an accessible DHCP server.
c. If vThunder cannot obtain an IP address from a DHCP server, then the default static IP address
of 172.31.31.31/24 is used.
In the following example, the IP address for the management interface is 192.168.2.228. None of
the data interfaces should have an IP address of 192.168.2.x.
vThunder(config)#interface management
vThunder(config-if:management)#ip address 192.168.2.228 /24
vThunder(config-if:management)#ip default-gateway 192.168.2.1
3. Optionally, configure the ACOS device to use the management interface as the source interface for
automated management traffic generated by the ACOS device:
ACOS(config-if:management)#ip control-apps-use-mgmt-port
(For more information, see the “Management Interface as Source for Automated Management Traffic"
chapter in the System Configuration and Administration Guide.)
vThunder(config-if:management)#exitvThunder(config)#
page 40
Installing vThunder on VMware ESXi
Feedback
Support for Non-dedicated Management Port Mode
In releases prior to 2.7.2-P4, it was typical for a regular vThunder for VMware instance to have drivers
assigned to ports as shown in Table 3 below. The interfaces could have different drivers assigned to
the different interfaces.
When all interfaces use the VMXNET3 driver, there is non-dedicated management interface, and any
random port can be used to provide management access. Non-dedicated management port mode can
be helpful if you are running vThunder for VMware in an environment where it may not be possible to
have a dedicated management port.
This new algorithm runs a check whenever a new vThunder for VMware instance is booting. The
algorithm checks for the presence of a dedicated management interface (“eth0”), and if it does not
exist, then ACOS automatically enables the “non-dedicated management port mode”.
As ACOS is performing this check during bootup, the algorithm also checks the startup config file. If the
startup config file is empty, then ACOS populates the config file with the configuration shown below.
This config file defines the interface and allows it to receive an IP address from a DHCP server.
The following is an example of a config file if the admin had created a vThunder instance with 3
interfaces. The number of interfaces in the config file can vary as needed.
interface ethernet 1
enable
ip address dhcp
!
page 41
Installing vThunder on VMware ESXi
FeedbackFF
Support for Non-dedicated Management Port Mode FFee
e
interface ethernet 2
enable
ip address dhcp
!
interface ethernet 3
enable
ip address dhcp
!
enable-management service ssh ethernet 1 to 3
enable-management service http ethernet 1 to 3
enable-management service https ethernet 1 to 3
enable-management service snmp ethernet 1 to 3
page 42
Installing vThunder on VMware ESXi
Feedback
Adding Extra Ethernet Data Interfaces
NOTE: vThunder does not support hot-swapping Ethernet ports. To add a new
data port, you must stop the running instance, add the new port or delete
an existing port, and then restart the vThunder instance.
NOTE: The type for data interfaces is “vmxnet3”, and the type for the
management interface is “e1000”.
7. In the Network Connection section, select the vSwitch for the new vThunder interface, and click
Next.
8. Review the configuration information to ensure it is correct, and then click Finish.
The vThunder interface is added to the port group on the vSwitch.
9. Reboot the vThunder virtual machine by performing the following steps:
a. In the virtual machines inventory, select the vThunder virtual machine.
b. From the menu bar, select Inventory > Virtual Machine > Power > Reset.
page 43
Installing vThunder on VMware ESXi
FeedbackFF
Adding Extra Port Groups FFee
e
10.To verify the new interfaces, log onto the vThunder instance using the CLI and enter the following
command:
show interface brief
Compare the MAC addresses of the ACOS interfaces with the MAC addresses on the network
interfaces configured in VMware for the vThunder. They should match.
1. Start vSphere Client and log onto the VMware host system.
2. In the Inventory, select the host.
3. Click the Configuration tab and select Networking.
4. In the right column, select Properties next to the virtual switch (vSwitch) name.
5. Click Add.
6. Select Virtual Machine as the connection type, and click Next.
7. Edit the name in the Network Label field.
This is the name you will select in “Step 2. Installing the vThunder Instance” on page 14.
8. If your ESXi physical interface is not tagged, leave the VLAN ID set to 0. If your ESXi physical inter-
face is tagged, set the VLAN ID to the VLAN tag number.
9. Click Next, then click Finish.
10.Repeat for each port group.
The vThunder interfaces must be in separate port groups.
11.Click Close.
page 44
Feedback Installing vThunder on VMware ESXi
This chapter provides details on how to configure specific advanced features for vThunder.
The following is a list of limitations and requirements for running jumbo frames on vThunder:
• The vThunder instance must be running on top of an Intel 10Gb Ethernet Controller.
• Supported jumbo frame packet types include: ICMP, UDP and TCP
• vThunder can support jumbo frame packets up to a maximum size of 9216 bytes.
Set the MTU size on the vThunder data interface to a value ranging from 1500 to 9216 bytes. The
configured value must be larger than any jumbo packet expected to arrive on that data interface. The
command is mtu bytes.
Feedback page 45
Installing vThunder on VMware ESXi
FeedbackFF
About System Polling Mode and Interrupt Mode FFee
e
You can enable jumbo support on a global basis. In this case, the MTU is not automatically changed on
any interfaces, but you can increase the MTU on individual interfaces.
NOTE: Starting from ACOS 4.1.4-P2, all vThunder instances running on VMware
ESXi support only Poll mode. Interrupt mode is not supported.
Both Interrupt mode and System Polling mode are features designed to handle I/O events generated
from the devices. The basic difference between the two modes is that Interrupt mode is hardware-
triggered only when a device requires the attention of the CPU, whereas System Polling mode is a
protocol that enables constant polling of the devices at regular intervals. In general, System Polling
mode tends to be faster than the Interrupt mode for most applications.
System Polling mode uses the Intel Data Plane Development Kit (DPDK), which is a set of data plane
libraries and network interface drivers that can be used to accelerate fast-packet processing. DPDK
maximizes throughput and minimizes packet processing time through several methods, such as
bypassing the kernel, processing packets in the user space, and using polling instead of interrupts.
• To enable or disable System Polling mode, refer to “Enabling System Polling mode” on page 47.
• If you have System Polling mode enabled, you can dynamically set the maximum upper limit of
cores dedicated to
I/O processing. Refer to “Setting the Maximum Limit of Cores for I/O Processing” on page 48.
• For the Support Matrix for System Polling mode, refer to the vThunder Feature Matrix.
• The CPU utilization on the host running vThunder is high for the following scenarios:
• For vThunder running ACOS version earlier than ACOS 4.1.4-P2, with four or more vCPUs, and
poll mode enabled through the CLI.
• For vThunder running ACOS version later than or equal to ACOS 4.1.4-P2, with four or more
vCPUs or with less than four vCPUs but with high incoming traffic to the VM.
• The CPU Round Robin feature is not supported for vThunder instances running on Interrupt
mode. The CPU Round Robin feature is enabled by default on all ACOS systems. If you are run-
page 46
Installing vThunder on VMware ESXi
Feedback
About System Polling Mode and Interrupt Mode
ning vThunder in Interrupt mode, run the following command in configuration mode to disable
the CPU Round Robin feature: system cpu-load-sharing disable
• Starting with ACOS versions 411-P3 and 412-P1 and till 414-P1, vThunder instances with four or
more vCPUs run in polled mode by default and switch to interrupt mode for less than 4 vCPUs.
For earlier ACOS versions, the default mode for vThunder instances is interrupt mode. If a
vThunder instance is upgraded, it continues to run in the same configuration as before.
• If you are planning to switch to Interrupt mode or reduce the number of vCPUs to less than 4, you
must first disable Jumbo Frames. To disable Jumbo Frames, run the command no system-
jumbo-global enable-jumbo.
• Depending on the platform, vThunder instances may experience high latency when directly
connected to a Linux server by a virtual switch. Interrupt Mode has higher latency than System
Polling mode, but System Polling mode has slightly higher latency than the ACOS hardware
platforms.
NOTE: This procedure is not supported for ACOS 414-P2 and later versions.
For those ACOS versions for which system polling mode is disabled by default, run the following
procedure to enable System Polling mode:
2. Exit global config mode and reboot the vThunder instance using the following command:
vThunder(config)#exit
vThunder#reboot
vThunder(config)#show version
Thunder Series Unified Application Service Gateway vThunder
Copyright 2007-2016 by A10 Networks, Inc. All A10 Networks products are
protected by one or more of the following US patents:
9294503, 9294467, 9270774, 9270705, 9258332, 9253152, 9219751, 9215275
9154584, 9154577, 9124550, 9122853, 9118620, 9118618, 9106561, 9094364
9060003, 9032502, 8977749, 8943577, 8918857, 8914871, 8904512, 8897154
8868765, 8849938, 8826372, 8813180, 8782751, 8782221, 8595819, 8595791
8595383, 8584199, 8464333, 8423676, 8387128, 8332925, 8312507, 8291487
8266235, 8151322, 8079077, 7979585, 7804956, 7716378, 7665138, 7647635
7627672, 7596695, 7577833, 7552126, 7392241, 7236491, 7139267, 6748084
6658114, 6535516, 6363075, 6324286, RE44701, 8392563, 8103770, 7831712
7606912, 7346695, 7287084, 6970933, 6473802, 6374300
page 47
Installing vThunder on VMware ESXi
FeedbackFF
About System Polling Mode and Interrupt Mode FFee
e
4. (Optional) You can disable System Polling Mode using the “no” form of the command, as shown
below.
Then, reboot the vThunder instance:
vThunder(config)#no system-poll-mode enable
vThunder(config)#exit
vThunder#reboot
ACOS allocates the available CPUs for performing Control, Packet Processing, and for Packet I/O. In
some situations, such as for handling SSL traffic, it may make more sense to limit the number of CPUs
allocated to Packet I/O. This is because SSL traffic tends to be more bound to the Data CPUs and less
bound for the I/O CPUs. Therefore, with heavy SSL traffic, restricting the number of I/O cores will free
up more Data CPUs, and this will achieve better throughput.
ACOS 4.1.1-P1 and prior releases do not support the ability to set the maximum number of I/O CPU
cores. Therefore, before downgrading from 4.1.1-P2 to 4.1.1-P1, A10 recommends changing the I/O
CPU core number back to its default value to prevent disruption. (Bug 371266).
NOTE: You must reboot the vThunder instance after running the system io-
cpu max-cores command to activate the configuration.
After you have enabled System Polling Mode per the instructions above, you can set the max I/O cores
as follows:
page 48
Installing vThunder on VMware ESXi
Feedback
About SR-IOV and DirectPath I/O
2. Exit global config mode and reboot the vThunder instance using the following command:
vThunder(config)#exit
vThunder#reboot
After vThunder finishes rebooting, System Polling Mode will be enabled, with the new upper limit
for I/O cores in place.
3. You can check that the Max I/O cores config is in effect by using the following show command:
vThunder(config)# show cpu
Time: 10:54:29 UTC Wed Feb 22 2017
1Sec 5Sec 10Sec 30Sec 60Sec
--------------------------------------------------------
Control1 5% 4% 4% 10% 27%
Data1 0% 0% 0% 0% 0%
Data2 0% 0% 0% 0% 0%
I/O1 0% 0% 0% 0% 0%
Details:
• As a minimum requirement for using System Poll Mode with vThunder for VMware, the server
must be running VMware ESXi 5.0, Update 1 (or newer).
• The vThunder vCPU can be in either System Poll Mode or Interrupt Mode. If the vThunder
instance is using the newer System Poll Mode, and if the interface driver is VMXNET3, then
Jumbo Frames are not supported. However, Jumbo Frames are supported if the vThunder
instance is using Interrupt Mode.
• For Direct Passthrough and SR-IOV, only polling mode is supported.
Both SR-IOV and DirectPath I/O are recommended for running applications with very high packets and
low latency requirements. Both of these features do not support some key virtualization functions. For
more information on the limitations, refer to vmware.com/support/pubs.
• To understand the prerequisites for vThunder, refer to “Prerequisites for Running SR-IOV or
DirectPath I/O” on page 50.
• To configure SR-IOV for a vThunder instance, refer to “Configuring SR-IOV” on page 51.
page 49
Installing vThunder on VMware ESXi
FeedbackFF
About SR-IOV and DirectPath I/O FFee
e
• To configure DirectPath I/O for a vThunder instance, refer to “Configuring DirectPath I/O” on
page 52.
• For more information on SR-IOV and DirectPath I/O and how to configure these for ESXi, refer to
vmware.com/support/pubs.
• The NIC selected for either SR-IOV or DirectPath I/O belongs of one of the following types:
• The NIC and BIOS settings are enabled for either SR-IOV or DirectPath I/O. Refer to your platform
and NIC documentation for more information.
• For SR-IOV, the supported ESXi version is 5.1 or higher.
For DirectPath I/O, the supported ESXi version is 4.0 or higher.
• For 82599 and X710, SR-IOV and DirectPath I/O for VMware ESXi is not supported in Interrupt
mode. Configure Poll mode to support SR-IOV. XL710 supports both Poll mode and Interrupt
mode.
• Tagged VLANs may not work if you configure SR-IOV for X710 and XL710. To resolve the issue,
upgrade the ESXi host to 6.5 or newer and reboot the vThunder instance. Upgrade the ESXi host
side i40e driver to version 2.0.6 or newer and reboot. Refer to https://my.vmware.com/web/
vmware/details?downloadGroup=DT-ESXI60-INTEL-I40E-206&productId=491 and
https://kb.vmware.com/s/article/2137853. Finally, remove the existing i40en driver and reboot
the system by using the command esxcli software vib remove -n i40en.
• For X710 and 82599, interfaces must be deleted in the reverse order of their addition.
For example, in an example vThunder system, the following interfaces are available:
eth1— 0000:06:00.0
eth2— 0000:06:01.0
eth3— 0000:06:02.0
eth4— 0000:06:03.0
page 50
Installing vThunder on VMware ESXi
Feedback
About SR-IOV and DirectPath I/O
If eth3 is added at first, followed by eth2 and eth1, the following order is expected:
eth3— 0000:06:03.0
eth2— 0000:06:01.0
eth1— 0000:06:00.0
• Before importing a vThunder instance as an OVF template, remove the SR-IOV or Direct
Passthrough interfaces from the vThunder instance.
• For vThunder in ESXi host, a mixture of SR-IOV or Direct Passthrough and VMXNET3 data inter-
faces are not supported. As a workaround, delete the last interface and then add it again.
• Promiscuous mode is not allowed in a VF.
• For X710 and 82599, the mulicast packets received by the ESXi Host NIC are dropped when SR-
IOV is enabled for the two VFs created from one physical NIC. However, vThunder can send out
the multicast packets.
• Jumbo Frames are not supported for the vThunder instance installed with the 82599 card and
with DPDK and SR-IOV enabled.
• VCS, VRRP, and IPv6 functions are not supported for the vThunder instance installed with the
X710 card and SR-IOV enabled. RIP, OSPF, ISIS, and BGP routing protocols are not supported.
However, unicast modes, such as VRRP-A unicast is supported.
• Tagged VLAN traffic does not work for the vThunder instance configured with the 82599 SR-IOV
interface.
Configuring SR-IOV
Configuring SR-IOV is a two-step process. First, you must define the virtual functions of the NIC by
using the ESXi CLI. Next, you must add the virtual function to the vThunder instance. A virtual function
can be mapped to only one vThunder instance.
Before configuring SR-IOV, check that your system meets the prerequisites outlined in “Prerequisites
for Running SR-IOV or DirectPath I/O” on page 50. Perform the following steps to configure SR-IOV:
1. Log into the ESXi shell and run the following command to get the current configuration of your
vmnic:
esxcli system module parameters list -m NIC_Driver_Module
For example, for the i40e vmnic, the command is:
esxcli system module parameters list -m i40e
2. Run the following command to define the maximum number of virtual functions for the vmnic:
esxcli system module parameters set -m NIC_Driver_Module -p "max_vfs=n"
page 51
Installing vThunder on VMware ESXi
FeedbackFF
About SR-IOV and DirectPath I/O FFee
e
For example, for the i40e vmnic, to enable two virtual functions each for the seventh and eighth
vmnics, the
command is as follows:
esxcli system module parameters set -m i40e -p "max_vfs=0,0,0,0,0,0,2,2"
3. Run the esxcli system module parameters list -m i40e command to check if the settings are
correct.
4. Restart the ESXi host for the changes to take effect.
5. Select the vThunder instance in the vSphere client.
Do not power on the VM.
6. Right-click the VM and select Edit Settings.
The Virtual Machines Properties window is displayed.
7. In the Virtual Machines Properties window, select Add.
The Add Hardware window is displayed.
8. In the Add Hardware window, select PCI Device and click Next.
The Choose PCI device window is displayed.
9. In the Specify the physical PCI/PCIe Device to connect to drop-down menu, select the
virtual function and click Next and then Finish.
There are four virtual functions listed in the drop-down menu according to the configuration you
specified in step 2.
In the Virtual Machines Properties window, you see an addition under New PCI Device.
10.Click OK.
11.Power on the VM for the changes to take affect.
Before configuring DirectPath I/O, check that your system meets the prerequisites outlined in
“Prerequisites for Running SR-IOV or DirectPath I/O” on page 50.
page 52
Installing vThunder on VMware ESXi
Feedback
About SR-IOV and DirectPath I/O
NOTE: Do not select Ethernet Adapter for adding a DirectPath I/O device.
10.In the Specify the physical PCI/PCIe Device to connect to drop-down menu, select the
virtual function and click Next and then Finish.
11.In the Virtual Machines Properties window, you see an addition under New PCI Device.
12.Click OK.
• A minimum of 16 vCPUS.
• Disable hyperthreading.
Refer to your system manual for specific information to disable hyperthreading.
• Enable CPU pinning and static allocation.
The procedure is dependent on your operating system, refer to your operating system manual.
page 53
Installing vThunder on VMware ESXi
FeedbackFF
Additional Resources—Where to go from here? FFee
e
It is also highly recommended to use the basic deployment instructions that appear in the System
Configuration and Administration Guide.
Feature information is available for ACOS products in the ACOS documents, which are available on the
A10 Networks support site.
page 54
vThunder on VMware ESXi
page 55
CONTACT US
5 a10networks.com/contact