Considerations for Running vCenter Server in a virtual machine within a VMware vSphere Storage Appliance cluster
search cancel

Considerations for Running vCenter Server in a virtual machine within a VMware vSphere Storage Appliance cluster

book

Article ID: 311214

calendar_today

Updated On:

Products

VMware vCenter Server VMware vSphere ESXi

Issue/Introduction

This article explains the considerations for running vCenter Server within a VMware vSphere Storage Appliance (VSA) cluster.


Symptoms:



Environment

VMware vSphere Storage Appliance 1.0.x
VMware vCenter Server 5.1.x
VMware vCenter Server 5.0.x
VMware vSphere Storage Appliance 5.1.x

Resolution

In releases of the VSA prior to 5.x, running vCenter Server in a virtual machine within a VSA cluster is an unsupported configuration.

Starting with VSA 5.x, you may run vCenter on a virtual machine within a 3-node VSA cluster, and within a 2-node VSA cluster under certain conditions. See Acceptable supported configurations for vSphere Storage Appliance (VSA) clusters (2043783) for more information.

For more information, see How a VSA Cluster Handles Failures in the VMware vSphere Storage Appliance Installation and Configuration Guide. In addition to this information, here are additional details regarding possible failure and recovery scenarios.

Note: In order for a VSA cluster to be “online” and in a fully-functioning state, three nodes must be online and in communication with one another from a networking perspective.

2-Node Clusters:
  • In a 2-node cluster, the VSA Cluster Service is considered the 3rd node.
  • If any single node of the three fails, or becomes isolated from the others from a networking point of view, the cluster becomes "vulnerable" to a second failure.
  • If the cluster is in such a "vulnerable" state, and the reason the cluster is vulnerable is because the failed / isolated node is the VSA Cluster Service, then the NFS Storage exported by the cluster will remain accessible, and not “degraded” (the storage will still be replicating between the two main nodes).
  • If the cluster is in such a “vulnerable” state, and the reason is because the failed / isolated node is one of the VSA Appliances, then the NFS Storage exported by the cluster will remain accessible, but will be in a “degraded” state (the storage will not be replicating between the two nodes, because of the failure of one of the nodes).
  • If an additional node fails or becomes isolated when the cluster is in a “vulnerable” state, the cluster will go “offline”. This means the NFS datastores will neither be accessible, nor will they be replicated. This condition will continue until one of the two failed or isolated nodes returns to communication with the surviving node, at which point the cluster will return to “online” status. If the first node back is the VSA Cluster Service, then the NFS datastores will become accessible, but will remain in a “degraded” status. The NFS datastores will stay in a “degraded” status until full synchronization tasks are completed.

3-Node Clusters:
  • If any single node of the three fails, or becomes isolated from the others from a networking point of view, the cluster becomes “vulnerable” to a second failure.
  • If the cluster is in such a “vulnerable” state, then the NFS Storage exported by the cluster will remain accessible, but two of the three datastores will become “degraded” (the storage replication will be impaired, because of the failure of one of the nodes).
  • If an additional node fails or becomes isolated when the cluster is in a “vulnerable” state, the cluster will go “offline”. This means the NFS datastores will neither be accessible, nor will they be replicated. This condition will continue until one of the two failed or isolated nodes returns to communication with the surviving node, at which point the cluster will return to “online” status. The NFS datastores will stay in a “degraded” status until full synchronization tasks are completed.
Please keep in mind that if you are running vCenter in a virtual machine on NFS Storage exported by the cluster, vCenter will be offline if the cluster is offline.

Also, the VSA Manager GUI is integrated with vCenter via a plug-in, and so certain operations are not possible or straightforward when the vCenter Server is running within VSA-provisioned storage.

The most problematic operation is Cluster Maintenance Mode, which cannot be entered in such a configuration because the operation requires all VMs resident on the VSA to be powered down. Since this would include the vCenter Server, VSA Manager would be inaccessible as a consequence of the power-down.

VSA manageability and troubleshooting can be more difficult if vCenter server is stored on VSA-provisioned storage. However, there are benefits to having vCenter inside the VSA Cluster, in terms of HA and vMotion.

In order to retain the option of performing Cluster Maintenance Mode, we suggest that sufficient disk space be reserved on the hosts’ local storage, to be able to move vCenter out of the cluster storage before such an operation is started.


Additional Information

Note: In a 2-node VSA cluster, the vCenter Server runs the VSA cluster service and provides the third quorum vote.

Consider these scenarios if the vCenter Server was a virtual machine on a VSA cluster in a 2-node environment:
  • If an ESXi host is running a VSA cluster node and the vCenter Server virtual machine fails, two of the three VSA cluster nodes unavailable and the cluster becomes offline.
  • If an ESXi host running a VSA cluster node fails, and the vCenter Server virtual machine is hosted on a VSA cluster datastore, the vCenter Server service may be impacted until the datastore completes failover.

    Note
    : In a 2-node VSA cluster the VSA Cluster Service is required to participate in failover. If the VSA Cluster Service is unavailable, the failover may be blocked and the cluster becomes offline.

  • If the cluster is down, the vCenter Server virtual machine cannot run. Thus, the cluster requires both vSphere Storage Appliances to be up for a cluster election to start. If one of the ESXi hosts fails permanently, the VSA cluster cannot recover, since VSA node replacement relies on the cluster being up.
In a 2-node or 3-node cluster, at least two cluster members must be up at all times. If vCenter Server is running the VSA Cluster Service as part of a 2-node VSA cluster, the vCenter Server virtual machine can only be restarted if both of the ESXi hosts acting as VSA Cluster Members are available. If two nodes become unavailable at the same time, the cluster becomes offline.Acceptable supported configurations for vSphere Storage Appliance (VSA) clusters