Protect the ESXi virtual machines with OpenBSD

I own a server at Online.net which now runs VMware ESXi free edition. The thing is VMs have to access the Wild Wild Web and provide public services while still being protected. So let’s configure OpenBSD to do so. Continue reading “Protect the ESXi virtual machines with OpenBSD”

Enforce IP filtering on ESXi

My ESXi is provided by Online.net and accessible from Internet. Reading the VMware documentation, one can see:

ESXi includes a firewall that is enabled by default.

At installation time, the ESXi firewall is configured to block incoming and outgoing traffic, except traffic for services that are enabled in the host’s security profile.

But the default security profile is way too loose! So here’s how to harden it a bit.

Continue reading “Enforce IP filtering on ESXi”

Upgrade VMware ESXi 6.5 to 6.7 using the esxcli console tool

I decided to run VMware ESXi on my Online/Scaleway Start-2-L server. Using the online.net installer, you can “only” get ESXi 6.5.0d (64BITS). So here’s how to upgrade to 6.7.

Continue reading “Upgrade VMware ESXi 6.5 to 6.7 using the esxcli console tool”

The Synology DiskStation Manager (DSM) in VMware ESXi

Looking for a option to replace my DS409slim, I discovered that it is possible to run the Synology system, aka DSM, on a simple VMware virtual machine. You’ll need a special boot loader from XPEnology and the stock Synology firmware.
Continue reading “The Synology DiskStation Manager (DSM) in VMware ESXi”

Running Windows Server 2012 Hyper-V inside ESXi 5.1

It is possible to run Windows Server 2012 Hyper-V inside a VMware ESXi 5.1, free edition. Using a “nested” hypervisor is not straight forward. Still it is quite simple.

Continue reading “Running Windows Server 2012 Hyper-V inside ESXi 5.1”