Please provide your feedback in this short Flings' survey.
fling logo of ESXi Mac Learning dvFilter

ESXi Mac Learning dvFilter

version 2.0 — November 30, 2016

Contributors 2

View All

Comments 18

  • profile picture of Anonymous
  • profile picture of Michael Firth
  • profile picture of Ronald
  • profile picture of Anonymous
  • profile picture of Anonymous
  • profile picture of Anonymous
  • profile picture of Anonymous
  • profile picture of vharry
View All

Summary

MAC learning functionality solves performance problems for use cases like nested ESX.  This ESX extension adds functionality to ESX to support MAC-learning on vswitch ports. For most ESX use cases, MAC learning is not required as ESX knows exactly which MAC address will be used by a VM. However, for applications like running nested ESX, i.e. ESX as a guest-VM on ESX, the situation is different. As an ESX VM may emit packets for a multitude of different MAC addresses, it currently requires the vswitch port to be put in "promiscuous mode". That however will lead to too many packets delivered into the ESX VM, as it leads to all packets on the vswitch being seen by all ESX VMs. When running several ESX VMs, this can lead to very significant CPU overhead and noticeable degradation in network throughput. Combining MAC learning with "promiscuous mode" solves this problem. The MAC learning functionality is delivered as a high speed VMkernel extension that can be enabled on a per-port basis. It works on legacy standard switches as well as Virtual Distributed Switches. The MAC learning module has a few noteworthy limitations:
  • Once learned, a MAC address is never aged out. For very long running ESX VMs with high churn in used MAC addresses (e.g. via nested guest VMs) this may be a problem. If the MAC table of a particular port is full, the MAC learning functionality can no longer improve performance.
  • MAC learning is not applied to multicast traffic and multicast traffic will see no performance improvement.
For more information, read this blog. The download is on Instructions tab.

Requirements

  • vSphere ESXi 5.x & ESXi 6.x

Instructions

For more details, you can refer to this blog post by William Lam

Installation consists of two parts:

1. To install the VIB, you can run the following ESXCLI command if you have uploaded the VIB to an ESXi datastore:

esxcli software vib install -v /vmfs/volumes/[DATASTORE-NAME]/vmware-esx-dvfilter-maclearn-0.1-ESX-5.0.vib -f

A system reboot is not necessary and you can confirm the dvFilter was successfully installed by running the following command:

/sbin/summarize-dvfilter

You should see the dvfilter-maclearn module loaded as seen in the screenshot below:

2. For the dvFilter to work, you will need to add two Advanced Virtual Machine Settings to each of your Nested ESXi VMs. This setting is on a per vNIC basis, which means you will need to add N-entries if you have N-vNICs on your Nested ESXi VM.

ethernet0.filter4.name=dvfilter-maclearn
ethernet0.filter4.onFailure=failOpen

This configuration can be performed online without rebooting the Nested ESXi VMs if you leverage the vSphere API. Another way to add this is to shutdown your Nested ESXi VM and use either the “legacy” vSphere C# Client or vSphere Web Client or for those that know how to append and reload the .VMX file as that’s where the configuration file is persisted on disk.

If you normally provision Nested ESXi VMs with 2 vNICs, you will have two corresponding entries. To confirm the settings are loaded, we can re-run the summarize-dvfilter command and we should now see our Virtual Machine listed in the output along with each vNIC instance.

Changelog

Version 2.0

  • New VIB to support ESXi 6.5

Version 1.0

  • Supports ESXi 5.x and 6.0

Similar Flings

No similar flings found. Check these out instead...
May 17, 2022
fling logo of VMware OS Optimization Tool

VMware OS Optimization Tool

The VMware OS Optimization Tool helps optimize Windows desktops for use with VMware Horizon View.

Sep 01, 2015
fling logo of vCO-CLI

vCO-CLI

version 2.0

vCO-CLI aims to provide exploratory programming to the vCO ecosystem. It connects to a running vCO server and presents a JavaScript REPL (Read-Eval-Print-Loop) to the user

Apr 15, 2020
fling logo of vSphere Replication Capacity Planning

vSphere Replication Capacity Planning

version 1.0

The vSphere Replication Capacity Planning Fling reveals actual VM traffic consumption and delta size. This helps you perform a capacity planning or estimation of vSphere Replication network bandwidth utilization prior to enabling vSphere Replication for VMs.

May 30, 2013
fling logo of ESXi Google Authenticator

ESXi Google Authenticator

version 1.0

Google Authenticator is a project that provides two-factor authentication by using both a PAM (Pluggable Authentication Module) module and a mobile application for generating one-time passcodes. In ESXi Google Authenticator, we modified the source code of Google-Authenticator to enable two-step authentication on ESXi (5.0, 5.1).

Jan 04, 2022
fling logo of VM News Collector

VM News Collector

version 1.0

VM News Collector is a real-time news aggregator dedicated to the collection of all kinds of real-time news updates and applicable information & resolutions on all technology products belonging to the VMWARE Group, a technology giant, leading the technology revolution in cloud computing & virtualization fields.
No need to scroll through hundreds of documents looking for informations. VM News Collector App has it all for you.

Nov 19, 2019
fling logo of VMware vSAN Live

VMware vSAN Live

version 1.0

vSAN is highly dynamic HCI system that needs constant monitoring. The VMware vSAN Live Fling is application for iOS and Android for monitoring of vSAN clusters on the go.

View More