
We run NSX with Avi Load Balancer, and every so often the Avi Controller manages to lock the NSX admin account. Usually it is credential drift somewhere. The Controller keeps…
47 links

We run NSX with Avi Load Balancer, and every so often the Avi Controller manages to lock the NSX admin account. Usually it is credential drift somewhere. The Controller keeps…

A VCF 9.1.0 lab report on the VKS Secret Store injected-image failure and a validated Regional Harbor workaround using the same VMware image digest.

A couple of weeks ago, I received an interesting email from a reader who had observed high CPU utilization after upgrading VCF Automation (VCFA) to the latest VCF 9.1 release. They were running VCF…

Tailscale and SQLite developers traced maddening corruption incidents to find the WAL-Reset data race, then uncovered a second stale expression index bug.

The same class of NVMe drive failed three times in 48 hours on my three-node Thunderbolt cluster: a real NVMe firmware bug, a smartctl red herring, a fix I already had half of by accident, and a ten-hour alerting blind spot I didn't know I had.

Introducing VCF Inspector: a standalone, zero-footprint diagnostic tool for VCF 9.1 and VCF Management Services. Available now as a free download on VMware Flings.

If you've deployed VMware Cloud Foundation 9.1, you've met the VCF Service Runtime — the Kubernetes cluster quietly running the entire management plane. Broadcom calls the platform underneath it VMSP…

Ghostty shipped a partial fix for its SSH terminfo problem back in version 1.2.0, and a proper one is coming in 1.4.0. I went looking for why I was still running into trouble, and found the real story is more complicated than either release note lets on.

Debug the VCF Management Service in VCF 9.1. Learn its architecture, node roles, and how to use kubectl to troubleshoot pods and logs efficiently.

You are unable to login to use the admin@vsp.local API account used for interacting with various components in running in a Services Runtime platform. Password


Minimal container images often ship without curl, wget, or any HTTP client at all. Bash can open a TCP socket through /dev/tcp, which is enough to write a tiny HTTP/1.1 request by hand for quick checks.

During the deployment of an additional VCF 9.1 component, the precheck failed with the following platform health error: Platform Health Check Error
[platform-statefulsets-core : 1 of 10 resources are not ok:logging-operator-fluentd: wrong resource state: InProgress - Ready: 0/1;][VCFMS-HEALTH-002]

I frequently deploy and re-deploy VMware Virtual Appliances (OVA), which I fully automate using OVFTool from my macOS x86 system. Recently, I noticed that deployments would consistently fail roughl…

nbor, flo, viaduct, wiremap. Four CLI tools for network troubleshooting, discovery, and monitoring. Built from frustrations, open-sourced, and available on GitHub and Homebrew.

VMware Cloud Foundation (VCF) 9.1 is now generally available! 🥳 In addition to the revamped VCF 9.1 Technical Documentation which includes the 9.1 release notes, which everyone should be reviewing …

After delivering this session at both VMUG Connect Amsterdam and VMUG Connect Minneapolis, I can honestly say the response exceeded my expectations. The rooms were packed, the questions were sharp, an

Anthropic is an AI safety and research company that's working to build reliable, interpretable, and steerable AI systems.

Nous exploitons déjà depuis plus de deux ans un cluster Kubernetes basé sur un empilement très complexe de couches OpenShift, mais aussi vSphere/VSAN/NSX-T, qui apporte un niveau de sécurité élevé avec le CNI Antrea (qui s’occupe du réseau du cluster Kube). Cela nécessite aussi un niveau d’expertise globalement très élevé, sans même parler du prix de ces couches…

Délai DHCP dépassé sur UniFi : comment j'ai trouvé le coupable (un conteneur LXC Home Assistant) avec l'aide du support et de Claude Cowork.

A tale about misconfiguring nginx, from adventures in production

Real-time network diagnostics in your terminal. One command, zero config, instant visibility. - matthart1983/netwatch

The Logfile Navigator, lnav for short, is an advanced log file viewer for the small-scale.

Last April, I wrote a well-received article about the 13 software engineering laws - Hyrum’s, Conway’s, Zawinski’s, and 10 famous others.

Recently, I came across an issue in a vSphere cluster at a customer. Some vSAN disks were absent. This blog post will show you how I solved it.

Work around hard NATs and tricky networks with production-grade connectivity nodes you control


If you work with Proxmox clusters long enough, you will likely have a cluster that you need to remove a node from. This is a fairly easy process using...


Over the last couple of months, various new vSAN features were announced. Two of those features are around the Stretched Cluster configuration, and have probably been the number 1 feature request for a few years. Now that we have Site Takeover and Site Maintenance functionality available, I am starting to get some questions about the […]

Resolve the “Invalid redirect URL” error when logging into VMware Cloud Foundation (VCF) Operations with VCF Identity Broker SSO. Learn the cause and how to fix it by updating the System Access URL…


An hour after celebrating a successful validation in the VCF 9.0 installer and getting ready for real deployment testing (which I made a short LinkedIn post about yesterday), things went sideways. …


This is an example of how you can get Claude code to debug with LLDB in a TMac session.

On a few occasions, I have noticed that after the initial deployment of VMware Cloud Foundation (VCF) 9.0 that also includes VCF Automation (VCFA), the VCFA VM can experience a sustained CPU usage …

I recently deployed the latest release of VMware Data Services Manager (DSM) 9.0 in my VMware Cloud Foundation (VCF) 9.0 lab to explore the new integration with VCF Automation (VCFA), allowing orga…

On July 14th, 2025, Cloudflare made a change to our service topologies that caused an outage for 1.1.1.1 on the edge, resulting in downtime for 62 minutes for customers using the 1.1.1.1 public DNS Resolver as well as intermittent degradation of service for Gateway DNS.

Git is hard: screwing up is easy, and figuring out how to fix your mistakes is fucking impossible. Git documentation has this chicken and egg problem where you can't search for how to get yourself out

Real-time infrastructure monitoring with per-second metrics, ML anomaly detection, and AI troubleshooting. Open source, #1 on GitHub. Cut MTTR by 80%.

Visualize, analyze and improve your email authentication setup

A technical blog about Rust, Linux and other topics.

Dans cet article, j’expose 3 problèmes que j’ai rencontré dans ma carrière avec le DNS sur Kubernetes. Le 3eme est d’ailleurs un bug non corrigé à ce jour sur kube-proxy en mode iptables, et impacte n

Recently I’ve been working on a pretty big rust project and to my surprise Icouldn’t get tests to work properly.

Hey! I'm a student and professional bug-creator. I like to explore new stuff, and share my experiences on this blog!

Much of what I do, in multiple fields, could be reduced to one skill: troubleshooting.
![Screenshot of [NSX Intelligence] Problème lors du déploiement de NSX Application Platform (NAPP) sous RKE2](/screenshots/nsx-intelligence-probleme-lors-du-deploiement-de-nsx-applica.png)
Lors d’une nouvelle installation de NSX Intelligence (ou plutôt Security Intelligence maintenant), j’ai rencontré un petit problème inattendu !