Files
network/esxi.md
T
dohertj2 5a4da57457 Decommission the old Plex VM
Plex has run as a container on the Docker host since the 2026-09-16
migration. The old Debian 11 VM (10.100.0.24) is now retired per
plex-docker-migration.md section 9, steps 1, 2 and 4-7:

- removed from the Veeam "Backup VMs" job
- guest shut down gracefully, pre-migration snapshot removed and
  consolidated back to Plex.vmdk
- Guacamole "Plex SSH" connection deleted
- .24 / 10.50.0.31 DHCP leases released on the UDM

The VMDKs are deliberately kept until ~2026-10-15 so the VM remains a
one-command rollback; step 3 stays open until then.

Before powering the VM off, every integration was re-verified as
pointing at 10.100.0.35: Sonarr, Radarr, Tautulli, seerr, Uptime Kuma,
Homepage, Traefik and the UDM PLEX port-forward.

Section 9 gains a decommission log recording two behaviours that cost
time to work out: Veeam turns a removed job include into an explicit
Exclude tombstone rather than deleting it, and a plain sqlite3
integrity_check on a Plex library DB fails with "unknown tokenizer:
collating" because the stock binary lacks Plex's FTS collation - that
is not corruption.

ESXi port-group counts corrected (LAN_100 7->6, DATA_50 4->3), verified
by counting NICs on powered-on VMs.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-09-17 12:04:45 -04:00

4.9 KiB

ESXi Host

Access

  • IP: 10.2.0.12 (VLAN 0 / DEFAULT, management)
  • Version: VMware ESXi 8.0.3 build-24280767 (Update 3, Patch 35)
  • Credentials: govc / Tn9.xKw-m4Vp (Administrator role)
  • API access via govc:
    GOVC_URL=https://10.2.0.12/sdk GOVC_USERNAME=govc GOVC_PASSWORD='Tn9.xKw-m4Vp' GOVC_INSECURE=true govc <command>
    
  • Do NOT use SSH — ESXi keyboard-interactive auth is unreliable from this machine; use govc exclusively
  • Hardware: HP, 2x Intel Xeon E5-2697 v4 (36 logical CPUs @ 2.3GHz), 256GB RAM
  • Boot time: 2025-09-22

Physical NICs

NIC Driver Speed Link MTU MAC Description
vmnic0 igbn — Down 1500 ec:b1:d7:82:3b:40 Intel 1Gb 2-port 361i
vmnic2 ixgben — Down (admin down) 1500 48:df:37:07:a9:6c Intel 82599 10GbE
vmnic3 ixgben 10 Gbps Up 1500 48:df:37:07:a9:6d Intel 82599 10GbE
vmnic4 nmlx5_core 25 Gbps Up 1500 b8:83:03:60:e4:e0 Mellanox ConnectX-4 Lx
vmnic5 nmlx5_core 25 Gbps Up 9000 b8:83:03:60:e4:e1 Mellanox ConnectX-4 Lx

Active uplinks: vmnic3 (unused — no vSwitch), vmnic4 (vSwitch0), vmnic5 (jumboFrameSwitch)

vSwitches

vSwitch0 (vmnic4 — 25Gbps Mellanox, MTU 1500)

Carries VLAN-tagged traffic for management, LAN, IoT, and guest networks.

Port Group VLAN ID Active Ports Subnet
DEFAULT_0 0 (untagged) 1 10.2.0.0/24 (ESXi mgmt)
MGMT_1 0 (untagged) 0 —
GUEST_3 3 0 —
LAN_100 100 6 10.100.0.0/24
IOT_200 200 1 10.200.0.0/24

jumboFrameSwitch (vmnic5 — 25Gbps Mellanox, MTU 9000)

Dedicated storage network with jumbo frames. Switch port 32 is configured as a trunk (forward=all, MGMT native) so VLAN 50 frames arrive tagged, matching the DATA_50 port group's VLAN ID.

Port Group VLAN ID Active Ports Subnet
DATA_50 50 3 10.50.0.0/24

All port groups: promiscuous mode=No, forged transmits=No, MAC changes=No.

VMkernel Interface

Interface IP Netmask Portgroup MAC Stack
vmk0 10.2.0.12 255.255.255.0 DEFAULT_0 48:df:37:07:a9:6d defaultTcpipStack
  • Default gateway: 10.2.0.1
  • DNS search: localdomain (no DNS servers configured)

Virtual Machines

Powered On

VM Guest OS CPU RAM LAN_100 IP DATA_50 IP Other IPs
TrueNAS Debian 12 16 128GB 10.100.0.25 10.50.0.26 +secondary IPs on both
DOCKER Debian 12 22 32GB 10.100.0.35 10.50.0.35 Docker bridges: 172.18.0.1, 172.19.0.1
Veeam Win Server 2025 8 8GB 10.100.0.30 10.50.0.32 —
HA Oracle Linux 6 16 16GB 10.100.0.40 — Docker bridge: 172.30.32.1
Ignition Debian 11 4 16GB 10.100.0.90 — IOT_200 NIC connected but no IP
DevVM Win 10 8 16GB 10.100.0.47 — IOT_200: 10.200.0.47

Powered Off

VM Guest OS CPU RAM Port Groups Notes
DevServer Win Server 2022 12 32GB LAN_100 —
Plex Debian 11 8 8GB LAN_100, DATA_50 Decommissioned 2026-09-17 — migrated to a container on DOCKER. Disks retained for rollback until ~2026-10-15, then delete. See plex-docker-migration.md §9.

Per-VM Network Detail

TrueNAS

NIC MAC Port Group IPs
Adapter 1 00:0c:29:bb:71:43 LAN_100 10.100.0.25, .26, .27
Adapter 2 00:0c:29:bb:71:4d DATA_50 10.50.0.25, .26, .27, .28

DOCKER

NIC MAC Port Group IPs
Adapter 1 00:0c:29:cf:bb:bb LAN_100 10.100.0.35
Adapter 2 00:0c:29:cf:bb:c5 DATA_50 10.50.0.35

Veeam

NIC MAC Port Group IPs
Adapter 1 00:0c:29:33:76:a5 DATA_50 10.50.0.32
Adapter 2 00:0c:29:33:76:af LAN_100 10.100.0.30

HA (Home Assistant)

NIC MAC Port Group IPs
Adapter 2 00:0c:29:f3:f3:5b LAN_100 10.100.0.40

Plex (decommissioned 2026-09-17, powered off)

NIC MAC Port Group Former IP
Adapter 1 00:0c:29:4a:ef:3d LAN_100 10.100.0.24 (lease released)
Adapter 2 00:0c:29:4a:ef:47 DATA_50 10.50.0.31 (lease released)

Ignition

NIC MAC Port Group IPs
Adapter 1 00:0c:29:87:5f:f8 LAN_100 10.100.0.90
Adapter 2 00:0c:29:87:5f:02 IOT_200 (no IP, disconnected)

DevVM

NIC MAC Port Group IPs
Adapter 1 00:0c:29:5c:f9:f7 IOT_200 10.200.0.47
Adapter 2 00:0c:29:5c:f9:01 LAN_100 10.100.0.47