Files
network/esxi.md
T
dohertj2 5a4da57457 Decommission the old Plex VM
Plex has run as a container on the Docker host since the 2026-09-16
migration. The old Debian 11 VM (10.100.0.24) is now retired per
plex-docker-migration.md section 9, steps 1, 2 and 4-7:

- removed from the Veeam "Backup VMs" job
- guest shut down gracefully, pre-migration snapshot removed and
  consolidated back to Plex.vmdk
- Guacamole "Plex SSH" connection deleted
- .24 / 10.50.0.31 DHCP leases released on the UDM

The VMDKs are deliberately kept until ~2026-10-15 so the VM remains a
one-command rollback; step 3 stays open until then.

Before powering the VM off, every integration was re-verified as
pointing at 10.100.0.35: Sonarr, Radarr, Tautulli, seerr, Uptime Kuma,
Homepage, Traefik and the UDM PLEX port-forward.

Section 9 gains a decommission log recording two behaviours that cost
time to work out: Veeam turns a removed job include into an explicit
Exclude tombstone rather than deleting it, and a plain sqlite3
integrity_check on a Plex library DB fails with "unknown tokenizer:
collating" because the stock binary lacks Plex's FTS collation - that
is not corruption.

ESXi port-group counts corrected (LAN_100 7->6, DATA_50 4->3), verified
by counting NICs on powered-on VMs.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-09-17 12:04:45 -04:00

123 lines
4.9 KiB
Markdown

# ESXi Host
## Access
- **IP**: 10.2.0.12 (VLAN 0 / DEFAULT, management)
- **Version**: VMware ESXi 8.0.3 build-24280767 (Update 3, Patch 35)
- **Credentials**: govc / `Tn9.xKw-m4Vp` (Administrator role)
- **API access via govc**:
```bash
GOVC_URL=https://10.2.0.12/sdk GOVC_USERNAME=govc GOVC_PASSWORD='Tn9.xKw-m4Vp' GOVC_INSECURE=true govc <command>
```
- **Do NOT use SSH** — ESXi keyboard-interactive auth is unreliable from this machine; use `govc` exclusively
- **Hardware**: HP, 2x Intel Xeon E5-2697 v4 (36 logical CPUs @ 2.3GHz), 256GB RAM
- **Boot time**: 2025-09-22
## Physical NICs
| NIC | Driver | Speed | Link | MTU | MAC | Description |
|-----|--------|-------|------|-----|-----|-------------|
| vmnic0 | igbn | — | **Down** | 1500 | ec:b1:d7:82:3b:40 | Intel 1Gb 2-port 361i |
| vmnic2 | ixgben | — | **Down** (admin down) | 1500 | 48:df:37:07:a9:6c | Intel 82599 10GbE |
| vmnic3 | ixgben | 10 Gbps | Up | 1500 | 48:df:37:07:a9:6d | Intel 82599 10GbE |
| vmnic4 | nmlx5_core | 25 Gbps | Up | 1500 | b8:83:03:60:e4:e0 | Mellanox ConnectX-4 Lx |
| vmnic5 | nmlx5_core | 25 Gbps | Up | 9000 | b8:83:03:60:e4:e1 | Mellanox ConnectX-4 Lx |
**Active uplinks**: vmnic3 (unused — no vSwitch), vmnic4 (vSwitch0), vmnic5 (jumboFrameSwitch)
## vSwitches
### vSwitch0 (vmnic4 — 25Gbps Mellanox, MTU 1500)
Carries VLAN-tagged traffic for management, LAN, IoT, and guest networks.
| Port Group | VLAN ID | Active Ports | Subnet |
|------------|---------|--------------|--------|
| DEFAULT_0 | 0 (untagged) | 1 | 10.2.0.0/24 (ESXi mgmt) |
| MGMT_1 | 0 (untagged) | 0 | — |
| GUEST_3 | 3 | 0 | — |
| LAN_100 | 100 | 6 | 10.100.0.0/24 |
| IOT_200 | 200 | 1 | 10.200.0.0/24 |
### jumboFrameSwitch (vmnic5 — 25Gbps Mellanox, MTU 9000)
Dedicated storage network with jumbo frames. Switch port 32 is configured as a trunk (`forward=all`, MGMT native) so VLAN 50 frames arrive tagged, matching the DATA_50 port group's VLAN ID.
| Port Group | VLAN ID | Active Ports | Subnet |
|------------|---------|--------------|--------|
| DATA_50 | 50 | 3 | 10.50.0.0/24 |
All port groups: promiscuous mode=No, forged transmits=No, MAC changes=No.
## VMkernel Interface
| Interface | IP | Netmask | Portgroup | MAC | Stack |
|-----------|-----|---------|-----------|-----|-------|
| vmk0 | 10.2.0.12 | 255.255.255.0 | DEFAULT_0 | 48:df:37:07:a9:6d | defaultTcpipStack |
- **Default gateway**: 10.2.0.1
- **DNS search**: localdomain (no DNS servers configured)
## Virtual Machines
### Powered On
| VM | Guest OS | CPU | RAM | LAN_100 IP | DATA_50 IP | Other IPs |
|----|----------|-----|-----|-----------|-----------|-----------|
| TrueNAS | Debian 12 | 16 | 128GB | 10.100.0.25 | 10.50.0.26 | +secondary IPs on both |
| DOCKER | Debian 12 | 22 | 32GB | 10.100.0.35 | 10.50.0.35 | Docker bridges: 172.18.0.1, 172.19.0.1 |
| Veeam | Win Server 2025 | 8 | 8GB | 10.100.0.30 | 10.50.0.32 | — |
| HA | Oracle Linux 6 | 16 | 16GB | 10.100.0.40 | — | Docker bridge: 172.30.32.1 |
| Ignition | Debian 11 | 4 | 16GB | 10.100.0.90 | — | IOT_200 NIC connected but no IP |
| DevVM | Win 10 | 8 | 16GB | 10.100.0.47 | — | IOT_200: 10.200.0.47 |
### Powered Off
| VM | Guest OS | CPU | RAM | Port Groups | Notes |
|----|----------|-----|-----|-------------|-------|
| DevServer | Win Server 2022 | 12 | 32GB | LAN_100 | — |
| Plex | Debian 11 | 8 | 8GB | LAN_100, DATA_50 | **Decommissioned 2026-09-17** — migrated to a container on DOCKER. Disks retained for rollback until ~2026-10-15, then delete. See [plex-docker-migration.md](plex-docker-migration.md) §9. |
## Per-VM Network Detail
### TrueNAS
| NIC | MAC | Port Group | IPs |
|-----|-----|------------|-----|
| Adapter 1 | 00:0c:29:bb:71:43 | LAN_100 | 10.100.0.25, .26, .27 |
| Adapter 2 | 00:0c:29:bb:71:4d | DATA_50 | 10.50.0.25, .26, .27, .28 |
### DOCKER
| NIC | MAC | Port Group | IPs |
|-----|-----|------------|-----|
| Adapter 1 | 00:0c:29:cf:bb:bb | LAN_100 | 10.100.0.35 |
| Adapter 2 | 00:0c:29:cf:bb:c5 | DATA_50 | 10.50.0.35 |
### Veeam
| NIC | MAC | Port Group | IPs |
|-----|-----|------------|-----|
| Adapter 1 | 00:0c:29:33:76:a5 | DATA_50 | 10.50.0.32 |
| Adapter 2 | 00:0c:29:33:76:af | LAN_100 | 10.100.0.30 |
### HA (Home Assistant)
| NIC | MAC | Port Group | IPs |
|-----|-----|------------|-----|
| Adapter 2 | 00:0c:29:f3:f3:5b | LAN_100 | 10.100.0.40 |
### Plex (decommissioned 2026-09-17, powered off)
| NIC | MAC | Port Group | Former IP |
|-----|-----|------------|-----|
| Adapter 1 | 00:0c:29:4a:ef:3d | LAN_100 | 10.100.0.24 (lease released) |
| Adapter 2 | 00:0c:29:4a:ef:47 | DATA_50 | 10.50.0.31 (lease released) |
### Ignition
| NIC | MAC | Port Group | IPs |
|-----|-----|------------|-----|
| Adapter 1 | 00:0c:29:87:5f:f8 | LAN_100 | 10.100.0.90 |
| Adapter 2 | 00:0c:29:87:5f:02 | IOT_200 | (no IP, disconnected) |
### DevVM
| NIC | MAC | Port Group | IPs |
|-----|-----|------------|-----|
| Adapter 1 | 00:0c:29:5c:f9:f7 | IOT_200 | 10.200.0.47 |
| Adapter 2 | 00:0c:29:5c:f9:01 | LAN_100 | 10.100.0.47 |