6.7

Table Of Contents
VMware vCenter Server
®
selects a preferred set of datastores for heartbeating. This selection is made to
maximize the number of hosts that have access to a heartbeating datastore and minimize the likelihood
that the datastores are backed by the same LUN or NFS server.
You can use the advanced option das.heartbeatdsperhost to change the number of heartbeat
datastores selected by vCenter Server for each host. The default is two and the maximum valid value is
five.
vSphere HA creates a directory at the root of each datastore that is used for both datastore heartbeating
and for persisting the set of protected virtual machines. The name of the directory is .vSphere-HA. Do
not delete or modify the files stored in this directory, because this can have an impact on operations.
Because more than one cluster might use a datastore, subdirectories for this directory are created for
each cluster. Root owns these directories and files and only root can read and write to them. The disk
space used by vSphere HA depends on several factors including which VMFS version is in use and the
number of hosts that use the datastore for heartbeating. With vmfs3, the maximum usage is 2GB and the
typical usage is 3MB. With vmfs5, the maximum and typical usage is 3MB. vSphere HA use of the
datastores adds negligible overhead and has no performance impact on other datastore operations.
vSphere HA limits the number of virtual machines that can have configuration files on a single datastore.
See Configuration Maximums for updated limits. If you place more than this number of virtual machines
on a datastore and power them on, vSphere HA protects virtual machines only up to the limit.
Note A vSAN datastore cannot be used for datastore heartbeating. Therefore, if no other shared storage
is accessible to all hosts in the cluster, there can be no heartbeat datastores in use. However, if you have
storage that is accessible by an alternate network path independent of the vSAN network, you can use it
to set up a heartbeat datastore.
vSphere HA Security
vSphere HA is enhanced by several security features.
Select firewall ports
opened
vSphere HA uses TCP and UDP port 8182 for agent-to-agent
communication. The firewall ports open and close automatically to ensure
they are open only when needed.
Configuration files
protected using file
system permissions
vSphere HA stores configuration information on the local storage or on
ramdisk if there is no local datastore. These files are protected using file
system permissions and they are accessible only to the root user. Hosts
without local storage are only supported if they are managed by Auto
Deploy.
Detailed logging The location where vSphere HA places log files depends on the version of
host.
n
For ESXi 5.x hosts, vSphere HA writes to syslog only by default, so
logs are placed where syslog is configured to put them. The log file
names for vSphere HA are prepended with fdm, fault domain manager,
which is a service of vSphere HA.
vSphere Availability
VMware, Inc. 19