Deep Security 8.0 SP2 released

Trend Micro released Deep Security 8.0 Service Pack 2 on January 21, 2013.LogoTrendMicroTP

Next to a couple of bugfixes this version supports even more Operating Systems. With this release Trend Micro Deep Security supports Windows 8 and Windows 2012 (agent) and VMware vSphere 5.1 (DSVA).

Click more for a complete list of supported operating systems.


How to improve VMware View video performance

ImproveDuring the last weeks we’ve been busy implementing a large VMware View deployment for one customer and planning an even larger VMware View deployment for another customer. At the first site we ran into some video performance issues which we definitely want to avoid during the second project.

In our quest to solve and avoid the video performance issues we ran into a number of ways to improve the video performance in VMware View that I would like to share.

First of all, we used the information below from the VMware Architecture Planning Guide:

480p-formatted video You can play video at 480p or lower at native resolutions when the View desktop has a single virtual CPU. If the operating system is Windows 7 and you want to play the video in high-definition Flash or in full screen mode, the desktop requires a dual virtual CPU.

720p-formatted video You can play video at 720p at native resolutions if the View desktop has a dual virtual CPU. Performance might be affected if you play videos at 720p in high definition or in full screen mode.

1080p-formatted video If the View desktop has a dual virtual CPU, you can play 1080p formatted video, although the media player might need to be adjusted to a smaller window size.

3D If you plan to use 3D applications such as Windows Aero themes or Google Earth, the Windows 7 View desktop must have virtual hardware version 8 and turn on the pool setting called Windows 7 3D Rendering. Up to 2 monitors are supported, and the maximum screen resolution is 1920 x 1200. This non-hardware accelerated graphics feature enables you to run DirectX 9 and OpenGL 2.1 applications without requiring a physical graphics processing unit.

These are the settings we used to size the first solution, so we use a Windows 7 desktop image with dual vCPU, 2GB memory, a VMXNET3 adapter and hardware version 8.

Update 03-2014: We recently found out that with the recent improvements in vSphere 5.5 and Horizon View 5.3 we can now offer full screen 720p video with only 1 vCPU VDI virtual machines. VMware has not yet updated their documentation but a VMware employee confirmed that updates in eg. the code of the VMware SVGA graphics driver resulted in this improvement.

This is good for playing 720p in native video resolution but when scaling to full screen this setup does not run smoothly.

Note how it says “native resolutions“, plural. In this case, 720p only defines the aspect ration of 16:9 and 720 horizontal scan lines. In this case native resolution means, the resolution in which a video is presented to you by default, with no up- or down-scaling applied. So it does not define 1280 × 720 video resolution.


Modify Fast Send Datagram Threshold

For desktop VMs using VMXnet3 NICs, you can significantly improve the peak video playback performance of your View desktop. The VMXNET3 adapter is a paravirtualized NIC designed for performance that, as of vSphere 5, supports interrupt coalescing. Virtual interrupt coalescing is similar to a physical NICs interrupt moderation and is useful in improving CPU efficiency for high throughput workloads. Unfortunately, out-of-the-box, Windows does not benefit from interrupt coalescing in many scenarios (those sending packets larger than 1024-bytes), because after sending a packet, Windows waits for a completion interrupt to be delivered before sending the next packet.

By setting FastSendDatagramThreshold to the Microsoft recommended value of 1500 bytes you instruct Windows not to wait for the completion interrupt even when sending larger packets. So modify the following registry setting to the value:

HKLM\System\CurrentControlSet\Services\Afd\Parameters\FastSendDatagramThreshold to 1500

This allows VMware View and PCoIP to benefit from interrupt coalescing which reduces CPU load and improves network throughput for PCoIP. This translates into significantly improved video playback performance of up to 1.4 times when running full-screen videos at 1080p resolution on a 2vCPU desktop.



Configure PCoIP image quality levels

With View 5 VMware has released a few VMware View GPO’s that can be used to modify the default behaviour of the PCoIP protocol. Many View customers use this to turn down the bandwidth PCoIP uses in low bandwidth situations. This lowers the frame rate, limits the bandwidth and thereby it changes the image quality. But you can also use it the other way around and allow for better video performance.

PColPMaxLinkRate GPO
This GPO can be used to set the desired maximum PCoIP session bandwidth in kilobits per second.
(example: 1000 = 1000Kbps = 1Mbps). The default value is 1Gbps (1.000.000Kbps), 0 = no bandwidth constraints.

When you are in a LAN environment and bandwidth is not an issue, try setting the PColPMaxLinkRate to ’0′ to improve the video performance.

PColPlmagingMinimumlmageQuality GPO
This GPO can be used to adjust the minimum image quality. Range is a value between 30-100, the default value is 50. When  you set a lower image quality (lower value) the result is a higher frame rate for smooth motion but with lower image quality. When you set a higher image quality (higher value) the result is crisp imaging but with less smooth image motion.

To improve the video performance try lowering the PColPlmagingMinimumlmageQuality value.

PColPlmagingMaximumlnitiallmageQualitv GPO
This GPO can be used to adjust the maximum image quality. Range is a value between 30-100, the default value is 90. When  you set a higher value, the result is a higher initial image quality, with larger peaks in bandwidth during large screen changes. When you set a lower value, the result is a lower initial image quality, with smaller peaks in bandwidth during large screen changes.

When you suspect that bandwidth is an issue, for instance on WiFi connections, try lowering the PColPlmagingMaximumlnitiallmageQualitv value to improve the video performance.


These setting are the default VMware View GPO settings to adjust PCoIP behaviour but I also found a PCoIP setting hidden in the registry.

This setting can be used to set the maximum frame rate. The default value is 30 frames per second. When you set a higher value, the result is a higher frame rate and smooth display imaging motion but with possible increased average network bandwidth. When you set a lower value, the result is a lower frame rate with a lower average network bandwidth but with less smooth image motion.

To improve video performance, create the registry key below (REG_DWORD) and try some higher values. Setting in frames per second/Hz (example: 8, 12 or 15 fps).



Handle with care
All these settings above can improve the video performance dramatically but as a result it consumes more bandwidth. My advice would be to use Active Directory, logon scripts and/or workspace managers like RES to apply these settings to only the desktops that need better quality video performance and are on a LAN with the bandwidth needed. Don’t use it for all VDI desktops unless everyone needs better quality video performance.


PCoIP settings



Multi-Media Redirection

If all this fails you can always reside to old fashioned Multi-Media Redirection (MMR) and use the local processing power to render the video on the client side, but this has some caveats.

Multimedia redirection (MMR) delivers the multimedia stream directly to client computers by using a virtual channel. With MMR, the multimedia stream is processed, that is, encoded and decoded, on the client system. Local hardware formats and plays media content, thereby offloading the demand on the ESX/ESXi host.

The problem is that there is only limited support. The MMR feature supports the media file formats that the client system supports, because local decoders must exist on the client. File formats include MPEG2-1, MPEG-2, MPEG-4 Part 2; WMV 7, 8, and 9; WMA; AVI; ACE; MP3; and WAV, among others.

This feature has the following limitations:

  • For best quality, use Windows Media Player 10 or later, and install it on both the local computer, or client access device, and the View desktop.
  • The Wyse MMR port, which is 9427 by default, must be added as a firewall exception in the View desktop.
  • MMR is not supported with PCoIP on Windows 7 clients or virtual desktops.

Windows 7 clients and Windows 7 View desktops do not support MMR. For Windows 7 clients agents, use Windows media redirection, included with RDP 7. For  this to work you need to use Windows Media Player 10 or later, and install it on both the local computer, or client access device, and the View desktop.

How to build a virtual datacenter

VMware PressLast week I got a tip on a new book on VMware vSphere 5 I would like to share. It’s a VMware Press book which is called ‘Building a virtual Datacenter’ and it has been published in 3 different language : English, Spanish and French which is uncommon for a book on VMware.

The book provides an understandable and global view of vSphere 5, with a ton of information and advice from real world examples. It describes the necessary design choices in a way which is accessible to most readers, not only to a select group of experts.

The book has a nice buildup, the first chapters are devoted to understanding VMware vSphere 5’s functionalities and in the following chapters the links between this technology and the datacenter’s various elements are described such as servers, storage, network, backup and service continuity. In the last chapter, a case study of a migration to a virtualized environment within a large company’s datacenter is discussed, with objectives clearly defined by the corporation’s management.

This book is intended primarily for those in charge of infrastructure projects within information systems like system engineers, VMware and storage administrators, project managers, consultants, architects, sales specialists, evangelists etc.

You can find more information on Amazon.

vKernel did it again: vOPS Server Explorer 6.3

VKernel, now under the Dell flag, just released version 6.3 of the vOPS Server Explorer freeware suite.Next to the already present tools Environment Explorer, SearchMyVM Explorer, and vScope Explorer  they added two new utilities: Storage Explorer and Change Explorer.

Using the same analytics and advisory engine from the paid vOPS Server Standard product, all five of these utilities provide virtual administrators with a rapid assessment of the state of their environment, for free!

So what is Storage Explorer?

Storage Explorer assesses storage performance and capacity views across datastores and VMs that helps VM admins to get better visibility of their storage environment.

It has the following features:

  • Identify critical datastore issues such as overcommitment, low capacity, high latency, VMFS version mismatch.
    Storage Explorer collects inventory and performance data from datastores and apply rules based on best practices to highlight if any critical conditions are found. Such examples includes overcommitment, low capacity and high latency. Other useful information includes VMFS version, storage path policy and number of VMs.
  • Identify critical VM issues such as low available disk space, high latency and throughput
    Storage Explorer collects inventory and performance data from VMs and apply rules based on best practices to highlight if any critical conditions are found. Examples includes low available disk space, high latency and throughput.


Happy new year!

Last month the VMGuru-crew has been busy to update our infrastructure to improve the reliability and performance.
Yesterday Alex fixed the last issue so you all can enjoy the new, improved, faster and more reliable VMGuru.

This way we’re ready to present you with the more news, tests, how-to’s and the latest in virtualization.

So from all of us at VMGuru, a very happy new year!