Guides Tweaking VMware's High Availability and Admission Control Policies

Tweaking VMware’s High Availability and Admission Control Policies

VMware’s Admission Control (AC) policy allows you to manage cluster failover resources (CPU and memory) so that sufficient resources remain in a “reserved” state in case of an ESX host failure. By default, VMware sets the Admission Control policy to “Enabled.”

This state will not allow any virtual machines (VMs) to power on if their requirements violate availability constraints. As a VMware Administrator, you can configure a raw number of hosts that your cluster will tolerate or as a percentage of the total number of hosts in a cluster.

But powering on a virtual machine isn’t the only constraint imposed on a cluster when the AC policy is in the Enabled state and when the action would violate failover resource requirements. Migrations to a constrained host, cluster or resource pool aren’t permitted, nor are CPU and memory increases for VMs.

Server TutorialsVMware suggests that you only disable AC on a temporary basis if one or more of the following conditions exist:

• Maintenance – When you need to place one or more hosts in maintenance mode for upgrades, updates or patching.

• Testing – If your testing will temporarily cause insufficient resources warnings from your cluster.

Other conditions exist where you might want to disable AC permanently or for a prolonged period. One such situation is if you have a small budget for purchasing and maintaining VMware hosts and you can’t afford to hold a large amount of resources in reserve.

Reserved resources, especially for a small number of clustered hosts, are essentially wasted resources, and the cost of those reserved resources can easily equal an entire host system. Fortunately, in this case you do have the ability to specify reserved resources for failover.

Tolerating Host Failures in a Cluster

You have the option of designating a raw number of clustered VMware hosts that can fail and still supply enough resources to carry the load of the entire cluster, but you are limited to four hosts that can be configured for failover. Once you select a number, VMware HA calculates the number of available “slots” or available CPU and memory allocations for running VMs.

Reserving a Percentage of Cluster Resources

As an alternative to setting the number of hosts in a cluster that are allowed to fail, you can take the approach of setting in reserve a specific percentage of the total cluster resources for failover. This setting is useful if your cluster has ample capacity to accommodate a designated amount of failover resources.

Specifying a Failover Host

If you configure your cluster so that you have a “hot spare” host, you can specify that system as a failover host. If another host in the cluster fails, VMware HA will attempt to start VMs on that host. Should your designated failover host go over capacity, HA will try to start the VMs on other hosts in the cluster.

Disabling Admission Control

By disabling AC, VMs can be powered on even if it causes insufficient failover capacity for the cluster. Disabling AC generates no warnings or alerts, and the result of disabling AC might not have the devastating effect to your VMs you’d expect given the available literature on the subject.

The common fear is that some of your VMs wouldn’t VMotion and resume on another host in the event of a host failure. This situation would occur only if a very resource-constrained situation exists on your remaining hosts.

VMware HA can still perform failovers in an Admission Control-disabled state by using the VM Restart Priority setting to determine which VMs have resource priority. In case of a failover scenario, those VMs would be powered on first.

To change the Admission Control settings, right click a cluster in your vCenter Client->Edit Settings->VMware HA. Click OK when finished to accept your changes.

To change VM Restart Priority for individual VMs in a cluster, right click a cluster in your vCenter Client->Edit Settings->Virtual Machine Options. Next select the VM in the right window and set the VM Restart Priority to Disabled, Low, Medium or High.

Now set the Host Isolation Response to Leave powered on, Power off or Shut down. Do this for all VMs. The default settings are Medium Restart Priority and Leave powered on. Click OK to finish and accept your selections.

I suggest that, in most cases, it’s OK to disable AC and use all the available host resources for powering VMs. The problem that you can experience is that you’re more likely to oversubscribe your hosts without some restriction in place. However, for budget-constrained businesses, the cost savings are worth the acceptable risk of oversubscription.

Ken Hess is a freelance writer who writes on a variety of open source topics including Linux, databases, and virtualization. He is also the coauthor of Practical Virtualization Solutions, released in October 2009. You may reach him through his Web site at

Follow ServerWatch on Twitter and on Facebook

Latest Posts

How to Convert a Physical Computer to a Virtual Machine

Many organizations are implementing virtualization technology into their networks to convert physical computers to virtual machines (VM). This helps reduce overall physical hardware costs,...

HPE ProLiant DL380 Gen10: Rack Server Overview and Insight

The HPE ProLiant DL380 series has consistently been a market leader in the server space. The Gen10 released in 2017 further increased HPE's market...

Best Server Management Software & Tools 2021

Finding the best server management software tools for your organization can have a major impact on the success of your business operations. Manually handling...

IBM AS/400: Lasting the Test of Time

Some server operating systems (OS) were built to survive the test of time – the IBM AS/400 is one such system.  The AS/400 (Application System/400)...

What is Disaster Recovery?

The modern organization's heavy dependence on using data to drive their business has made having a Disaster Recovery (DR) plan in place a necessity....

Related Stories