{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260908-125-match-the-guest-cluster-floating-ip-to-its-sdn-vip-and-probe/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260908-125-match-the-guest-cluster-floating-ip-to-its-sdn-vip-and-probe/", "slug": "dse-20260908-125-match-the-guest-cluster-floating-ip-to-its-sdn-vip-and-probe", "url": "https://update.dsesecurity.com/updates/dse-20260908-125-match-the-guest-cluster-floating-ip-to-its-sdn-vip-and-probe/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260908-125-match-the-guest-cluster-floating-ip-to-its-sdn-vip-and-probe.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260908-125-match-the-guest-cluster-floating-ip-to-its-sdn-vip-and-probe/" }, "title": "Match the guest-cluster floating IP to its SDN VIP and probe", "summary": "How should an SDN load-balancer probe identify the active node of a guest cluster?", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "network-infrastructure", "label": "Networks & infrastructure", "alt": "Resilient network core with engineered blue and gold data paths.", "card_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" }, { "slug": "networks-infrastructure", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-08T18:15:06+00:00", "modified_at": "2026-09-08T18:23:27+00:00", "reviewed_on": "2026-09-08", "reading_minutes": 1, "word_count": 198, "potentially_affected": "Administrators running guest failover clusters inside SDN virtual networks.", "dse_recommendation": "Create a single mapping that shows the same floating address and probe port in the cluster and load-balancer configuration.", "primary_source": { "name": "Guest clustering in a virtual network", "url": "https://learn.microsoft.com/en-us/windows-server/networking/sdn/manage/guest-clustering", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

Network Controller permits a VM to communicate using its assigned IP addresses. Microsoft therefore requires additional configuration for clustering that uses a floating address. Its design exposes that address through a Software Load Balancer VIP and a health probe that directs traffic to the node currently holding it. The cluster address and probe port must match the corresponding load-balancer settings. Microsoft documentation.

\n

Applicability

\n

Identify the guest nodes, virtual subnet, floating address, VIP, and intended probe port. Review the prerequisites for the guest cluster and reserve the actual address before adapting the example.

\n

DSE recommendation

\n

Create a single mapping that shows the same floating address and probe port in the cluster and load-balancer configuration. Have the guest-cluster and SDN owners review it together. Specify which application request will prove that the active node is reachable through the published address.

\n

Verification

\n

Connect through the VIP and record the responding guest node. Trigger an approved ownership move and repeat the request, checking probe state and cluster ownership during the same window. Investigate a probe mismatch or traffic reaching the wrong node before accepting the floating-address design.

\n

Official references

\n

Microsoft Learn: Guest clustering in a virtual network. Source reviewed September 8, 2026.

", "content_text": "Source facts\nNetwork Controller permits a VM to communicate using its assigned IP addresses. Microsoft therefore requires additional configuration for clustering that uses a floating address. Its design exposes that address through a Software Load Balancer VIP and a health probe that directs traffic to the node currently holding it. The cluster address and probe port must match the corresponding load-balancer settings. Microsoft documentation.\nApplicability\nIdentify the guest nodes, virtual subnet, floating address, VIP, and intended probe port. Review the prerequisites for the guest cluster and reserve the actual address before adapting the example.\nDSE recommendation\nCreate a single mapping that shows the same floating address and probe port in the cluster and load-balancer configuration. Have the guest-cluster and SDN owners review it together. Specify which application request will prove that the active node is reachable through the published address.\nVerification\nConnect through the VIP and record the responding guest node. Trigger an approved ownership move and repeat the request, checking probe state and cluster ownership during the same window. Investigate a probe mismatch or traffic reaching the wrong node before accepting the floating-address design.\nOfficial references\nMicrosoft Learn: Guest clustering in a virtual network. Source reviewed September 8, 2026.", "content_markdown": "## Source facts\n\nNetwork Controller permits a VM to communicate using its assigned IP addresses. Microsoft therefore requires additional configuration for clustering that uses a floating address. Its design exposes that address through a Software Load Balancer VIP and a health probe that directs traffic to the node currently holding it. The cluster address and probe port must match the corresponding load-balancer settings. [Microsoft documentation](https://learn.microsoft.com/en-us/windows-server/networking/sdn/manage/guest-clustering).\n\n## Applicability\n\nIdentify the guest nodes, virtual subnet, floating address, VIP, and intended probe port. Review the prerequisites for the guest cluster and reserve the actual address before adapting the example.\n\n## DSE recommendation\n\nCreate a single mapping that shows the same floating address and probe port in the cluster and load-balancer configuration. Have the guest-cluster and SDN owners review it together. Specify which application request will prove that the active node is reachable through the published address.\n\n## Verification\n\nConnect through the VIP and record the responding guest node. Trigger an approved ownership move and repeat the request, checking probe state and cluster ownership during the same window. Investigate a probe mismatch or traffic reaching the wrong node before accepting the floating-address design.\n\n## Official references\n\n[Microsoft Learn: Guest clustering in a virtual network](https://learn.microsoft.com/en-us/windows-server/networking/sdn/manage/guest-clustering). Source reviewed September 8, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260908-125-match-the-guest-cluster-floating-ip-to-its-sdn-vip-and-probe/", "url": "https://update.dsesecurity.com/updates/dse-20260908-125-match-the-guest-cluster-floating-ip-to-its-sdn-vip-and-probe/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-08" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260908-125-match-the-guest-cluster-floating-ip-to-its-sdn-vip-and-probe/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Match the guest-cluster floating IP to its SDN VIP and probe", "item": "https://update.dsesecurity.com/updates/dse-20260908-125-match-the-guest-cluster-floating-ip-to-its-sdn-vip-and-probe/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260908-125-match-the-guest-cluster-floating-ip-to-its-sdn-vip-and-probe/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260908-125-match-the-guest-cluster-floating-ip-to-its-sdn-vip-and-probe/", "url": "https://update.dsesecurity.com/updates/dse-20260908-125-match-the-guest-cluster-floating-ip-to-its-sdn-vip-and-probe/", "headline": "Match the guest-cluster floating IP to its SDN VIP and probe", "description": "How should an SDN load-balancer probe identify the active node of a guest cluster?", "abstract": "How should an SDN load-balancer probe identify the active node of a guest cluster?", "articleBody": "Source facts\nNetwork Controller permits a VM to communicate using its assigned IP addresses. Microsoft therefore requires additional configuration for clustering that uses a floating address. Its design exposes that address through a Software Load Balancer VIP and a health probe that directs traffic to the node currently holding it. The cluster address and probe port must match the corresponding load-balancer settings. Microsoft documentation.\nApplicability\nIdentify the guest nodes, virtual subnet, floating address, VIP, and intended probe port. Review the prerequisites for the guest cluster and reserve the actual address before adapting the example.\nDSE recommendation\nCreate a single mapping that shows the same floating address and probe port in the cluster and load-balancer configuration. Have the guest-cluster and SDN owners review it together. Specify which application request will prove that the active node is reachable through the published address.\nVerification\nConnect through the VIP and record the responding guest node. Trigger an approved ownership move and repeat the request, checking probe state and cluster ownership during the same window. Investigate a probe mismatch or traffic reaching the wrong node before accepting the floating-address design.\nOfficial references\nMicrosoft Learn: Guest clustering in a virtual network. Source reviewed September 8, 2026.", "datePublished": "2026-09-08T18:15:06+00:00", "dateModified": "2026-09-08T18:23:27+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260908-125-match-the-guest-cluster-floating-ip-to-its-sdn-vip-and-probe/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260908-125-match-the-guest-cluster-floating-ip-to-its-sdn-vip-and-probe/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Match the guest-cluster floating IP to its SDN VIP and probe" }, "articleSection": [ "IT", "Networks & Infrastructure" ], "keywords": [ "IT", "Networks & Infrastructure", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" }, { "@type": "Thing", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "wordCount": 198, "timeRequired": "PT1M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Guest clustering in a virtual network", "url": "https://learn.microsoft.com/en-us/windows-server/networking/sdn/manage/guest-clustering" } } ] } }