A customer is deploying VMware Cloud Foundation (VCF) in an enterprise environment. During a
series of workshops with stakeholders, the following requirements were identified: The network solution
must be capable of complete logical isolation.
The network solution must be capable of supporting independent upgrade cycles for network stacks.
The network solution must be capable of tenant-specific customization of NSX configurations.
The architect has made the following design decisions:
The solution will consist of a single VCF instance.
The solution will include a management domain and two workload domains.
Based on the scenario, which additional design decision meets all of the stated requirements?
Answer
- A. Deploy NSX only in the management domain and use VLAN-backed segments in the workload domains.
- B. Use a global NSX Federation configuration across workload domains.
- C. Use a shared NSX instance across both workload domains.
- D. Deploy a dedicated NSX instance per workload domain. Correct
Explanation
Dedicated NSX instances per workload domain provide the highest level of logical isolation and allowindependent upgrade cycles, fulfilling the requirement of tenant-specific customization. Each workload
domain with its own NSX instance can be managed separately, updated independently, and configured
with its own security policies, BGP/VRF, segments, and gateways.
NSX Federation could achieve some level of centralization but does not support independent upgrade
cycles per domain. A shared NSX instance breaks isolation and would tightly couple upgrade cycles,
violating two of the key stated requirements.
Reference: VMware Cloud Foundation NSX-T Design Guide – NSX Instance Design Options VMware
Cloud Foundation 9.0 – Multi-Tenant Networking Models