Category: Tech Notes
-
NSX 9 Federation and Multi-Site: Global Manager, Stretched Networking and the Latency Budget (NSX Series, Part 23)
NSX Federation gives you one consistent network and security policy across sites from a single Global Manager. Here is how span works, where stretched networking helps versus hurts, and the latency budget that decides whether Federation is even an option for you.
-
NSX 9 Multi-Tenancy: Projects vs VPCs and the Design That Holds Up (NSX Series, Part 22)
NSX 9 gives you two layers of tenancy: Projects for infra teams and VPCs for self-service consumers. Here is how they differ, who owns the Tier-0, the centralized vs distributed Transit Gateway call, and the Federation limit that catches people out.
-
NSX 9 VPC and Multi-Tenancy: Projects, Transit Gateways and Tenant Isolation (NSX Series, Part 22)
NSX 9 makes Projects and VPCs first-class, turning a single NSX deployment into a multi-tenant, cloud-like network. Here is how Projects isolate tenants, how the Transit Gateway changed VPC routing, and when to pick centralized versus distributed external connectivity.
-
NSX 9 Micro-segmentation Design: A Zero Trust Methodology That Actually Ships (NSX Series, Part 21)
Most micro-segmentation projects stall because teams jump straight to per-application rules with no visibility. Here is the phased zero trust methodology I use in NSX 9: assess, lock down shared services, segment environments, then ring-fence applications, with the vDefend DFW 1-2-3-4 journey doing the heavy lifting.
-
NSX 9 Upgrades and Lifecycle: VCF Integrated LCM, Upgrade Coordinator and the Order That Matters (NSX Series, Part 20)
In NSX 9, upgrades fold into the VCF lifecycle and run from SDDC Manager, with Upgrade Coordinator as the manual fallback. Here is the order that matters, how host and Edge upgrades really behave, and the failure modes that catch teams mid-window.
-
NSX 9 Backup and Restore: Config Protection, SFTP Targets and the Passphrase Trap (NSX Series, Part 19)
How NSX 9 backup and restore actually works in VCF 9: the three backup types, SFTP target design, the exact-version restore requirement, and the passphrase that quietly decides whether your backup is worth anything.
-
NSX 9 Monitoring and Operations: Traceflow, Alarms and Operations for Networks (NSX Series, Part 18)
The tools that turn NSX from a black box into something you can actually see: Traceflow, Live Traffic Analysis, IPFIX, alarms and health, and Operations for Networks.
-
NSX 9 VPN: IPSec and L2VPN, Policy-Based vs Route-Based (NSX Series, Part 17)
NSX runs site-to-site IPSec and L2VPN on the Edge. Policy-based vs route-based IPSec, when each fits, and how L2VPN stretches Layer 2 across sites for migration and DR.
-
NSX 9 Advanced Load Balancer (Avi): Architecture and How It Plugs Into NSX (NSX Series, Part 16)
Avi is the strategic load balancer for NSX 9: a controller control plane and elastic service engines. How it is built, how it integrates with NSX, and how a request flows.
-
NSX 9 Distributed IDS/IPS and Malware Prevention: From Allow-Deny to Detect-and-Stop (NSX Series, Part 15)
Distributed IDS/IPS and malware prevention add threat inspection to the NSX security stack. Detect vs prevent mode, signatures, the ATP and NDR picture, and how to roll it out safely.
-
NSX 9 Gateway Firewall and Perimeter Policy: North-South Security at the Edge (NSX Series, Part 14)
The Gateway Firewall secures north-south traffic at the Tier-0 or Tier-1, separate from the Distributed Firewall. How it differs from the DFW, where it runs, and defense in depth.
Architect’s Toolkit
PJ’s Tools
VMware Cloud Foundation
- VCF Documentation
- VCF 9 Planning & Preparation Workbook
- VCF Bill of Materials (BoM)
- VMware Compatibility Guide
- VMware Interoperability Matrix
- VMware Configuration Maximums
- VMware Ports & Protocols
- VMware Hands-on Labs
- RVTools Download
Nutanix
AI & Cloud-Native Platform
- NVIDIA Build (Model Catalog)
- NVIDIA AI Enterprise Reference Architecture
- NVIDIA NIM Performance Benchmarking
- NVIDIA NGC Catalog
- NeMo Microservices Helm Chart
- Helm Charts Repository
- Hugging Face Models
Architecture & Design
About the Author
Dr Pranay Jha
Dr. Pranay Jha is a Cloud and AI Consultant with 18+ years of experience in hybrid cloud, virtualization, and enterprise infrastructure transformation. He specializes in VMware technologies, multi-cloud strategy, and Generative AI solutions. He holds a PhD in Computer Applications with research focused on Cloud and AI, has published multiple research papers, and has been a VMware vExpert since 2016 and a VMUG Community Leader.
You May Have Missed
DrJha