Tag: Networking
-
vSphere Namespace Ingress and Egress Design Options (VCAP-VKS Exam Series, Part 13)
Objective 3.3 is an address design question, not a wizard question. How ingress and egress differ across the three Supervisor networking modes, which pool runs out first on a real estate, and what you can still change once the Supervisor is enabled.
-
VKS Namespace Network Options and Their Implications (VCAP-VKS Exam Series, Part 12)
Objective 3.2 asks you to evaluate the implication for Namespace Network options. Here is what each of the three models commits you to, which fields lock the moment you click Create, and the subnet prefix arithmetic that decides how many VKS nodes a namespace will ever hold.
-
VKS CNI, NSX Networking Objects and TLS Trust for Secure Clusters (VCAP-VKS Exam Series, Part 10)
Objective 2.5, printed a second time, covers CNIs, NSX networking objects and TLS certificates. Here is the Supervisor level CNI switch, the AntreaConfig override, and the double base64 certificate trap that wedges a VKS cluster in Provisioning.
-
Kubernetes Architecture, Networking, Storage, Service Mesh and Helm (VCAP-VKS Exam Series, Part 3)
Objective 1.2 does not test Kubernetes trivia. It tests whether you can look at a VKS cluster and name the vSphere object that created what you are seeing. Four kubectl commands, two real failures, and the inheritance map that makes the rest of the blueprint readable.
-
Production Cutover, Traffic Shift, Validation and Rollback (TKGI to OpenShift Series, Part 23)
Moving live production traffic off TKGI onto OpenShift without a visible outage, using weighted Routes as the only lever on the night. Includes a five step traffic ladder, real preflight commands, and a cutover I reversed at 03:40.
-
Ingress to Routes, Load Balancing and DNS Cutover (TKGI to OpenShift Series, Part 20)
Moving wave1-web traffic off NSX-T and onto OpenShift Routes, with a weighted load balancer cutover, a TTL schedule that survives stale resolvers, and the 504 that only appears after you switch. Part 20 of the TKGI to OpenShift Series.
-
Network Policy and Microsegmentation, NSX-T DFW to OVN-Kubernetes (TKGI to OpenShift Series, Part 16)
Your NSX-T distributed firewall holds far more rules than kubectl will ever show you. Here is the DFW to OVN-Kubernetes mapping, a namespace baseline that does not break DNS, and where AdminNetworkPolicy actually belongs.
-
Cluster Networking, OVN-Kubernetes, Routes and Load Balancing (TKGI to OpenShift Series, Part 13)
On TKGI the NSX Container Plugin handed every LoadBalancer service a virtual server. OpenShift on vSphere does not. This Part wires Routes, ingress shards, MetalLB address pools and EgressIP on the cluster Part 12 installed.
-
Networking Assessment, NSX-T and NCP to OVN-Kubernetes (TKGI to OpenShift Series, Part 8)
NCP gave every TKGI namespace its own NSX-T segment, T1 router and SNAT IP, while OVN-Kubernetes gives you a flat overlay and a node IP. Here is the full capability mapping, and why egress identity is the rebuild that actually costs you.
-
Ingress, Load Balancing and DNS Cutover on VKS (TKGI to VKS Series, Part 20)
The traffic move from TKGI to VKS is a drain, not a DNS flip. This runbook stands up a load balanced ingress on VKS, lowers TTL, shifts traffic in weighted steps, and keeps a clean rollback the whole way.
-
Network Policy on VKS, NSX-T DFW to Antrea (TKGI to VKS Series, Part 16)
NSX-T distributed firewall rules do not migrate to VKS. Rebuild them as tiered Antrea policy with a working default deny, verified against a real stateful app.
-
Supervisor Networking on VCF 9, NSX VPCs and Load Balancer Choices (TKGI to VKS Series, Part 13)
Your vSphere Supervisor load balancer is a one-way door on VCF 9. Here is how Foundation LB, NSX LB and Avi compare across NSX VPC networking when you move a TKGI estate to VKS.
Architect’s Toolkit
PJ’s Tools
- Infra 360 Hub – All Series
- VCF 9 Interactive Walkthroughs
- VCF Design Cheatsheet
- VCF Upgrade Planner
- VCF 9 Series Hub
- VCF Deployment Hub
- AI Stack Hub
- AI Infra Sizing & Cost Calculator
- LLM & RAG Cost Calculator
- DrJhaGPT – Ask Pranay
VMware Cloud Foundation
- VCF Documentation
- VCF 9 Planning & Preparation Workbook
- VCF Bill of Materials (BoM)
- VMware Compatibility Guide
- VMware Interoperability Matrix
- VMware Configuration Maximums
- VMware Ports & Protocols
- VMware Hands-on Labs
- RVTools Download
Nutanix
AI & Cloud-Native Platform
- NVIDIA Build (Model Catalog)
- NVIDIA AI Enterprise Reference Architecture
- NVIDIA NIM Performance Benchmarking
- NVIDIA NGC Catalog
- NeMo Microservices Helm Chart
- Helm Charts Repository
- Hugging Face Models
Architecture & Design
About the Author
Dr Pranay Jha
Dr. Pranay Jha is a Cloud and AI Consultant with 18+ years of experience in hybrid cloud, virtualization, and enterprise infrastructure transformation. He specializes in VMware technologies, multi-cloud strategy, and Generative AI solutions. He holds a PhD in Computer Applications with research focused on Cloud and AI, has published multiple research papers, and has been a VMware vExpert since 2016 and a VMUG Community Leader.
You May Have Missed
DrJha