Tag: NSX Series
-
Troubleshooting NSX 9 DFW and Security Policy: Applied-To, Realized Rules and the Default-Rule Trap (NSX Series, Part 30)
The most common DFW outage is a published rule with the wrong Applied-To. Here is how to see what is really realized on a vNIC, why a rule visible in the UI may not be applied, the default-rule trap, and the symptom-to-fix path. The NSX Series finale.
-
NSX 9 Automation and API: The Policy API, the Hierarchical Tree and Terraform (NSX Series, Part 28)
NSX 9 removed the Manager API, so automation now means the declarative Policy API. Here is why intent beats imperative scripting, how the hierarchical API builds a whole topology in one call, and where Terraform, Ansible and PowerCLI fit on top.
-
Migrating to NSX 9: N-VDS to VDS, the Migration Coordinator and the Removal You Cannot Dodge (NSX Series, Part 27)
NSX 9 removed N-VDS on ESX, so every host still on the N-VDS host switch has to move to VDS before it can run NSX 9. Here is the per-host migration loop, the migrate_to_vds API, the new-VDS-only constraint, and how to do it without dropping production.
-
NSX 9 Performance and Sizing: Edge Throughput, EDP and DFW Scale (NSX Series, Part 26)
NSX performance is decided at design time, not tuned later. Here is how Edge form factor sets your north-south ceiling, why EDP and DPDK matter, how the distributed firewall scales with hosts instead of choking a chokepoint, and the sizing math I actually use.
-
NSX in VCF 9: How SDDC Manager and Fleet Management Own the NSX Lifecycle (NSX Series, Part 25)
In VCF 9, NSX is a managed component, not a standalone product you babysit. SDDC Manager deploys and lifecycles it, VCF Operations and Fleet Management run it across instances, and you deploy greenfield or import brownfield NSX as a Workload Domain. Here is how the ownership actually splits.
-
NSX 9 for Kubernetes: VKS, the Antrea-NSX Adapter and VPC Networking (NSX Series, Part 24)
VKS runs Kubernetes on VCF 9, and NSX is how its pods get networked and secured. Here is how Antrea is the default CNI, what the Antrea-NSX Adapter actually does, how VKS clusters land in NSX VPCs, and when bringing your own CNI makes sense.
-
NSX 9 Federation and Multi-Site: Global Manager, Stretched Networking and the Latency Budget (NSX Series, Part 23)
NSX Federation gives you one consistent network and security policy across sites from a single Global Manager. Here is how span works, where stretched networking helps versus hurts, and the latency budget that decides whether Federation is even an option for you.
-
NSX 9 Multi-Tenancy: Projects vs VPCs and the Design That Holds Up (NSX Series, Part 22)
NSX 9 gives you two layers of tenancy: Projects for infra teams and VPCs for self-service consumers. Here is how they differ, who owns the Tier-0, the centralized vs distributed Transit Gateway call, and the Federation limit that catches people out.
-
NSX 9 VPC and Multi-Tenancy: Projects, Transit Gateways and Tenant Isolation (NSX Series, Part 22)
NSX 9 makes Projects and VPCs first-class, turning a single NSX deployment into a multi-tenant, cloud-like network. Here is how Projects isolate tenants, how the Transit Gateway changed VPC routing, and when to pick centralized versus distributed external connectivity.
-
NSX 9 Micro-segmentation Design: A Zero Trust Methodology That Actually Ships (NSX Series, Part 21)
Most micro-segmentation projects stall because teams jump straight to per-application rules with no visibility. Here is the phased zero trust methodology I use in NSX 9: assess, lock down shared services, segment environments, then ring-fence applications, with the vDefend DFW 1-2-3-4 journey doing the heavy lifting.
-
NSX 9 Upgrades and Lifecycle: VCF Integrated LCM, Upgrade Coordinator and the Order That Matters (NSX Series, Part 20)
In NSX 9, upgrades fold into the VCF lifecycle and run from SDDC Manager, with Upgrade Coordinator as the manual fallback. Here is the order that matters, how host and Edge upgrades really behave, and the failure modes that catch teams mid-window.
Architect’s Toolkit
VMware Cloud Foundation
- VCF Documentation
- VCF 9 Planning & Preparation Workbook
- VCF Bill of Materials (BoM)
- VMware Compatibility Guide
- VMware Interoperability Matrix
- VMware Configuration Maximums
- VMware Ports & Protocols
- VMware Hands-on Labs
- RVTools Download
Nutanix
AI & Cloud-Native Platform
- AI Infra Sizing & Cost Calculator
- NVIDIA Build (Model Catalog)
- NVIDIA AI Enterprise Reference Architecture
- NVIDIA NIM Performance Benchmarking
- NVIDIA NGC Catalog
- NeMo Microservices Helm Chart
- Helm Charts Repository
- Hugging Face Models
Architecture & Design
About the Author

Dr Pranay Jha
Dr. Pranay Jha is a Cloud and AI Consultant with 18+ years of experience in hybrid cloud, virtualization, and enterprise infrastructure transformation. He specializes in VMware technologies, multi-cloud strategy, and Generative AI solutions. He holds a PhD in Computer Applications with research focused on Cloud and AI, has published multiple research papers, and has been a VMware vExpert since 2016 and a VMUG Community Leader.

You May Have Missed

