STRAIGHT OUT OF
THE BOX OUTCOMES
VCF GREENFIELD
VCF INSTALL / IMPORT
SCALE
MANAGEMENT
DOMAIN
VI
WORKLOAD
DOMAIN
ESXi
VI
WORKLOAD
DOMAIN
SCALE
OUT
CAPACITY
VCF
EDGE
VCF
EDGE
DB SUBNET
vSAN
VCF
EDGE
VCF
EDGE
APP SUBNET
DB SUBNET
WEB SUBNET
SCALE
SCALE
VPC | PRIVATE WEBSITE
vSAN Cluster
ESXi
VCFs Instance
NAT for
Private
Subnets
ESXi
Data-in-Transit
Encryption
Object Storage
is a third-party
integrated service
Cloud Native
Applications
S3 COMPATIBLE
OBJECT STORAGE
ESXi
NAT (for
Private
Subnets),
DHCP,
N-S FW
ESXi
Edge Locations
Workload Domain-1
ESXi
VPC | PUBLIC WEBSITE
NSX Project | Web Applications
APP SUBNET
WEB SUBNET
ESXi
vSAN ESA
Container
PVs
vSAN
FILE SERVICE
Linux
Clients
vSAN ESA
Windows
Clients
Data Centers
Data-at-Rest
Encryption
vDS-1 (with EDP)
MANAGEMENT VMs
ESXi MANAGEMENT
vMOTION
vSAN
EDGE UPLINK 1
EDGE UPLINK 2
VPN
NSX HOST TEP
NSX EDGE TEP
T-0
Gateway
Firewall
BGP ASN ####
T-1
NSX Edge Cluster
VCF Operations
for Networks
Virtual
vSAN RDT
App
vSPHERE
iSCSI Network
Physical
Data-at-Rest
Encryption
VMware
Identity Broker
Site 2 Remote Cluster
vCenter
vSAN Cluster
Management
vCenter
SUPPLEMENTAL
STORAGE
VI WORKLOAD
DOMAIN
PRINCIPAL
STORAGE
MANAGEMENT
DOMAIN
PRINCIPAL
STORAGE
VCF Operations
for Logs
Site 1 Remote Cluster
vCenter
VI Workload Domain
vCenter-2
VI Workload Domain
vCenter-1
VCF MIGRATE
NSX
Manager
NSX
Manager
NSX
Manager
vSAN
HCI CLUSTERS
FC
NVMe
/ TCP
ESXi
VMware Cloud Foundation Private Cloud Platform
Successful Outcomes from a
Private Cloud Architecture
Build
the Cloud
Troubleshoot
and Remediate
NFS
ESXi
Management Domain
ESXi
VCF
Installer
VCF
Operations
Fleet
Management
SDDC
Manager
vSAN
FC
VCF
Automation
STORAGE CLUSTERS
NFS
vSAN
FC
HCI CLUSTERS
NFS
NVMe
/ FC
Storage Options
Operations
Plan and
Optimize
Capacity
LONG-TERM,
DREAM-BIG OUTCOMES
Deliver
Infrastructure
as Code (laC)
Automate Delivery
of IaaS via
Self-Service Catalog
vSAN
Why Choose vSAN
vmnic3
uplink4
VDS-2
Advanced
Security
vmnic5
TOR
vmnic4
uplink6
Application
Services
Virtual Private Cloud
North-South Firewall
VPN
Dev-VPC
NAT
Corporate Performance
Management-VPC
SERVICES
Finance
SAAS
ORCHESTRATOR
Data
Services
R&D
R&D ADMIN
GPU/Network/
NIM Operator
Containerized NVIDIA
Microservices
Virtual Machine
Containerized NVIDIA
Microservices
Business
Operations
App Subnet
Private
10.16.0.0/24
Production Admin
vmware.com
Data-at-Rest
Encryption
Secure
Access
Security and Resiliency
ISOLATED RECOVERY ENVIRONMENT
Network
Observability
Web Subnet
Public
192.168.0.0/24
East-West Firewall
Production-VPC
Isolated Virtual Networks with Multitenancy and RBAC
Enterprise Resource
Planning-VPC
East-West Firewall
ESXi
Learn More About VCF Networking
Dev Admin
App Subnet
Private
10.16.0.0/24
Web Subnet
Public
192.168.0.0/24
East-West Firewall
(Advertised)
172.18.0.0/24
Web Subnet
Public
East-West Firewall
(Advertised)
172.16.0.0/24
(Not Advertised)
App Subnet
Private
Web Subnet
Public
App Subnet
Private
SCALE
ENTERPRISE ADMIN
CPM-VPC Admin
10.11.0.0/24
(Not Advertised)
ESXi
FINANCE ADMIN
ERP-VPC Admin
10.10.0.0/24
ESXi
vSAN Cluster
Workload Domain
AI Kubernetes Cluster
VMware Private AI Foundation with NVIDIA
vSphere
Cluster 2
AI Workstation
Load
Balancing
Advanced Services for VCF
CLOUD
FILESYSTEM
ON-PREMISES OR VMWARE HYPERSCALER
Cyber and Disaster Recovery
GPU Enabled Servers
vSphere
Cluster 1
ESXi
Workload Domain-2
VDS-3
uplink5
Physical Network Options
vmnic2
TOR
vmnic1
uplink3
BGP ASN ####
vmnic0
uplink2
ESXi HOST
uplink1
VDS-1
ESXi
Data-at-Rest
Encryption
Cluster 1
Physical
Networking
Infrastructure
Cluster 2
External
Storage
Array
DR and
Ransomware
Recovery
VCF PRODUCTION SITE
vDS-2 (with EDP)
Transit Gateway
ESXi
Private
AI
INBOUND
Deploy and
Manage
Workloads
Fleet
Management
VCF Operations
Fleet Management
• Single Sign-On
• Lifecycle Management
• New workload domains, licenses,
configurations, certificate, passwords,
and other activities for hosts.
STORAGE CLUSTERS
Automation
Operations Management
Optimize cost and performance of compute,
storage, and networking resources.
Security Management
Security Operations Dashboard
provides visibility into platform
hardening, governance,
and compliance.
VCF Automation
• Self-Service Catalog / Self-Service IaaS
• Out-of-the-Box IaaS Services
◦ Core Services (VM, VKS, Network, Volume, VM Image)
◦ Extensible Services (e.g., DSM, Contour, Harbor)
vSAN
More on Automation and Operations
◦ Partner-Delivered Services (e.g. Velero)
• Infrastructure as Code
• Governance and Policies
• Tenant Management
• Content Management
• Orchestration and Extensibility
• Workload Lifecycle Management
• Private AI Automation Services
IP OR FC
NETWORK
SWITCHES
HCI CLUSTERS
Copyright © 2025 Broadcom, Inc. All rights reserved.
OUTBOUND