An architect is working on higher-scale NSX Grouping and security design requirements for Management and VI Workload Domains in VMware Cloud…

In VMware Cloud Foundation (VCF) 5.2, NSX Manager appliances manage networking and security

(e.g., grouping, policies, firewalls) for Management and VI Workload Domains. The appliance size—

Small, Medium, Large, Extra Large—determines its capacity to handle scale, such as the number of

hosts, VMs, and security objects. The phrase “higher scale” implies a larger-than-minimum

deployment. Let’s evaluate:

NSX Manager Appliance Sizes (VCF 5.2 with NSX-T 3.2):

Small: 4 vCPUs, 16 GB RAM, 300 GB disk. Supports up to 16 hosts, basic deployments (e.g., lab

environments).

Medium: 6 vCPUs, 24 GB RAM, 300 GB disk. Supports up to 64 hosts, suitable for small to medium

production environments.

Large: 12 vCPUs, 48 GB RAM, 300 GB disk. Supports up to 512 hosts, 10,000 VMs, and complex

security policies—standard for production VCF.

Extra Large: 24 vCPUs, 64 GB RAM, 300 GB disk. Supports over 512 hosts, massive scale (e.g., service

providers, multi-VCF instances).

VCF Context:

Management Domain: Minimum 4 hosts, often 6-7 for HA, with NSX for overlay networking.

VI Workload Domains: Variable host counts, but “higher scale” suggests multiple domains or

significant workload growth.

Security Design: Grouping and policies (e.g., distributed firewall rules, tags) increase NSX Manager

load, especially at scale.

Evaluation:

Small: Insufficient for production VCF, limited to 16 hosts. Unsuitable for a Management Domain (4-7

hosts) plus VI Workload Domains.

Medium: Adequate for small VCF deployments (up to 64 hosts), but “higher scale” implies more

hosts or complex security, exceeding its capacity.

Large: The default and recommended size for VCF 5.2 production environments. It supports up to 512

hosts, thousands of VMs, and extensive security policies, fitting a Management Domain and multiple

VI Workload Domains with “higher scale” needs.

Extra Large: Overkill unless managing hundreds of hosts or multiple VCF instances, which isn’t

indicated here.

Conclusion:

The Large NSX Manager appliance size (Option B) is appropriate for a higher-scale NSX design in VCF

5.2. It balances capacity and performance for Management and VI Workload Domains with advanced

security requirements, aligning with VMware’s standard recommendation.

Reference:

VMware Cloud Foundation 5.2 Architecture and Deployment Guide (Section: NSX Manager Sizing)

NSX-T 3.2 Installation Guide (integrated in VCF 5.2): Appliance Size Specifications

VMware Cloud Foundation 5.2 Planning and Preparation Guide (Section: Security Design)