DE · EN

Call us

build 6ddc7a35 | content blog-content@417154f · 338 posts | profiles 32 · corpus 315 | ● 0 skipped | built 2026-10-21 12:35 UTC format run

$ soultec get solution/vmware/vmware-cloud-foundation/nsx -o yaml$ soultec get solution/vmware/vmware-cloud-foundation/nsx -o json$ soultec get solution/vmware/vmware-cloud-foundation/nsx -o toml$ soultec get solution/vmware/vmware-cloud-foundation/nsx -o xml$ python3 vmware/vmware-cloud-foundation/nsx.pyPS> ./vmware/vmware-cloud-foundation/nsx.ps1$ go run vmware/vmware-cloud-foundation/nsx.go$ node vmware/vmware-cloud-foundation/nsx.js

apiVersion: soultec.ch/v1kind: Solutionmetadata: name: vmware/vmware-cloud-foundation/nsx locale: en labels: vendor: VMware VCF Networking capability/network: 2.16 capability/security: 1.91 capability/virtualization: 1.42 vendor/vmware: 0.98 annotations: source: src/content/solutions/en/vmware/vmware-cloud-foundation/nsx.md route: /en/solutions/vmware/vmware-cloud-foundation/nsx/ schema: /nerd/schema/solutions.json markdown: /en/solutions/vmware/vmware-cloud-foundation/nsx.mdspec: title: VCF Networking tags: [network, security, virtualization] vendors: [vmware] summary: >- Networking and firewalling in software, at the virtual port. Segmentation is set per VM. photoNeed: >- A vSphere or VCF console on a real screen at soulTec: a cluster view, a running task, an inventory tree, so the reader should recognise the UI stub: false draft: false kind: product formerly: NSX editions: [vcf] addon: false sourceNote: >- Broadcom, VMware Cloud Foundation 9.1 and VMware vSphere Foundation 9.1: Feature Comparison & Upgrade Paths, read 2026-08-28 vendorName: VMware VCF Networking status: current practice: >- Draft, not yet reviewed. The distributed firewall can be turned on in an afternoon, and writing the rule set takes months. We start in monitor mode and only enforce once the flows are documented. practiceReview: true sections: - heading:

What it is

body: | NSX virtualizes the network: switching, routing and firewalling run as software in the hypervisor rather than on dedicated hardware. The firewall sits at each VM's virtual port. Traffic between two VMs on the same host is filtered without ever leaving the host. - heading:

What it is for

body: | Segmentation. The classic approach separates with VLANs and physical firewalls, and that works while the number of zones stays manageable. With a distributed firewall, which zone a VM belongs to becomes a property of the VM itself. The second use case is automation: networks that come up with an application and disappear with it. - heading:

What to watch

body: | NSX is part of VMware Cloud Foundation, and it is the component that holds migrations up. The reason is that nobody fully knows a rule set that has grown over time. Segmentation needs an honest answer to which systems talk to each other today.status: corpus: 315 services: - {ref: services/network, score: 0.82} - {ref: services/managed-network, score: 0.50} - {ref: services/cloud, score: 0.49} - {ref: services/security, score: 0.42} posts: - {ref: posts/how-to-renew-the-sts-signing-root-certificate-in-vcenter, score: 0.72} - {ref: posts/how-to-broadcom-download-token, score: 0.72} - {ref: posts/how-to-broadcom-support-portal-quick-links, score: 0.72} - {ref: posts/distributed-network-security-services, score: 0.82} - {ref: posts/how-to-install-vcenter-without-dns, score: 0.76} - {ref: posts/nsx-free-nsx-ebooks-to-download, score: 0.82} experts: - {ref: experts/marco-betschart, score: 0.63} - {ref: experts/daniel-stadelmann, score: 0.51} - {ref: experts/marco-mattei, score: 0.50} neighbours: - {ref: solutions/vmware/vmware-cloud-foundation, relation: parent} - {ref: solutions/vmware/vmware-cloud-foundation/addon/advanced-security, score: 0.82} - {ref: solutions/vmware/vmware-secure-access-service-edge, score: 0.82} - {ref: solutions/vmware/vmware-cloud-foundation/addon/avi-load-balancing, score: 0.76} search: /en/search.json

{ "apiVersion": "soultec.ch/v1", "kind": "Solution", "metadata": { "name": "vmware/vmware-cloud-foundation/nsx", "locale": "en", "labels": { "vendor": "VMware VCF Networking", "capability/network": 2.16, "capability/security": 1.91, "capability/virtualization": 1.42, "vendor/vmware": 0.98 }, "annotations": { "source": "src/content/solutions/en/vmware/vmware-cloud-foundation/nsx.md", "route": "/en/solutions/vmware/vmware-cloud-foundation/nsx/", "schema": "/nerd/schema/solutions.json", "markdown": "/en/solutions/vmware/vmware-cloud-foundation/nsx.md" } }, "spec": { "title": "VCF Networking", "tags": [ "network", "security", "virtualization" ], "vendors": [ "vmware" ], "summary": "Networking and firewalling in software, at the virtual port. Segmentation is set per VM.", "photoNeed": "A vSphere or VCF console on a real screen at soulTec: a cluster view, a running task, an inventory tree, so the reader should recognise the UI", "stub": false, "draft": false, "kind": "product", "formerly": "NSX", "editions": [ "vcf" ], "addon": false, "sourceNote": "Broadcom, VMware Cloud Foundation 9.1 and VMware vSphere Foundation 9.1: Feature Comparison & Upgrade Paths, read 2026-08-28", "vendorName": "VMware VCF Networking", "status": "current", "practice": "Draft, not yet reviewed. The distributed firewall can be turned on in an afternoon, and writing the rule set takes months. We start in monitor mode and only enforce once the flows are documented.\n", "practiceReview": true, "sections": [ { "heading": "

What it is

", "body": "NSX virtualizes the network: switching, routing and firewalling run as software in the\nhypervisor rather than on dedicated hardware. The firewall sits at each VM's virtual port.\n\nTraffic between two VMs on the same host is filtered without ever leaving the host." }, { "heading": "

What it is for

", "body": "Segmentation. The classic approach separates with VLANs and physical firewalls, and that\nworks while the number of zones stays manageable. With a distributed firewall, which zone\na VM belongs to becomes a property of the VM itself.\n\nThe second use case is automation: networks that come up with an application and\ndisappear with it." }, { "heading": "

What to watch

", "body": "NSX is part of VMware Cloud Foundation, and it is the component that holds migrations up.\nThe reason is that nobody fully knows a rule set that has grown over time. Segmentation\nneeds an honest answer to which systems talk to each other today." } ] }, "status": { "corpus": 315, "services": [ { "ref": "services/network", "score": "0.82" }, { "ref": "services/managed-network", "score": "0.50" }, { "ref": "services/cloud", "score": "0.49" }, { "ref": "services/security", "score": "0.42" } ], "posts": [ { "ref": "posts/how-to-renew-the-sts-signing-root-certificate-in-vcenter", "score": "0.72" }, { "ref": "posts/how-to-broadcom-download-token", "score": "0.72" }, { "ref": "posts/how-to-broadcom-support-portal-quick-links", "score": "0.72" }, { "ref": "posts/distributed-network-security-services", "score": "0.82" }, { "ref": "posts/how-to-install-vcenter-without-dns", "score": "0.76" }, { "ref": "posts/nsx-free-nsx-ebooks-to-download", "score": "0.82" } ], "experts": [ { "ref": "experts/marco-betschart", "score": "0.63" }, { "ref": "experts/daniel-stadelmann", "score": "0.51" }, { "ref": "experts/marco-mattei", "score": "0.50" } ], "neighbours": [ { "ref": "solutions/vmware/vmware-cloud-foundation", "relation": "parent" }, { "ref": "solutions/vmware/vmware-cloud-foundation/addon/advanced-security", "score": "0.82" }, { "ref": "solutions/vmware/vmware-secure-access-service-edge", "score": "0.82" }, { "ref": "solutions/vmware/vmware-cloud-foundation/addon/avi-load-balancing", "score": "0.76" } ], "search": "/en/search.json" }}

apiVersion = "soultec.ch/v1"kind = "Solution"[metadata]name = "vmware/vmware-cloud-foundation/nsx"locale = "en"[metadata.labels]vendor = "VMware VCF Networking""capability/network" = 2.16"capability/security" = 1.91"capability/virtualization" = 1.42"vendor/vmware" = 0.98[metadata.annotations]source = "src/content/solutions/en/vmware/vmware-cloud-foundation/nsx.md"route = "/en/solutions/vmware/vmware-cloud-foundation/nsx/"schema = "/nerd/schema/solutions.json"markdown = "/en/solutions/vmware/vmware-cloud-foundation/nsx.md"[spec]title = "VCF Networking"tags = ["network", "security", "virtualization"]vendors = ["vmware"]summary = "Networking and firewalling in software, at the virtual port. Segmentation is set per VM."photoNeed = "A vSphere or VCF console on a real screen at soulTec: a cluster view, a running task, an inventory tree, so the reader should recognise the UI"stub = falsedraft = falsekind = "product"formerly = "NSX"editions = ["vcf"]addon = falsesourceNote = "Broadcom, VMware Cloud Foundation 9.1 and VMware vSphere Foundation 9.1: Feature Comparison & Upgrade Paths, read 2026-08-28"vendorName = "VMware VCF Networking"status = "current"practice = '''Draft, not yet reviewed. The distributed firewall can be turned on in an afternoon, and writing the rule set takes months. We start in monitor mode and only enforce once the flows are documented.'''practiceReview = true[[spec.sections]]heading = "

What it is

"body = '''NSX virtualizes the network: switching, routing and firewalling run as software in thehypervisor rather than on dedicated hardware. The firewall sits at each VM's virtual port.Traffic between two VMs on the same host is filtered without ever leaving the host.'''[[spec.sections]]heading = "

What it is for

"body = '''Segmentation. The classic approach separates with VLANs and physical firewalls, and thatworks while the number of zones stays manageable. With a distributed firewall, which zonea VM belongs to becomes a property of the VM itself.The second use case is automation: networks that come up with an application anddisappear with it.'''[[spec.sections]]heading = "

What to watch

"body = '''NSX is part of VMware Cloud Foundation, and it is the component that holds migrations up.The reason is that nobody fully knows a rule set that has grown over time. Segmentationneeds an honest answer to which systems talk to each other today.'''[status]corpus = 315search = "/en/search.json"[[status.services]]ref = "services/network"score = "0.82"[[status.services]]ref = "services/managed-network"score = "0.50"[[status.services]]ref = "services/cloud"score = "0.49"[[status.services]]ref = "services/security"score = "0.42"[[status.posts]]ref = "posts/how-to-renew-the-sts-signing-root-certificate-in-vcenter"score = "0.72"[[status.posts]]ref = "posts/how-to-broadcom-download-token"score = "0.72"[[status.posts]]ref = "posts/how-to-broadcom-support-portal-quick-links"score = "0.72"[[status.posts]]ref = "posts/distributed-network-security-services"score = "0.82"[[status.posts]]ref = "posts/how-to-install-vcenter-without-dns"score = "0.76"[[status.posts]]ref = "posts/nsx-free-nsx-ebooks-to-download"score = "0.82"[[status.experts]]ref = "experts/marco-betschart"score = "0.63"[[status.experts]]ref = "experts/daniel-stadelmann"score = "0.51"[[status.experts]]ref = "experts/marco-mattei"score = "0.50"[[status.neighbours]]ref = "solutions/vmware/vmware-cloud-foundation"relation = "parent"[[status.neighbours]]ref = "solutions/vmware/vmware-cloud-foundation/addon/advanced-security"score = "0.82"[[status.neighbours]]ref = "solutions/vmware/vmware-secure-access-service-edge"score = "0.82"[[status.neighbours]]ref = "solutions/vmware/vmware-cloud-foundation/addon/avi-load-balancing"score = "0.76"

<?xml version="1.0" encoding="UTF-8"?><manifest kind="Solution"> <apiVersion>soultec.ch/v1</apiVersion> <metadata> <name>vmware/vmware-cloud-foundation/nsx</name> <locale>en</locale> <labels> <vendor>VMware VCF Networking</vendor> <entry key="capability/network">2.16</entry> <entry key="capability/security">1.91</entry> <entry key="capability/virtualization">1.42</entry> <entry key="vendor/vmware">0.98</entry> </labels> <annotations> <source>src/content/solutions/en/vmware/vmware-cloud-foundation/nsx.md</source> <route>/en/solutions/vmware/vmware-cloud-foundation/nsx/</route> <schema>/nerd/schema/solutions.json</schema> <markdown>/en/solutions/vmware/vmware-cloud-foundation/nsx.md</markdown> </annotations> </metadata> <spec> <title>VCF Networking</title> <tags> <item>network</item> <item>security</item> <item>virtualization</item> </tags> <vendors> <item>vmware</item> </vendors> <summary>Networking and firewalling in software, at the virtual port. Segmentation is set per VM.</summary> <photoNeed>A vSphere or VCF console on a real screen at soulTec: a cluster view, a running task, an inventory tree, so the reader should recognise the UI</photoNeed> <stub>false</stub> <draft>false</draft> <kind>product</kind> <formerly>NSX</formerly> <editions> <item>vcf</item> </editions> <addon>false</addon> <sourceNote>Broadcom, VMware Cloud Foundation 9.1 and VMware vSphere Foundation 9.1: Feature Comparison & Upgrade Paths, read 2026-08-28</sourceNote> <vendorName>VMware VCF Networking</vendorName> <status>current</status> <practice>Draft, not yet reviewed. The distributed firewall can be turned on in an afternoon, and writing the rule set takes months. We start in monitor mode and only enforce once the flows are documented. </practice> <practiceReview>true</practiceReview> <sections> <section> <heading>

What it is

</heading> <body>NSX virtualizes the network: switching, routing and firewalling run as software in thehypervisor rather than on dedicated hardware. The firewall sits at each VM's virtual port.Traffic between two VMs on the same host is filtered without ever leaving the host. </body> </section> <section> <heading>

What it is for

</heading> <body>Segmentation. The classic approach separates with VLANs and physical firewalls, and thatworks while the number of zones stays manageable. With a distributed firewall, which zonea VM belongs to becomes a property of the VM itself.The second use case is automation: networks that come up with an application anddisappear with it. </body> </section> <section> <heading>

What to watch

</heading> <body>NSX is part of VMware Cloud Foundation, and it is the component that holds migrations up.The reason is that nobody fully knows a rule set that has grown over time. Segmentationneeds an honest answer to which systems talk to each other today. </body> </section> </sections> </spec> <status> <corpus>315</corpus> <services> <item> <ref>services/network</ref> <score>0.82</score> </item> <item> <ref>services/managed-network</ref> <score>0.50</score> </item> <item> <ref>services/cloud</ref> <score>0.49</score> </item> <item> <ref>services/security</ref> <score>0.42</score> </item> </services> <posts> <item> <ref>posts/how-to-renew-the-sts-signing-root-certificate-in-vcenter</ref> <score>0.72</score> </item> <item> <ref>posts/how-to-broadcom-download-token</ref> <score>0.72</score> </item> <item> <ref>posts/how-to-broadcom-support-portal-quick-links</ref> <score>0.72</score> </item> <item> <ref>posts/distributed-network-security-services</ref> <score>0.82</score> </item> <item> <ref>posts/how-to-install-vcenter-without-dns</ref> <score>0.76</score> </item> <item> <ref>posts/nsx-free-nsx-ebooks-to-download</ref> <score>0.82</score> </item> </posts> <experts> <item> <ref>experts/marco-betschart</ref> <score>0.63</score> </item> <item> <ref>experts/daniel-stadelmann</ref> <score>0.51</score> </item> <item> <ref>experts/marco-mattei</ref> <score>0.50</score> </item> </experts> <neighbours> <item> <ref>solutions/vmware/vmware-cloud-foundation</ref> <relation>parent</relation> </item> <item> <ref>solutions/vmware/vmware-cloud-foundation/addon/advanced-security</ref> <score>0.82</score> </item> <item> <ref>solutions/vmware/vmware-secure-access-service-edge</ref> <score>0.82</score> </item> <item> <ref>solutions/vmware/vmware-cloud-foundation/addon/avi-load-balancing</ref> <score>0.76</score> </item> </neighbours> <search>/en/search.json</search> </status></manifest>

# Code generated by the soultec.ch build. DO NOT EDIT.import jsonPAGE = { "apiVersion": "soultec.ch/v1", "kind": "Solution", "metadata": { "name": "vmware/vmware-cloud-foundation/nsx", "locale": "en", "labels": { "vendor": "VMware VCF Networking", "capability/network": 2.16, "capability/security": 1.91, "capability/virtualization": 1.42, "vendor/vmware": 0.98, }, "annotations": { "source": "src/content/solutions/en/vmware/vmware-cloud-foundation/nsx.md", "route": "/en/solutions/vmware/vmware-cloud-foundation/nsx/", "schema": "/nerd/schema/solutions.json", "markdown": "/en/solutions/vmware/vmware-cloud-foundation/nsx.md", }, }, "spec": { "title": "VCF Networking", "tags": ["network", "security", "virtualization"], "vendors": ["vmware"], "summary": "Networking and firewalling in software, at the virtual port. Segmentation is set per VM.", "photoNeed": "A vSphere or VCF console on a real screen at soulTec: a cluster view, a running task, an inventory tree, so the reader should recognise the UI", "stub": False, "draft": False, "kind": "product", "formerly": "NSX", "editions": ["vcf"], "addon": False, "sourceNote": "Broadcom, VMware Cloud Foundation 9.1 and VMware vSphere Foundation 9.1: Feature Comparison & Upgrade Paths, read 2026-08-28", "vendorName": "VMware VCF Networking", "status": "current", "practice": ( "Draft, not yet reviewed. The distributed firewall can be turned on in an afternoon, and writing the rule set takes months. We start in monitor mode and only enforce once the flows are documented.\n" ), "practiceReview": True, "sections": [ { "heading": "

What it is

", "body": ( "NSX virtualizes the network: switching, routing and firewalling run as software in the\n" "hypervisor rather than on dedicated hardware. The firewall sits at each VM's virtual port.\n" "\n" "Traffic between two VMs on the same host is filtered without ever leaving the host." ), }, { "heading": "

What it is for

", "body": ( "Segmentation. The classic approach separates with VLANs and physical firewalls, and that\n" "works while the number of zones stays manageable. With a distributed firewall, which zone\n" "a VM belongs to becomes a property of the VM itself.\n" "\n" "The second use case is automation: networks that come up with an application and\n" "disappear with it." ), }, { "heading": "

What to watch

", "body": ( "NSX is part of VMware Cloud Foundation, and it is the component that holds migrations up.\n" "The reason is that nobody fully knows a rule set that has grown over time. Segmentation\n" "needs an honest answer to which systems talk to each other today." ), }, ], }, "status": { "corpus": 315, "services": [ { "ref": "services/network", "score": "0.82", }, { "ref": "services/managed-network", "score": "0.50", }, { "ref": "services/cloud", "score": "0.49", }, { "ref": "services/security", "score": "0.42", }, ], "posts": [ { "ref": "posts/how-to-renew-the-sts-signing-root-certificate-in-vcenter", "score": "0.72", }, { "ref": "posts/how-to-broadcom-download-token", "score": "0.72", }, { "ref": "posts/how-to-broadcom-support-portal-quick-links", "score": "0.72", }, { "ref": "posts/distributed-network-security-services", "score": "0.82", }, { "ref": "posts/how-to-install-vcenter-without-dns", "score": "0.76", }, { "ref": "posts/nsx-free-nsx-ebooks-to-download", "score": "0.82", }, ], "experts": [ { "ref": "experts/marco-betschart", "score": "0.63", }, { "ref": "experts/daniel-stadelmann", "score": "0.51", }, { "ref": "experts/marco-mattei", "score": "0.50", }, ], "neighbours": [ { "ref": "solutions/vmware/vmware-cloud-foundation", "relation": "parent", }, { "ref": "solutions/vmware/vmware-cloud-foundation/addon/advanced-security", "score": "0.82", }, { "ref": "solutions/vmware/vmware-secure-access-service-edge", "score": "0.82", }, { "ref": "solutions/vmware/vmware-cloud-foundation/addon/avi-load-balancing", "score": "0.76", }, ], "search": "/en/search.json", },}if __name__ == "__main__": print(json.dumps(PAGE, indent=2, ensure_ascii=False))

# Code generated by the soultec.ch build. DO NOT EDIT.$Page = [ordered]@{ apiVersion = 'soultec.ch/v1' kind = 'Solution' metadata = [ordered]@{ name = 'vmware/vmware-cloud-foundation/nsx' locale = 'en' labels = [ordered]@{ vendor = 'VMware VCF Networking' 'capability/network' = 2.16 'capability/security' = 1.91 'capability/virtualization' = 1.42 'vendor/vmware' = 0.98 } annotations = [ordered]@{ source = 'src/content/solutions/en/vmware/vmware-cloud-foundation/nsx.md' route = '/en/solutions/vmware/vmware-cloud-foundation/nsx/' schema = '/nerd/schema/solutions.json' markdown = '/en/solutions/vmware/vmware-cloud-foundation/nsx.md' } } spec = [ordered]@{ title = 'VCF Networking' tags = @('network', 'security', 'virtualization') vendors = @('vmware') summary = 'Networking and firewalling in software, at the virtual port. Segmentation is set per VM.' photoNeed = 'A vSphere or VCF console on a real screen at soulTec: a cluster view, a running task, an inventory tree, so the reader should recognise the UI' stub = $false draft = $false kind = 'product' formerly = 'NSX' editions = @('vcf') addon = $false sourceNote = 'Broadcom, VMware Cloud Foundation 9.1 and VMware vSphere Foundation 9.1: Feature Comparison & Upgrade Paths, read 2026-08-28' vendorName = 'VMware VCF Networking' status = 'current' practice = @'Draft, not yet reviewed. The distributed firewall can be turned on in an afternoon, and writing the rule set takes months. We start in monitor mode and only enforce once the flows are documented.'@ practiceReview = $true sections = @( [ordered]@{ heading = '

What it is

' body = @'NSX virtualizes the network: switching, routing and firewalling run as software in thehypervisor rather than on dedicated hardware. The firewall sits at each VM's virtual port.Traffic between two VMs on the same host is filtered without ever leaving the host.'@ } [ordered]@{ heading = '

What it is for

' body = @'Segmentation. The classic approach separates with VLANs and physical firewalls, and thatworks while the number of zones stays manageable. With a distributed firewall, which zonea VM belongs to becomes a property of the VM itself.The second use case is automation: networks that come up with an application anddisappear with it.'@ } [ordered]@{ heading = '

What to watch

' body = @'NSX is part of VMware Cloud Foundation, and it is the component that holds migrations up.The reason is that nobody fully knows a rule set that has grown over time. Segmentationneeds an honest answer to which systems talk to each other today.'@ } ) } status = [ordered]@{ corpus = 315 services = @( [ordered]@{ ref = 'services/network' score = '0.82' } [ordered]@{ ref = 'services/managed-network' score = '0.50' } [ordered]@{ ref = 'services/cloud' score = '0.49' } [ordered]@{ ref = 'services/security' score = '0.42' } ) posts = @( [ordered]@{ ref = 'posts/how-to-renew-the-sts-signing-root-certificate-in-vcenter' score = '0.72' } [ordered]@{ ref = 'posts/how-to-broadcom-download-token' score = '0.72' } [ordered]@{ ref = 'posts/how-to-broadcom-support-portal-quick-links' score = '0.72' } [ordered]@{ ref = 'posts/distributed-network-security-services' score = '0.82' } [ordered]@{ ref = 'posts/how-to-install-vcenter-without-dns' score = '0.76' } [ordered]@{ ref = 'posts/nsx-free-nsx-ebooks-to-download' score = '0.82' } ) experts = @( [ordered]@{ ref = 'experts/marco-betschart' score = '0.63' } [ordered]@{ ref = 'experts/daniel-stadelmann' score = '0.51' } [ordered]@{ ref = 'experts/marco-mattei' score = '0.50' } ) neighbours = @( [ordered]@{ ref = 'solutions/vmware/vmware-cloud-foundation' relation = 'parent' } [ordered]@{ ref = 'solutions/vmware/vmware-cloud-foundation/addon/advanced-security' score = '0.82' } [ordered]@{ ref = 'solutions/vmware/vmware-secure-access-service-edge' score = '0.82' } [ordered]@{ ref = 'solutions/vmware/vmware-cloud-foundation/addon/avi-load-balancing' score = '0.76' } ) search = '/en/search.json' }}$Page | ConvertTo-Json -Depth 32

// Code generated by the soultec.ch build. DO NOT EDIT.package mainimport ( "encoding/json" "os")var page = map[string]any{ "apiVersion": "soultec.ch/v1", "kind": "Solution", "metadata": map[string]any{ "name": "vmware/vmware-cloud-foundation/nsx", "locale": "en", "labels": map[string]any{ "vendor": "VMware VCF Networking", "capability/network": 2.16, "capability/security": 1.91, "capability/virtualization": 1.42, "vendor/vmware": 0.98, }, "annotations": map[string]any{ "source": "src/content/solutions/en/vmware/vmware-cloud-foundation/nsx.md", "route": "/en/solutions/vmware/vmware-cloud-foundation/nsx/", "schema": "/nerd/schema/solutions.json", "markdown": "/en/solutions/vmware/vmware-cloud-foundation/nsx.md", }, }, "spec": map[string]any{ "title": "VCF Networking", "tags": []any{"network", "security", "virtualization"}, "vendors": []any{"vmware"}, "summary": "Networking and firewalling in software, at the virtual port. Segmentation is set per VM.", "photoNeed": "A vSphere or VCF console on a real screen at soulTec: a cluster view, a running task, an inventory tree, so the reader should recognise the UI", "stub": false, "draft": false, "kind": "product", "formerly": "NSX", "editions": []any{"vcf"}, "addon": false, "sourceNote": "Broadcom, VMware Cloud Foundation 9.1 and VMware vSphere Foundation 9.1: Feature Comparison & Upgrade Paths, read 2026-08-28", "vendorName": "VMware VCF Networking", "status": "current", "practice": "Draft, not yet reviewed. The distributed firewall can be turned on in an afternoon, and writing the rule set takes months. We start in monitor mode and only enforce once the flows are documented.\n", "practiceReview": true, "sections": []any{ map[string]any{ "heading": "

What it is

", "body": "NSX virtualizes the network: switching, routing and firewalling run as software in the\n" + "hypervisor rather than on dedicated hardware. The firewall sits at each VM's virtual port.\n" + "\n" + "Traffic between two VMs on the same host is filtered without ever leaving the host.", }, map[string]any{ "heading": "

What it is for

", "body": "Segmentation. The classic approach separates with VLANs and physical firewalls, and that\n" + "works while the number of zones stays manageable. With a distributed firewall, which zone\n" + "a VM belongs to becomes a property of the VM itself.\n" + "\n" + "The second use case is automation: networks that come up with an application and\n" + "disappear with it.", }, map[string]any{ "heading": "

What to watch

", "body": "NSX is part of VMware Cloud Foundation, and it is the component that holds migrations up.\n" + "The reason is that nobody fully knows a rule set that has grown over time. Segmentation\n" + "needs an honest answer to which systems talk to each other today.", }, }, }, "status": map[string]any{ "corpus": 315, "services": []any{ map[string]any{ "ref": "services/network", "score": "0.82", }, map[string]any{ "ref": "services/managed-network", "score": "0.50", }, map[string]any{ "ref": "services/cloud", "score": "0.49", }, map[string]any{ "ref": "services/security", "score": "0.42", }, }, "posts": []any{ map[string]any{ "ref": "posts/how-to-renew-the-sts-signing-root-certificate-in-vcenter", "score": "0.72", }, map[string]any{ "ref": "posts/how-to-broadcom-download-token", "score": "0.72", }, map[string]any{ "ref": "posts/how-to-broadcom-support-portal-quick-links", "score": "0.72", }, map[string]any{ "ref": "posts/distributed-network-security-services", "score": "0.82", }, map[string]any{ "ref": "posts/how-to-install-vcenter-without-dns", "score": "0.76", }, map[string]any{ "ref": "posts/nsx-free-nsx-ebooks-to-download", "score": "0.82", }, }, "experts": []any{ map[string]any{ "ref": "experts/marco-betschart", "score": "0.63", }, map[string]any{ "ref": "experts/daniel-stadelmann", "score": "0.51", }, map[string]any{ "ref": "experts/marco-mattei", "score": "0.50", }, }, "neighbours": []any{ map[string]any{ "ref": "solutions/vmware/vmware-cloud-foundation", "relation": "parent", }, map[string]any{ "ref": "solutions/vmware/vmware-cloud-foundation/addon/advanced-security", "score": "0.82", }, map[string]any{ "ref": "solutions/vmware/vmware-secure-access-service-edge", "score": "0.82", }, map[string]any{ "ref": "solutions/vmware/vmware-cloud-foundation/addon/avi-load-balancing", "score": "0.76", }, }, "search": "/en/search.json", },}func main() { enc := json.NewEncoder(os.Stdout) enc.SetEscapeHTML(false) enc.SetIndent("", " ") if err := enc.Encode(page); err != nil { os.Exit(1) }}

// Code generated by the soultec.ch build. DO NOT EDIT.const page = { apiVersion: "soultec.ch/v1", kind: "Solution", metadata: { name: "vmware/vmware-cloud-foundation/nsx", locale: "en", labels: { vendor: "VMware VCF Networking", "capability/network": 2.16, "capability/security": 1.91, "capability/virtualization": 1.42, "vendor/vmware": 0.98, }, annotations: { source: "src/content/solutions/en/vmware/vmware-cloud-foundation/nsx.md", route: "/en/solutions/vmware/vmware-cloud-foundation/nsx/", schema: "/nerd/schema/solutions.json", markdown: "/en/solutions/vmware/vmware-cloud-foundation/nsx.md", }, }, spec: { title: "VCF Networking", tags: ["network", "security", "virtualization"], vendors: ["vmware"], summary: "Networking and firewalling in software, at the virtual port. Segmentation is set per VM.", photoNeed: "A vSphere or VCF console on a real screen at soulTec: a cluster view, a running task, an inventory tree, so the reader should recognise the UI", stub: false, draft: false, kind: "product", formerly: "NSX", editions: ["vcf"], addon: false, sourceNote: "Broadcom, VMware Cloud Foundation 9.1 and VMware vSphere Foundation 9.1: Feature Comparison & Upgrade Paths, read 2026-08-28", vendorName: "VMware VCF Networking", status: "current", practice: "Draft, not yet reviewed. The distributed firewall can be turned on in an afternoon, and writing the rule set takes months. We start in monitor mode and only enforce once the flows are documented.\n", practiceReview: true, sections: [ { heading: "

What it is

", body: "NSX virtualizes the network: switching, routing and firewalling run as software in the\n" + "hypervisor rather than on dedicated hardware. The firewall sits at each VM's virtual port.\n" + "\n" + "Traffic between two VMs on the same host is filtered without ever leaving the host.", }, { heading: "

What it is for

", body: "Segmentation. The classic approach separates with VLANs and physical firewalls, and that\n" + "works while the number of zones stays manageable. With a distributed firewall, which zone\n" + "a VM belongs to becomes a property of the VM itself.\n" + "\n" + "The second use case is automation: networks that come up with an application and\n" + "disappear with it.", }, { heading: "

What to watch

", body: "NSX is part of VMware Cloud Foundation, and it is the component that holds migrations up.\n" + "The reason is that nobody fully knows a rule set that has grown over time. Segmentation\n" + "needs an honest answer to which systems talk to each other today.", }, ], }, status: { corpus: 315, services: [ { ref: "services/network", score: "0.82", }, { ref: "services/managed-network", score: "0.50", }, { ref: "services/cloud", score: "0.49", }, { ref: "services/security", score: "0.42", }, ], posts: [ { ref: "posts/how-to-renew-the-sts-signing-root-certificate-in-vcenter", score: "0.72", }, { ref: "posts/how-to-broadcom-download-token", score: "0.72", }, { ref: "posts/how-to-broadcom-support-portal-quick-links", score: "0.72", }, { ref: "posts/distributed-network-security-services", score: "0.82", }, { ref: "posts/how-to-install-vcenter-without-dns", score: "0.76", }, { ref: "posts/nsx-free-nsx-ebooks-to-download", score: "0.82", }, ], experts: [ { ref: "experts/marco-betschart", score: "0.63", }, { ref: "experts/daniel-stadelmann", score: "0.51", }, { ref: "experts/marco-mattei", score: "0.50", }, ], neighbours: [ { ref: "solutions/vmware/vmware-cloud-foundation", relation: "parent", }, { ref: "solutions/vmware/vmware-cloud-foundation/addon/advanced-security", score: "0.82", }, { ref: "solutions/vmware/vmware-secure-access-service-edge", score: "0.82", }, { ref: "solutions/vmware/vmware-cloud-foundation/addon/avi-load-balancing", score: "0.76", }, ], search: "/en/search.json", },};console.log(JSON.stringify(page, null, 2));

# 85 lines · YAML · validated at build# 141 lines · JSON · validated at build# 140 lines · TOML · validated at build# 160 lines · XML · validated at build# 157 lines · Python · read back at build, equals the JSON record# 155 lines · PowerShell · read back at build, equals the JSON record# 161 lines · Go · read back at build, equals the JSON record# 146 lines · JavaScript · read back at build, equals the JSON record · served at /en/solutions/vmware/vmware-cloud-foundation/nsx.md

Solution · VMware

VCF Networking

formerly NSX

VCF

The vendor calls it: VMware VCF Networking

Networking and firewalling in software, at the virtual port. Segmentation is set per VM.

VMware Pinnacle Partner

Topics Network 2.16 Security 1.91 Virtualization 1.42

Vendors VMware 0.98

04Services

06Posts

03Capabilities

315Corpus

photograph wantedA vSphere or VCF console on a real screen at soulTec: a cluster view, a running task, an inventory tree, so the reader should recognise the UI

What it is

NSX virtualizes the network: switching, routing and firewalling run as software in the hypervisor rather than on dedicated hardware. The firewall sits at each VM’s virtual port.

Traffic between two VMs on the same host is filtered without ever leaving the host.

What it is for

Segmentation. The classic approach separates with VLANs and physical firewalls, and that works while the number of zones stays manageable. With a distributed firewall, which zone a VM belongs to becomes a property of the VM itself.

The second use case is automation: networks that come up with an application and disappear with it.

What to watch

NSX is part of VMware Cloud Foundation, and it is the component that holds migrations up. The reason is that nobody fully knows a rule set that has grown over time. Segmentation needs an honest answer to which systems talk to each other today.

What we do with it

Draft, unreviewed

Draft, not yet reviewed. The distributed firewall can be turned on in an afternoon, and writing the rule set takes months. We start in monitor mode and only enforce once the flows are documented.

This paragraph is a draft and nobody at soulTec has confirmed it yet. Everything above it describes the product and is checkable against the vendor.

Posts about it

Renew the STS Signing Root Certificate in vCenter

23 May 2025

I recently had a call from a customer that received multiple alerts about their ESXi Hosts certificate was about to expire.

Virtualization 1.42 Security 1.91

Broadcom Download Token

14 Apr 2025

From now on your vCenter or SDDC Manager needs a unique token. Without it, from the end of April 2025, no patches for VMware software will download any more.

Virtualization 1.42 Security 1.91

Broadcom Support Portal – Quick Links

19 Jun 2024

A collection of links into the Broadcom Support Portal, so you get to the right product download or the right portal quickly.

Virtualization 1.42 Security 1.91

Distributed Network & Security Services

7 May 2024

Virtualised networks have been running on hypervisor platforms in data centres for more than 20 years. What has changed is what they now have to cover: automation and security together.

Network 2.16 Security 1.91

Install vCenter without DNS

19 Jun 2023

A lot of people believe you cannot install vCenter without a DNS server in the environment. Not quite. It is not ideal, but it works.

Virtualization 1.42 Network 2.16

9 Free NSX eBooks to download

6 Aug 2018

Last year I was fortunate enough to go to VMworld in Barcelona. One of the coolest “goodies” that I brought back was a small NSX book about automating NSX using PowerNSX.

Network 2.16 Security 1.91