Successfully delivering modern digital experiences requires a private cloud built on modern infrastructure stack with services that enable a cloud operating model.
With the general availability of VMware Cloud Foundation (VCF) 9.0, IT teams are empowered to combine the speed and flexibility of the cloud experience with the performance, governance, and cost control enterprises need on-prem.
Successful private cloud implementations also require integrated cloud networking services that enable these cloud benefits by modernizing how we connect and protect IT resources, applications, and services.
With VCF 9.0, we’re excited to provide our customers with enhanced public cloud-like self-service access to network services for application teams, simpler deployment and flexible connectivity options, and greater operational efficiencies and cost savings with integrated full-stack automation and operations. Networking is now easier to deploy, operate, and consume with strong integration across the VCF stack, direct connectivity with switch fabrics, and enhanced virtual private cloud (VPC) configurability and consumption. Aligned with the enhancements in VCF Automation, VCF Operations and vCenter, we’re helping enterprises run mission-critical workloads – better, faster, and smarter.
Key Networking Highlights in VCF 9.0
1. Self-service Access to Workload Connectivity and Security through VPCs
VCF 9.0 introduces major advancements in self-services networking by making VCF deployments Virtual Private Cloud (VPC)-ready out of the box. This shift enables different teams to access isolated, policy-driven virtual networks with ease, mirroring the public cloud experience.
First introduced as a simpler cloud consumption model for network services, VPCs in VMware Cloud Foundation provide isolated cloud environments, allowing different tenants, projects, or departments to operate securely and independently with self-service access to subnets, network services (like NAT), firewall rules, and load balancing.
Enhancements in VCF 5.2.1 added VPC visibility in vCenter, enabling faster workload deployment with consistent networking policies and easier enforcement of security policies.
Now with VCF 9.0, VPC lifecycle operations are directly integrated into VCF Automation workflows and vCenter further streamlining deployment and consumption.
Fig 1. Manage VPCs from VCF Automtion or vCenter
This new consumption interface delivers a direct and simplified access for application teams to configure the network connectivity, firewall rules, and other services such as load balancing and NAT required to deploy their applications in the VPC.
Infrastructure and platform teams can now offer networking as a service, significantly reducing ticket-based workflows and increasing developer velocity. It also supports better governance through consistent enforcement of resource allocation, network policies, and naming standards.
2. Simpler Deployment and Flexible Connectivity
VCF 9.0 introduces several enhancements that help streamline the deployment of virtual networking capabilities with more flexible connectivity options.
Simpler Deployment
We continue to streamline network deployment workflows with the new Installer in VCF 9.0 that includes the ability to deploy virtual networking capabilities.
Pre-installed virtual networking components eliminate complex, manual setup workflows and reduce the time-to-value for new cloud environments. Virtual networking ESX kernel modules (VIBs) are now included with ESX by default. This reduces the complexity and time required to install and upgrade virtual networking features. These enhanced workflows offer virtual networking capabilities out of the box, following recommended design guidelines and best practices, so that new workload domains can be provisioned rapidly without needing to stage and configure NSX separately.
Flexible Connectivity
VCF 9.0 is introducing a new network construct – the Transit Gateway! Configured during the VCF Workload Domain creation, the Transit Gateway is easy to deploy and provides simplified connectivity for your workloads that scales elastically in a highly available solution. You can connect VPCs to Transit Gateways to simplify inter VPC communication as well as the connectivity to external services.
Fig 2. Centralized and Distributed Connectivity with Transit Gateways
With full compatibility with existing vSphere VDS VLAN-based networking architectures, Transit Gateways simplify the integration with the physical fabric. You get the option to connect directly from the host to fabric enabling a simplified external connectivity model that does not require deploying edge nodes or advanced routing configuration, reducing the number of hops, boosts network throughput and latency, and improves troubleshooting by aligning physical and virtual topologies.
Lighter Footprint
VMware Cloud Foundation 9.0 now supports deploying a single NSX Manager for customers who want to have a reduced set of resource requirements and do not have the need for the high availability that the NSX management clustering technology provides. The highest level of availability still requires a cluster of three NSX Managers but the new topology with a single NSX Manager allows for lighter weight management in smaller environments or edge sites where lower resource consumption is desirable.
3. Agile Operations and Monitoring
Operating at scale requires not just deployment agility but also strong visibility, reliability, and seamless day-2 operations. VCF 9.0 introduces several enhancements that help streamline ongoing management of networking infrastructure.
- NSX is now more tightly integrated with the broader VCF automation stack, including lifecycle management of certificates, credentials, and patches. This reduces operational friction and security risk.
- A newly enhanced System Health Dashboard consolidates critical insights across networking, security, and platform services into a unified view. This empowers faster root cause analysis and trend tracking.
- With support for vLCM (vSphere Lifecycle Manager) live patching and alignment with vSphere upgrade cycles, NSX upgrades are now more efficient. Operators can apply security and feature updates without full maintenance windows, minimizing disruption to services.
Together, these enhancements reduce the operational burden on infrastructure teams while improving resiliency and performance of the private cloud. Monitoring becomes more proactive, and upgrades are faster and safer.
Summary
With VCF 9.0, VMware delivers a more powerful networking foundation for the private cloud, one that mirrors the agility and simplicity of public cloud services while offering the control and efficiency of on-prem infrastructure.
From VPC-style self-service networking to automated deployment and streamlined operations, networking continues to be the engine that enables the cloud operating model in VMware Cloud Foundation.
Whether you’re deploying new applications, integrating hybrid connectivity, or managing lifecycle operations at scale, networking in VCF 9.0 helps you move faster, stay resilient, and operate smarter.
Learn More
- VMware Cloud Foundation 9.0 Overview
- VMware Cloud Foundation 9.0 Networking Release Notes
- Networking Datasheet and Solution Brief
- VMware Cloud Foundation 9.0 Blog Series
***
Ready to get hands-on with VMware Cloud Foundation 9.0? Dive into the newest features in a live environment with Hands-on Labs that cover platform fundamentals, automation workflows, operational best practices, and the latest vSphere functionality for VCF 9.0.
