VCF Operations VCF Support VMware Cloud Foundation

The Complete Guide to Workload Mobility with VMware Cloud Foundation Operations HCX 9.1 (Part 3: Extending Networks and Migrating Workloads)

Key Points

  • Network Extension: Learn how to stretch Layer 2 networks from your legacy vSphere environment to VMware Cloud Foundation (VCF) 9.1, ensuring workloads retain their original IP and MAC addresses.
  • Workload Migration: Understand the different HCX migration types available, with a step-by-step guide to perform your first migration.

About This Series

Disclaimer: It is important to note that this blog offers general recommendations, which may not apply to all scenarios or cover every aspect of deployment. For professional services, please engage Broadcom Professional Services.

Understanding HCX Migration Types

Before migrating workloads, selecting the appropriate HCX migration type depends on the following main considerations:

  • Tolerance for Downtime: If your applications require zero downtime, you must use a live migration method (vMotion, RAV, or HAV). Among these, Replication Assisted vMotion (RAV) is generally the preferred choice for large scale migrations because it uniquely combines the benefits of zero downtime (vMotion) with parallel disk replication.
  • Underlay Network Reliability: Live migrations demand a highly stable network with at least 250 Mbps bandwidth and a strict maximum of 0.1% packet loss. VCF Operations HCX 9.1 includes the WAN Optimization appliance, which lowers the minimum bandwidth requirement to 150 Mbps while maintaining the strict 0.1% packet loss threshold. Dropping below these network limits can cause live migrations to fail. Consequently, if the network is not reliable for live migration, non-live Bulk Migration is the safest choice due to its tolerance for lower bandwidth (50 Mbps) and higher packet loss (1.0%). For additional details, review the official Broadcom Network Underlay Minimum Requirements.
  • Replication vs. Relocation (Rollback Requirements): Most migration methods fully relocate the virtual machine, meaning the original VM is no longer available on the source vCenter once migration is completed. If your business requires a fast rollback plan, Bulk Migration is recommended. It functions as a replication process, safely preserving the original VM in a powered off and disconnected state on the legacy environment.
    Note: While all migration methods support reverse migration, returning a workload to the source environment always requires initiating a separate migration job.

For more information on each migration type and additional limitations, see the table below:

Migration Type Downtime Parallel Network Underlay Minimums Additional Characteristics & Protocols
Cold Migration Yes* No BW: 250 Mbps
MTU: 1150
Loss: 0.1%
Latency: 150 ms
  • Applicable only for powered off VMs.
  • Uses the VMware NFC (TCP 902) protocol.
* Because this is a cold migration, the virtual machine starts in a powered off state and remains in the same state during the entire migration.
vMotion No No BW: 150 Mbps (w/ Opt)
BW: 250 Mbps (no Opt)
MTU: 1150
Loss: 0.1%
Latency: 150 ms
  • Moves virtual machines with no downtime.
  • While you can queue multiple VMs in a single Mobility Group, they are processed serially (one by one) per Service Mesh. Concurrent data replication is not supported with this method. For parallel live migrations, see Replication Assisted vMotion (RAV).
  • Uses standard vMotion (TCP 8000) and NFC (TCP 902) protocols.
Bulk Migration Yes* Yes BW: 50 Mbps
MTU: 1150
Loss: 1.0%
Latency: 150 ms
  • Preserves the original VM at the source site. Because this is a replication process rather than a relocation, the source VM is left intact, powered off, and disconnected after the final sync.
  • Highly Scalable: Supports up to 1,000 concurrent Bulk Migrations per HCX Manager (requires custom configuration per VMware KB 373010), and up to 200 concurrent migrations per Interconnect (IX) appliance.
  • Optional: Supports Guest OS Customization and the migration of Encrypted Virtual Machines.
  • Seed Checkpoint Support: Retains target disks if a migration fails or is canceled, allowing subsequent attempts to reuse transferred data instead of starting from scratch.
  • Uses the vSphere Replication (TCP 31031) protocol for parallel operations, and TCP 32032 for Bulk Migration Encrypted.
* Minimum downtime occurs during the scheduled switchover window when the active VM is gracefully powered off at the source and the replica is powered on at the destination.
Replication Assisted vMotion (RAV) No Yes* BW: 150 Mbps (w/ Opt)
BW: 250 Mbps (no Opt)
MTU: 1150
Loss: 0.1%
Latency: 150 ms
  • Moves virtual machines with zero downtime using parallel disk replication and live vMotion.
  • Highly Scalable: Supports up to 1,000 concurrent RAV migrations per HCX Manager (requires custom configuration per VMware KB 373010), and up to 200 concurrent migrations per Interconnect (IX) appliance.
  • Seed Checkpoint Support: Retains target disks if a migration fails or is canceled, allowing subsequent attempts to reuse transferred data instead of starting from scratch.
  • Uses vSphere Replication (TCP 31031), vMotion (TCP 8000), and NFC (TCP 902) protocols.
* Live switchover of concurrent RAV migrations is run serially per Service Mesh.
HCX Assisted vMotion (Direct) No No BW: 250 Mbps
MTU: 1500
Loss: 0.1%
Latency: 150 ms
  • HCX orchestrates migrations using native VMware vSphere cross vCenter vMotion.
  • Uses vMotion (TCP 8000) and NFC (TCP 902) protocols.
OS Assisted Migration (OSAM) Yes Yes BW: 50 Mbps
MTU: 1150
Loss: 1.0%
Latency: 150 ms
  • Provides migration for non vSphere guest virtual machines, specifically for VMs running on Hyper-V and KVM.
  • Uses an HCX specific OSAM agent.
Legend: BW = Bandwidth | Opt = WAN Optimization appliance enabled

Blog Scope: The OS Assisted Migration (OSAM) method is designed for non-vSphere workloads (Hyper-V or KVM). However, this guide focuses exclusively on migrating from a legacy vCenter to a VCF 9.1 vCenter.

1. Pre-Migration Health Checks

Before starting migrations, run HCX Diagnostics and Transport Analytics. Diagnostics verifies that required firewall ports are open, while Transport Analytics measures underlay bandwidth, latency, and packet loss. Completing these checks helps to identify issues and avoid unexpected failures during migration.

Step 1: Running HCX Diagnostics

  1. Log in to your source HCX Manager. Running diagnostics from the source automatically tests the target side as well.
  2. Go to Interconnect > Service Mesh, select your service mesh, click More, and choose Run Diagnostics.
    Running HCX Diagnostics
  1. When the process completes, verify all probes are successful. Do not proceed to migration if any probes fail.
    Note: If you see failed probes, check the VMware Ports and Protocols and verify your firewalls are allowing the traffic.
    HCX Data Plane Diagnostics Results

Step 2: Running Transport Analytics

  1. From the left navigation menu under Infrastructure, select Transport Analytics.
  2. Expand HCX Uplink and click RUN TEST (click YES on the prompt to proceed).
    Transport Analytics Run Test
  1. Once the test completes, verify that your Available Bandwidth, Latency, and Loss meet or exceed the underlay requirements for your target migration type. Green checkmarks next to each migration service in the Services Overview confirm that the underlay network can support those methods.
    Transport Analytics Results

2. Network Extension

Extending Layer 2 networks allows workloads migrated to VMware Cloud Foundation (VCF) 9.1 to retain their original IP and MAC addresses, eliminating application re-IP requirements during migration. Follow these steps to stretch your source network across the HCX Service Mesh:

Reviewing Prerequisites & Supported Topologies

Before proceeding, it is highly recommended to review the official documentation to ensure your environment configuration is fully supported:

When extending networks with HCX, keep the following supported network types in mind:

  • Supported Sources: DVS portgroup, NSX overlay, NSX VLAN, or NSX VPC (if the source is NSX 9).
  • Supported Targets: NSX VPC, NSX Overlay, and NSX VLAN.

Step-by-Step Configuration

For comprehensive details, reference the official Broadcom guide on Extending Networks. Below is a simplified breakdown of the process:

  1. From the HCX Manager UI, navigate to Network Extension under the Services menu and click Extend Networks.
  2. Select your Service Mesh, browse your source datacenter, and check the boxes next to the specific networks you want to extend.
    Select Networks to Extend in HCX

  1. Click Next to open the extension properties configuration.
  2. For each selected network, enter the Gateway IP Address / Prefix Length and choose your Destination First Hop Router (e.g., your NSX Tier-1 gateway or NSX VPC).
    Configure Network Extension Gateway and Router
  1. Click Submit to initiate the extension process. Once finished, your Layer 2 networks will be successfully stretched to VCF 9.1.

3. Migrating Virtual Machines

Now that your Layer 2 networks are successfully extended, the environment is ready to migrate virtual machines. Because the network is stretched, workloads will retain their original IP and MAC addresses upon moving to VCF 9.1. VCF Operations HCX orchestrates this process using Mobility Groups, allowing you to batch and manage multiple workloads at once. For detailed operational instructions, review the official guide on Migrating Virtual Machines using Mobility Groups.

Step-by-Step Configuration

  1. In the VCF Operations HCX UI, navigate to Migration under the Services menu.
  2. Click Create Mobility Group.
  3. Browse your source inventory, select the set of virtual machines to include in the migration group, and click Add to Selection.
  4. Configure the migration settings for your group. During this step, you can define essential parameters, including:
    • Switchover: Schedule exactly when the migration completes the final sync and cuts over.
    • Advanced Options: Configure specific behaviors like retaining MAC addresses or upgrading VMware Tools.
    Warning: Be cautious when enabling Upgrade Virtual Hardware or Disable HCX Per-VM EVC. These settings can cause lock-in, preventing you from migrating the workload back to the legacy environment due to hardware or CPU instruction set incompatibilities.
    • Migrate NSX Tags: Ensure security tags are carried over to the destination NSX environment.
    • Seed Checkpoint: Enable this option to retain target disks if a migration fails, allowing subsequent attempts to reuse transferred data.
  5. Validate the migration and click Go to start the process.

Conclusion

This concludes our three-part series on VCF Operations HCX 9.1. From the initial deployment and Service Mesh configuration to extending Layer 2 networks and executing VM migrations, you now have the foundational steps to successfully transition your workloads to VCF 9.1.

Special thanks to Abhilash Kunhappan, Chris O’Sullivan (Support Domain Expert), Vipul Patel (HCX Engineering) and Jose Gonzalez Cobo (Product Management).


Discover more from VMware Cloud Foundation (VCF) Blog

Subscribe to get the latest posts sent to your email.