Saturday, 12 September 2026

NSX Networking: What's New in VMware Cloud Foundation 9.1 (Part 3)

 

As organizations continue to push the boundaries of modern applications, AI workloads, and high-performance computing, networking performance becomes a critical factor in overall infrastructure efficiency. VMware Cloud Foundation (VCF) 9.1 introduces several significant enhancements to the NSX data plane, focusing on accelerating throughput, reducing latency, and improving scalability across both traditional enterprise and next-generation AI workloads.

In this third installment of our VCF 9.1 networking series, we'll explore the latest innovations in Enhanced Data Path (EDP), accelerated networking with NVIDIA SmartNICs, and performance improvements designed to help organizations extract maximum value from their infrastructure investments.


Driving Network Scalability with FPO Hardware Steering

One of the key enhancements in VCF 9.1 is the introduction of FPO Hardware Steering for NVIDIA accelerated networking adapters.

Modern data centers increasingly rely on hardware-assisted networking to handle growing volumes of east-west traffic. As virtual environments scale, the ability to efficiently program network flows becomes a critical performance consideration.

VCF 9.1 introduces an asynchronous queue-based hardware steering engine that significantly improves:

  • Flow programming rates
  • Infrastructure scalability
  • Network processing efficiency
  • Overall data path performance

This capability is available on a range of NVIDIA accelerated networking platforms, including:

  • NVIDIA ConnectX-6 DX
  • NVIDIA ConnectX-7
  • NVIDIA BlueField-2
  • NVIDIA BlueField-3

The enhancement benefits both:

  • Uniform Passthrough (UPTv2)
  • Enhanced DirectPath I/O (EDPIO)

By streamlining how flow entries are programmed into hardware, organizations can support larger-scale deployments while maintaining consistent networking performance across demanding workloads.


Uniform Passthrough (UPT): Balancing Performance and Flexibility

One of the most exciting additions in VCF 9.1 is the continued advancement of Uniform Passthrough (UPT) for accelerated networking environments.

Traditionally, organizations seeking maximum network performance often had to sacrifice operational flexibility, particularly when leveraging direct hardware access technologies. UPT changes that equation.

UPT delivers near line-rate networking performance using the familiar and widely adopted VMXNET3 interface, while offloading the data path directly to supported NVIDIA hardware such as:

  • NVIDIA ConnectX-7
  • NVIDIA BlueField-2 (NIC Mode)
  • NVIDIA BlueField-3 (NIC Mode)

Why UPT Matters

A major advantage of UPT is that it eliminates the dependence on proprietary guest operating system drivers.

This provides several operational benefits:

  • Simplified VM image management
  • Easier operating system maintenance
  • Consistent VM deployment models
  • Reduced administrative complexity

Equally important, UPT maintains support for critical virtualization features, including:

  • vMotion
  • Workload mobility
  • Guest operating system portability

Ideal Use Cases

UPT is particularly well suited for:

  • Enterprise application workloads
  • Database servers
  • Business-critical virtual machines
  • Large-scale virtualized environments
  • High-performance applications that still require mobility

Key Benefit

Organizations gain high-speed networking performance while preserving the operational advantages that make virtualized infrastructure flexible and easy to manage.

In many environments, UPT offers an attractive "best of both worlds" approach by delivering accelerated networking without compromising day-to-day operational workflows.


Enhanced DirectPath I/O: Maximum Performance for AI and HPC

For organizations that require absolute networking performance, VCF 9.1 further strengthens support for Enhanced DirectPath I/O (EDPIO).

EDPIO provides virtual machines with direct access to underlying network hardware, allowing workloads to bypass traditional virtualization layers and achieve extremely low latency and high throughput.

Supported hardware includes:

  • NVIDIA ConnectX-6 DX
  • NVIDIA ConnectX-7
  • NVIDIA BlueField-3 (NIC Mode)

Built for the Most Demanding Workloads

EDPIO is designed specifically for compute-intensive environments where every microsecond counts.

Typical use cases include:

  • Artificial Intelligence training
  • Machine Learning clusters
  • High-Performance Computing (HPC)
  • Large-scale distributed computing
  • High-frequency trading platforms

GPUDirect RDMA Support

A particularly powerful capability enabled through EDPIO is GPUDirect RDMA.

This technology allows GPUs to communicate directly across the network with minimal CPU involvement, enabling:

  • Faster data transfers
  • Reduced latency
  • Improved GPU utilization
  • Accelerated distributed AI training

As AI workloads continue to expand across enterprises, technologies such as GPUDirect RDMA become increasingly important for reducing training times and maximizing infrastructure efficiency.

Key Benefit

EDPIO delivers the highest available performance by providing hardware-level access, making it the preferred networking architecture for organizations running mission-critical AI, HPC, and ultra-low-latency applications.


Enhanced Data Path (EDP) Continues to Evolve

VCF 9.1 introduces numerous improvements to Enhanced Data Path Standard, further improving resiliency and performance across NSX networking deployments.

Improved Deployment Experience

Maintaining uptime during infrastructure maintenance is always a priority.

VCF 9.1 introduces an updated orchestration sequence that helps maintain data path availability in environments utilizing multiple uplinks during planned maintenance activities.

Benefits include:

  • Reduced service disruption
  • Improved operational continuity
  • More resilient maintenance workflows

Lower Latency and Higher Throughput

Several enhancements contribute directly to improved networking performance.

New optimizations include:

  • Posted interrupt support for lower VMXNET3 latency
  • Enhanced multicast Fast Path processing
  • VMKAPI checksum offloading

Together, these improvements help reduce processing overhead while increasing overall throughput and responsiveness.

Organizations running latency-sensitive workloads will particularly benefit from these enhancements.


Expanded Feature Support

VCF 9.1 also broadens EDP feature capabilities.

New functionality includes:

  • SR-IOV support for EDP Standard
  • RDMA feature parity with pkthandle
  • Large Receive Offload (LRO) support for Antrea deployments

These additions provide greater deployment flexibility and ensure organizations can leverage advanced networking technologies across a wider range of use cases.


Platform-Level Optimizations

Networking performance improvements extend beyond the data path itself.

VCF 9.1 introduces platform-specific optimizations for:

vSAN Environments

Enhanced support for:

  • Multi-world VMKnics
  • Improved storage network efficiency
  • Better vSAN networking performance

AMD-Based Platforms

Additional optimizations include:

  • Translation Lookaside Buffer (TLB) enhancements
  • Improved memory efficiency
  • Better packet-processing performance

These refinements help customers maximize performance from existing hardware investments while improving overall workload efficiency.


GRE Traffic Scaling for Cloud Service Providers

Cloud Service Providers and large-scale multi-tenant environments often rely heavily on GRE-based overlay networking.

VCF 9.1 introduces GRE vNIC RSS hashing enhancements for NSX Edge Node virtual appliances.

These improvements enable:

  • Better traffic distribution
  • Improved CPU utilization
  • Increased traffic scale
  • Enhanced network throughput

By optimizing Receive Side Scaling (RSS) for GRE traffic processing, Edge Node appliances can better handle large volumes of encapsulated traffic commonly found in service provider and large enterprise environments.

For organizations managing significant overlay networking deployments, this enhancement helps improve scalability without requiring additional infrastructure resources.


Final Thoughts

The networking enhancements introduced in VMware Cloud Foundation 9.1 demonstrate VMware's continued investment in delivering cloud-scale performance across both traditional enterprise workloads and emerging AI-driven environments.

From FPO Hardware Steering and Uniform Passthrough to Enhanced DirectPath I/O and the latest Enhanced Data Path optimizations, VCF 9.1 provides organizations with multiple options to match networking performance to workload requirements.

Whether you're running business-critical applications that require operational flexibility, large-scale cloud environments demanding greater scalability, or AI clusters that need every ounce of available performance, VCF 9.1 introduces the tools and technologies necessary to meet those demands.

As AI, machine learning, and data-intensive applications continue to reshape infrastructure requirements, these networking enhancements position VMware Cloud Foundation as a powerful platform for supporting the next generation of enterprise workloads.

Stay tuned for Part 4 of this series, where we'll explore additional networking innovations and capabilities introduced in VMware Cloud Foundation 9.1.

Friday, 11 September 2026

NSX Networking: What's New in VMware Cloud Foundation 9.1 (Part 2)

 

In the first part of this series, we explored some of the major networking enhancements introduced in VMware Cloud Foundation (VCF) 9.1. In this second installment, we'll focus on key improvements to the NSX Edge Platform, designed to simplify deployment, improve operational reliability, and enhance infrastructure validation.

As organizations continue to modernize their private cloud environments, the NSX Edge layer remains a critical component for delivering routing, switching, security, and north-south connectivity services. VCF 9.1 introduces several meaningful enhancements that make Edge deployments easier to manage while improving performance and operational resilience.


Simplified Edge Node Deployment with a New NSX User Interface

One of the most noticeable improvements in VCF 9.1 is the introduction of a completely redesigned workflow for Edge Node and Edge Cluster creation within NSX Manager.

Traditionally, deploying Edge infrastructure required administrators to navigate multiple configuration screens and validate various networking parameters throughout the deployment process. While functional, these workflows could be complex, particularly for organizations deploying large-scale NSX environments.

The new UI experience significantly streamlines the process by providing:

  • A more intuitive deployment workflow
  • Simplified Edge Node configuration
  • Enhanced Edge Cluster setup and management
  • Reduced deployment complexity
  • Faster time-to-production for networking services

By consolidating key deployment tasks into a guided workflow, administrators can deploy Edge infrastructure more efficiently while reducing the likelihood of configuration errors. This improvement is particularly valuable for teams that are standardizing deployments across multiple cloud environments or expanding existing VCF estates.


Expanded Hardware Support for Bare Metal Edge Deployments

VCF 9.1 continues to broaden hardware compatibility for high-performance networking environments.

With this release, VMware adds support for the following NICs as Datapath interfaces for Bare Metal Edge (BME) deployments:

  • Broadcom 574X Series
  • Broadcom 575X Series
  • Mellanox ConnectX-6 LX (CX6 LX)

This expanded support provides customers with greater flexibility when designing and deploying Bare Metal Edge infrastructure.

For organizations leveraging Bare Metal Edges to maximize networking throughput and reduce virtualization overhead, support for these widely adopted network adapters offers several advantages:

  • Greater hardware choice
  • Improved infrastructure standardization
  • Enhanced procurement flexibility
  • Support for modern, high-performance network architectures

The addition of these NICs allows organizations to align NSX Edge deployments with existing server and networking standards while maintaining high-performance connectivity requirements.


Control Plane Prioritization Improves Network Stability

Networking reliability often depends not only on data plane performance but also on the health of the control plane.

To address this, VCF 9.1 introduces Control Plane Prioritization (CPP) on Edge uplinks.

This enhancement ensures that critical control plane traffic receives priority handling for both:

  • Receive (RX) traffic
  • Transmit (TX) traffic

Control plane communications are essential for maintaining routing adjacencies, synchronization processes, and overall network stability. During periods of network congestion or heavy traffic loads, delayed control plane packets can potentially impact service availability and operational consistency.

By prioritizing these packets, VCF 9.1 delivers:

  • Improved routing protocol stability
  • More reliable edge operations
  • Enhanced resiliency during traffic spikes
  • Better overall networking performance

Importantly, CPP is available across both deployment models:

  • Bare Metal Edge (BME)
  • Edge Virtual Machines (Edge VM)

This ensures consistent behavior regardless of how organizations choose to deploy their NSX Edge infrastructure.


Built-In VLAN and MTU Validation for Edge VM Deployments

Network misconfigurations remain one of the most common causes of deployment delays and operational issues. Incorrect VLAN assignments or MTU mismatches can lead to connectivity problems that are often difficult and time-consuming to diagnose.

To help address this challenge, VCF 9.1 introduces VLAN and MTU health checks as part of the new Edge deployment and Edge Cluster creation workflows.

Before deployment, NSX now performs validation checks to confirm that:

  • The required VLAN configurations exist on physical Top-of-Rack (ToR) switches
  • MTU settings are correctly configured
  • Edge infrastructure requirements are met prior to deployment

This proactive validation helps administrators identify potential issues before they affect production environments.

Key benefits include:

  • Faster deployments
  • Reduced troubleshooting effort
  • Fewer failed Edge deployments
  • Improved deployment confidence
  • Better alignment between physical and virtual networking configurations

By shifting these checks earlier into the deployment process, organizations can resolve configuration issues before they become operational problems.


Final Thoughts

The NSX Edge Platform enhancements in VMware Cloud Foundation 9.1 focus on three key areas: simplicity, validation, and reliability.

The redesigned Edge deployment experience makes it easier to configure and manage Edge infrastructure, while expanded hardware support provides greater flexibility for Bare Metal Edge implementations. Meanwhile, Control Plane Prioritization strengthens networking resilience, and the new VLAN and MTU health checks help prevent common deployment mistakes before they occur.

Taken together, these improvements demonstrate VMware's continued focus on streamlining NSX operations and delivering a more predictable, enterprise-ready networking experience within VMware Cloud Foundation.

For organizations planning a VCF 9.1 upgrade, these Edge Platform enhancements offer compelling operational benefits that can reduce deployment complexity, improve network stability, and accelerate the delivery of critical networking services.

Stay tuned for the next part of this series, where we'll continue exploring the latest networking innovations introduced in VMware Cloud Foundation 9.1.

Thursday, 10 September 2026

 

NSX Networking: What's New in VMware Cloud Foundation 9.1 (Part 1)

As VMware Cloud Foundation (VCF) continues to evolve into a fully integrated private cloud platform, networking remains one of the most significant areas of innovation. VCF 9.1 introduces major enhancements to NSX networking, with a strong focus on Virtual Private Clouds (VPCs), Transit Gateways, automation, simplified operations, and expanded multi-tenant capabilities.

In this first part of our VCF 9.1 networking series, we'll explore the key NSX networking innovations that help organizations build more scalable, flexible, and cloud-like networking environments.


Virtual Private Cloud (VPC) Takes Center Stage

Virtual Private Cloud (VPC) networking continues to be the cornerstone of modern networking within VMware Cloud Foundation. VCF 9.1 significantly expands VPC capabilities, making it easier for administrators and tenants to deploy, manage, and consume networking services while maintaining isolation and operational simplicity.

The enhancements introduced in this release focus on:

  • Improved VPC management experience
  • Enhanced connectivity options
  • Expanded networking services
  • Greater automation support
  • Simplified integration with existing data center networks

These updates bring the VCF networking experience closer to the public cloud operational model while maintaining the flexibility and control of private infrastructure.


AVI Load Balancer Integration for VPCs

One of the headline features in VCF 9.1 is the introduction of AVI Load Balancer integration with VPCs and Transit Gateways using Distributed VLAN Connections.

This enhancement enables organizations to deploy enterprise-grade load balancing services directly within VPC environments while maintaining the distributed networking architecture introduced in recent NSX releases.

Key benefits include:

  • Seamless integration with NSX VPC networking
  • Support for distributed Transit Gateway architectures
  • Simplified deployment of application delivery services
  • Improved scalability and operational consistency

This integration ensures that application workloads can leverage advanced load balancing services without requiring complex networking configurations.


Distributed VLAN Connectivity for Supervisor and VCF Automation

VCF 9.1 introduces an important enhancement for Kubernetes and infrastructure automation environments through the integration of the Virtual Network Appliance (VNA).

By introducing the VNA, VMware delivers the necessary networking services to support Distributed Transit Gateways within Supervisor environments. This allows VCF Automation deployments to connect directly to existing data center VLANs using simple VLAN-based connectivity.

Benefits include:

  • Reduced networking complexity
  • Faster onboarding of automation environments
  • Simplified connectivity requirements
  • Easier integration with existing network infrastructure

This feature significantly lowers the barrier to deploying cloud automation services in enterprise environments.


Enhanced NSX User Experience for VPC and IPAM

As VPC adoption grows, VMware has invested heavily in improving the NSX management experience.

Extended VPC Management Views

Administrators can now access dedicated views for specific VPC features, including:

  • Subnets
  • NAT services
  • Connectivity configurations
  • VPC-level resource management

This provides a more intuitive operational experience and makes troubleshooting easier.

Improved IP Address Management (IPAM)

VCF 9.1 delivers a complete IP allocation and management workflow, enabling:

  • Simplified IP provisioning
  • Faster address assignment
  • Direct integration with networking services
  • Easy allocation of External IPs
  • Streamlined NAT configuration

Networking Interface Reorganization

The NSX UI has also been reorganized to clearly distinguish between:

VPC Networking Components

  • Transit Gateways
  • VPC Services
  • Connectivity Policies

Traditional Segment Networking Components

  • Tier-1 Gateways
  • Segments
  • Legacy network constructs

The result is a cleaner and more logical navigation experience.


Extended VPC Management Directly from vCenter

VCF 9.1 continues the trend of surfacing NSX networking functionality directly within vCenter.

Administrators can now perform many VPC-related networking tasks without switching management interfaces.

New capabilities include:

  • Full Transit Gateway visibility and configuration
  • VPC subnet extension to VLAN networks
  • End-to-end IPAM visibility
  • Direct IP allocation workflows
  • Enhanced topology visualization
  • Traceflow support for VPC-based virtual machines
  • DHCP Server management
  • DHCP Relay configuration

This integrated experience helps reduce context switching and simplifies day-to-day operations.


Terraform Support Expands Further

Infrastructure as Code continues to be a critical requirement for modern private cloud deployments.

With VCF 9.1, the Terraform Provider has been expanded to support newly introduced VPC and Transit Gateway capabilities.

New automation coverage includes:

Transit Gateway Enhancements

  • Multiple Transit Gateways
  • Advanced connectivity configurations
  • Enhanced routing constructs

VPC Features

  • Improved IPAM support
  • VLAN Extension capabilities
  • Advanced VPC networking services

These additions make it easier for platform teams to standardize infrastructure deployments using automation pipelines.


Load Balancer Services Powered by Virtual Network Appliance

VCF 9.1 introduces VPC Load Balancer services running on the newly introduced Virtual Network Appliance (VNA).

The VNA hosts Layer 4 (L4) load balancing services and provides:

  • Service isolation
  • Improved scalability
  • Flexible deployment options
  • Distributed VPC support

By separating networking services from traditional centralized architectures, VMware is creating a more cloud-like networking experience that scales alongside workloads.


IPSec VPN Support for VPCs

Secure connectivity is another major area of improvement in VCF 9.1.

Organizations can now deploy IPSec VPN services for VPCs using centralized Transit Gateway connectivity.

Supported VPN modes include:

Policy-Based VPN

Ideal for simple site-to-site connectivity requirements.

Route-Based VPN

Supports static route configurations and provides greater flexibility in network design.

Benefits include:

  • Secure encrypted communication
  • Hybrid cloud connectivity
  • Branch office integration
  • Third-party network interoperability

1:N SNAT for Distributed Transit Gateways

VCF 9.1 introduces support for 1:N Source Network Address Translation (SNAT) within distributed Transit Gateway deployments.

This allows multiple internal workloads to share a single external IP address using Port Address Translation (PAT).

Advantages include:

  • Conservation of public IP addresses
  • Simplified outbound connectivity
  • Reduced operational overhead
  • Better public network resource utilization

This capability is particularly valuable for large-scale cloud-native environments.


Introducing the Virtual Network Appliance (VNA)

The Virtual Network Appliance is one of the most important architectural additions in VCF 9.1.

The VNA serves as a dedicated platform for hosting network services within distributed VPC environments.

The appliance provides:

  • Flexible service deployment
  • Scalable networking architecture
  • Support for advanced network services
  • Foundation for future service expansion

Several new networking capabilities in VCF 9.1 rely on this new architecture, making it a strategic component moving forward.


VLAN Extensions for VPC Subnets

A common challenge when adopting VPC networking is integrating existing virtual machine workloads.

VCF 9.1 addresses this with VLAN Extension for VPC Subnets.

This capability allows:

  • Existing VLAN-connected workloads to join VPC networks
  • Gradual migration strategies
  • Simplified workload onboarding
  • Distributed VLAN extensions through the fabric

Organizations can modernize networking without requiring disruptive infrastructure redesigns.


Advanced Connectivity for Centralized Transit Gateways

Transit Gateways receive several powerful enhancements in VCF 9.1.

Multiple External Connections

Transit Gateways can now support multiple gateway external connections, improving resiliency and design flexibility.

Multiple Transit Gateways Per Project

Projects can deploy more than one Transit Gateway, enabling segmentation and workload separation.

Independent High Availability Models

Each Transit Gateway can be configured with:

  • Independent HA modes
  • Custom edge node placements
  • Flexible deployment topologies

Proxy ARP Support

Proxy ARP can now be enabled on Tier-0 Gateways serving Transit Gateways and VPC subnets.

These enhancements deliver greater flexibility for complex enterprise networking environments.


Multiple Distributed Transit Gateways Per Project

VCF 9.1 also introduces support for multiple Distributed Transit Gateways within a single project.

This allows organizations to:

  • Separate application domains
  • Isolate departments or business units
  • Improve network segmentation
  • Scale networking independently

The result is a more flexible multi-tenant networking architecture.


Distributed EVPN-VXLAN Connectivity

One of the most technically significant additions is Distributed EVPN-VXLAN support.

This architecture enables direct integration between NSX workloads and modern EVPN-VXLAN network fabrics using:

  • BGP EVPN
  • VXLAN
  • Distributed forwarding

Unlike traditional centralized approaches, traffic forwarding occurs closer to workloads, improving performance and scalability.

The VCF Route Controller provides BGP EVPN control-plane connectivity by peering directly with fabric Border Gateway devices.

Benefits include:

  • Improved scale
  • Higher performance
  • Reduced traffic tromboning
  • Better alignment between physical and virtual networks

Enhanced Multi-Tenant Networking

VCF Automation Networking 9.1 delivers several new self-service capabilities for tenants, including:

  • Distributed VLAN connectivity
  • Multiple Transit Gateways
  • Multiple external connections
  • Self-service NAT
  • Self-service VPN
  • Network grouping
  • Gateway Firewall services
  • Distributed Firewall services (with vDefend Firewall licensing)
  • Shared subnet creation across namespaces

These enhancements significantly improve tenant autonomy while maintaining centralized governance.


Native Infoblox Integration

Enterprise IP management is further enhanced through native Infoblox integration.

VCF Networking IPAM can now:

  • Discover Infoblox Network Views
  • Discover DNS Views
  • Discover Network Containers
  • Create subnets using Infoblox containers
  • Synchronize VM IP and FQDN information

Administrators can also configure mappings between:

  • NSX External IP Blocks
  • Infoblox Network Containers

This creates a unified IP addressing workflow across networking and automation platforms.


VPC Span Control

VCF 9.1 introduces the ability to define the span of a VPC directly from either NSX or vCenter.

Administrators can choose whether VPCs:

  • Remain local to specific clusters
  • Span all vCenter instances within a networking domain

This flexibility allows infrastructure teams to align networking boundaries with operational or compliance requirements.


New VPC Connectivity Policies

Managing communication between large numbers of VPCs can quickly become complex.

VCF 9.1 addresses this through Connectivity Policies.

Connectivity Policies allow administrators to define communication behavior between VPCs connected to the same Transit Gateway.

Supported models include:

Community VPCs

Groups of VPCs that need to communicate with each other, such as connected application tiers.

Isolated VPCs

Workloads that require strong separation, such as DMZ environments.

Promiscuous VPCs

Shared services environments that must communicate with all connected VPCs.

These policy-driven models simplify network design and improve operational consistency.


Final Thoughts

VCF 9.1 represents one of the most significant networking releases for VMware Cloud Foundation in recent memory. The continued evolution of VPC networking, the introduction of the Virtual Network Appliance, enhanced Transit Gateway capabilities, EVPN-VXLAN integration, native Infoblox support, and expanded automation capabilities all point toward VMware's vision of delivering a true cloud operating model for the private data center.

For administrators, architects, and platform engineers, these enhancements provide greater scalability, simplified operations, and increased flexibility while preserving the enterprise-grade security and control that organizations expect from VMware Cloud Foundation.

Stay tuned for Part 2, where we'll explore additional NSX Networking innovations in VCF 9.1 and examine how they further enhance security, operations, and cloud consumption experiences.

Wednesday, 9 September 2026

vSAN 9.1 in VMware Cloud Foundation 9.1: A Major Leap Forward in Storage, Cyber Resilience, and Scalability VMware Cloud Foundation (VCF) 9.1

 

VMware Cloud Foundation (VCF) 9.1 introduces one of the most significant sets of enhancements to vSAN in recent years. Building on the performance advantages of vSAN Express Storage Architecture (ESA), this release focuses heavily on cyber resilience, operational simplicity, storage efficiency, and enterprise scalability. Whether you're modernizing traditional virtualized workloads, supporting Kubernetes applications, or strengthening your ransomware recovery strategy, vSAN 9.1 delivers compelling new capabilities.

Let's take a closer look at what's new.


Enhanced Data Protection with Auto RAID-6

One of the standout improvements in vSAN ESA is the introduction of Auto RAID-6 as the default RAID configuration.

Traditionally, administrators needed to evaluate workload requirements and manually select the appropriate RAID level. With VCF 9.1, vSAN automatically configures RAID-6 by default, delivering stronger fault tolerance and higher levels of data protection without sacrificing performance.

This automated approach simplifies deployments while ensuring organizations start with a resilient storage configuration from day one.

Benefits

  • Automatic selection of optimal protection levels
  • Increased fault tolerance
  • Simplified cluster deployment
  • No performance compromise with ESA architecture

Cyber Recovery Becomes a First-Class Citizen

Cyber resilience is a central theme throughout the vSAN 9.1 release.

Dedicated Cyber Recovery vSAN Storage Clusters

Administrators can now deploy a dedicated Cyber Recovery vSAN ESA Storage Cluster directly through the vCenter Quickstart workflow. These isolated environments are specifically designed to support disaster recovery and ransomware recovery scenarios.

The solution integrates with:

  • VCF Protection and Recovery
  • Health monitoring and security alerts
  • Recovery validation workflows

This makes it easier than ever to establish a secure recovery environment capable of withstanding modern cyber threats.

On-Premises Clean Room Recovery

Organizations can now leverage integrated Clean Room Recovery workflows powered by vSAN snapshots.

Key capabilities include:

  • Immutable recovery points
  • Integrated Endpoint Detection and Response (EDR)
  • vDefend-powered network isolation
  • Automated recovery workflows

The result is faster recovery times and significantly reduced downtime during cybersecurity incidents.


Intelligent Replication Enhancements

Seeding for vSAN Replication

Data replication can often consume considerable bandwidth and time, particularly when replicating large datasets.

With Replication Seeding, vSAN can leverage pre-existing replica data and transfer only incremental changes instead of performing a full synchronization.

Advantages include:

  • Faster initial synchronization
  • Reduced WAN bandwidth consumption
  • Accelerated disaster recovery setup
  • Improved operational efficiency

Replication from Any Source Storage

Another major enhancement is the ability to replicate workloads from virtually any storage platform into a vSAN ESA target cluster.

This broadens the reach of vSAN replication services and allows organizations to benefit from:

  • Dynamic protection groups
  • Immutable snapshots
  • Integrated vCenter management
  • Unified disaster recovery operations

for workloads that may not currently reside on vSAN.


Simplified Protection Group Management

Tag-Based VM Membership

Managing protection groups manually becomes increasingly difficult as environments grow.

VCF 9.1 introduces Tag-Based VM Membership for vSAN Protection Groups. Administrators can automatically include VMs in protection policies based on assigned tags.

For example:

  • Production
  • Finance
  • Tier-1
  • SQL
  • Mission Critical

As new virtual machines inherit the appropriate tags, protection is automatically applied without requiring administrative action.

This capability reduces management overhead while minimizing the risk of unprotected workloads.


Flexible Snapshot Retention Policies

Recovery requirements vary widely across organizations.

To address this, vSAN 9.1 now supports Multiple Snapshot Retention Schedules, allowing administrators to create:

  • Daily snapshots
  • Weekly snapshots
  • Monthly snapshots

This flexibility enables organizations to meet both operational recovery objectives and long-term cyber recovery requirements using a single platform.


Improved Storage Efficiency

Storage efficiency receives a substantial boost in vSAN ESA.

Enhanced Compression

VCF 9.1 introduces further improvements to ESA compression algorithms, delivering better space savings while maintaining the performance characteristics for which ESA is known.

Organizations can expect:

  • Reduced storage consumption
  • Improved effective capacity
  • Better ROI on storage investments

Global Deduplication

One of the most anticipated features in vSAN ESA is finally here: Global Deduplication.

Unlike traditional deduplication technologies, this implementation operates:

  • Across the entire cluster
  • As a post-process operation
  • With encryption support

This allows organizations to maximize capacity efficiency while maintaining both security and performance.

Key Benefits

  • Cluster-wide data reduction
  • Improved usable capacity
  • Data-at-rest encryption support
  • Reduced storage costs

Advancements for Kubernetes and Cloud-Native Workloads

VCF 9.1 significantly enhances VMware's cloud-native storage capabilities.

RWX File Volume Support Expansion

Read-Write-Many (RWX) file volumes are now available for:

  • VM Service VMs
  • Multiple clusters within a single vSphere Zone

This allows modern applications to share storage more efficiently across Kubernetes and virtual machine-based workloads.

Fast Clone Volume Support

Fast Clone Volume support introduces:

  • Rapid volume provisioning
  • Snapshot-based cloning
  • Shared disk support
  • Non-disruptive VM migrations
  • Storage policy updates through reprovisioning

These capabilities improve agility while reducing operational complexity.

Massive CNS/CSI Scalability Improvements

Container storage scalability continues to expand dramatically.

VCF 9.1 now supports:

  • Up to 50,000 volumes per vCenter
  • Shared-disk clustered workloads on Supervisor Clusters
  • Unified Persistent Volume Claim monitoring through VCF Operations

This makes vSAN an increasingly attractive platform for large-scale Kubernetes deployments.


Better File Services Performance

File Services customers will appreciate the performance improvements delivered in this release.

Faster SMB Operations

vSAN File Services now provides up to:

2x faster metadata performance

for SMB-based workloads.

This is particularly beneficial for:

  • User profile services
  • Departmental file shares
  • Home directories
  • General enterprise file services

The improvement enhances responsiveness and overall user experience.


Expanded Support for Clustered Applications

Mission-critical clustered applications often present unique storage challenges.

VCF 9.1 expands support for clustered workloads and allows administrators to:

  • Expand clustered disks online
  • Avoid application downtime
  • Support Oracle RAC multi-writer configurations
  • Support Windows Server Failover Clusters (WSFC)
  • Support shared VMDK architectures

This simplifies lifecycle management for some of the most demanding enterprise applications.


Disaggregated Storage and Multi-vCenter Flexibility

vSAN Stretched Storage Across vCenter Instances

Organizations operating multiple vCenter environments can now stretch storage resources across management boundaries.

Use cases include:

  • Cross-workload domain storage sharing
  • Multi-VCF deployment architectures
  • Greater operational flexibility
  • Improved infrastructure utilization

This capability represents a significant step toward truly disaggregated infrastructure architectures.

Shared vSAN Storage Cluster Support

VCF 9.1 expands storage sharing capabilities further by allowing:

  • vSAN ESA clusters to be mounted remotely
  • vSAN OSA clusters to be mounted remotely
  • Compute-only clusters to consume shared storage services

This helps organizations separate compute and storage scaling strategies while reducing infrastructure overhead.


Comprehensive Security with End-to-End Encryption

Security remains a core focus.

VCF 9.1 introduces End-to-End Encryption for Disaggregated vSAN, providing:

  • Client-to-storage cluster encryption
  • Data-in-transit protection
  • Data-at-rest protection
  • Complete encryption coverage across storage communications

For organizations implementing disaggregated storage architectures, this delivers enterprise-grade security without additional complexity.


Simplified Stretched Cluster Maintenance

Managing maintenance windows in stretched-cluster environments has traditionally been challenging.

VCF 9.1 introduces Site Maintenance Mode for vSAN Stretched Clusters.

The feature allows administrators to:

  • Place an entire site into maintenance mode
  • Automate promotion of surviving sites
  • Streamline planned maintenance operations
  • Improve operational resilience during site-level events

This reduces complexity and risk when performing infrastructure upgrades or maintenance activities.


Final Thoughts

vSAN 9.1 in VMware Cloud Foundation 9.1 is much more than an incremental release. It represents a strategic evolution of the platform, bringing together enhanced cyber recovery capabilities, stronger data protection, improved storage efficiency, expanded cloud-native support, and greater operational flexibility.

The introduction of features such as Auto RAID-6, Global Deduplication, Cyber Recovery Clusters, Replication Seeding, End-to-End Encryption, and enhanced Kubernetes scalability demonstrates VMware's continued investment in making vSAN a comprehensive enterprise storage platform.

For organizations looking to strengthen resilience against cyber threats, improve storage efficiency, and modernize both traditional and cloud-native applications, vSAN 9.1 delivers a compelling set of capabilities that make upgrading well worth consideration.

Tuesday, 8 September 2026

VCF 9.1 Clustering and Availability Enhancements: Smarter HA, Intelligent DRS, and Faster vMotion at Scale

High availability and workload mobility are fundamental pillars of any VMware environment. With VMware Cloud Foundation (VCF) 9.1, VMware has focused on making cluster operations more intelligent, predictable, and scalable through significant enhancements to vSphere High Availability (HA), Distributed Resource Scheduler (DRS), and vMotion.

The result is a platform that not only responds faster to failures and resource contention but also performs maintenance activities and workload migrations with greater efficiency and less disruption. Let's explore the key clustering and availability innovations in VCF 9.1.


More Reliable vSphere HA Failover Notifications

One of the less visible, but highly impactful, improvements in VCF 9.1 is the redesign of the vSphere HA Failover Alarm system.

In previous releases, administrators could occasionally encounter situations where HA failover alarms would repeatedly switch between active and inactive states. While the cluster itself might be functioning correctly, these fluctuations could create uncertainty about the health and status of the environment.

Enhanced Failover Alarm Logic

VCF 9.1 delivers a completely reworked failover alarm mechanism designed to provide:

  • More accurate failover reporting
  • Stable and reliable notifications
  • Reduced false positives
  • Greater confidence in cluster monitoring
  • Improved operational visibility

This means administrators can trust that alerts genuinely reflect failover conditions rather than temporary state transitions.

Why This Matters

During an outage or recovery event, every minute counts. Reliable alarms help operations teams quickly identify real issues and avoid unnecessary troubleshooting caused by misleading notifications.


Smarter DRS for Faster Resource Optimization

The vSphere Distributed Resource Scheduler (DRS) continues to evolve in VCF 9.1 with improvements focused on resolving resource contention more effectively.

Intelligent VM Selection

When clusters experience CPU or memory contention, DRS must determine which virtual machines should be migrated to restore balance.

In earlier versions, some migrations delivered minimal impact because candidate VMs were not always selected based on overall cluster benefit.

VCF 9.1 introduces optimized VM selection logic that:

  • Prioritizes high-impact virtual machines
  • Identifies the most constrained resources first
  • Addresses CPU bottlenecks faster
  • Resolves memory pressure more efficiently
  • Reduces unnecessary migrations

Instead of making low-value workload movements, DRS now focuses on migrations that deliver meaningful improvements to cluster health.

Benefits for Administrators

This improvement translates into:

  • Faster remediation of hotspots
  • Improved workload performance
  • Better cluster balance
  • More efficient resource utilization

For large-scale environments with constantly changing demands, intelligent workload placement can significantly improve operational efficiency.


Non-Disruptive Maintenance Mode

Placing hosts into maintenance mode is a routine task, but it can become challenging when certain virtual machines cannot be safely evacuated.

VCF 9.1 introduces Non-Disruptive Maintenance Mode, designed to preserve workload performance during host evacuation.

Better Visibility Into Evacuation Constraints

Rather than forcing disruptive migrations, DRS now identifies and explains why a virtual machine cannot be evacuated.

Examples might include:

  • Resource constraints
  • Affinity rule requirements
  • Capacity limitations
  • Performance risks

When forceful evacuation could negatively impact workload performance, DRS provides clear guidance instead of automatically proceeding.

Operational Advantages

  • Reduced workload disruption
  • Better maintenance planning
  • Improved application stability
  • Greater transparency into DRS decisions
  • Lower operational risk

This enhancement allows administrators to make informed decisions while protecting critical applications from unnecessary performance degradation.


Introducing the Streaming vMotion Orchestrator

Perhaps the most exciting clustering enhancement in VCF 9.1 is the new Streaming vMotion Orchestrator.

As environments continue to grow, moving workloads efficiently across clusters becomes increasingly important. Traditional migration workflows can introduce bottlenecks, particularly when dealing with large migration batches.

The Streaming vMotion Orchestrator addresses these challenges with three major innovations.


Streaming vMotion Execution

Traditional migration processes commonly operate in batches. Administrators often need to wait for an entire group of migrations to finish before the next batch can begin.

VCF 9.1 eliminates this limitation.

Continuous Migration Pipelines

With Streaming vMotion Execution:

  • New migrations begin as resources become available
  • The migration pipeline remains fully utilized
  • Slow migrations no longer block overall progress
  • Throughput remains consistently high

The result is a more efficient migration workflow that maximizes cluster resources and accelerates maintenance operations.

Business Benefits

Organizations can now:

  • Shorten maintenance windows
  • Complete host evacuations faster
  • Reduce upgrade durations
  • Improve operational efficiency

For large clusters, these savings can be substantial.


Adaptive Host-Pair Distribution

Large migration activities can create temporary pressure on specific hosts or network interfaces when workloads are repeatedly moved between the same source and destination systems.

VCF 9.1 introduces Adaptive Host-Pair Distribution, also referred to as Progressive Pair-Sum Scheduling.

Smarter Migration Scheduling

The new scheduler intelligently distributes migration activity across available hosts by:

  • Prioritizing unique host pairs
  • Balancing network utilization
  • Spreading CPU load
  • Avoiding concentration on key infrastructure components
  • Reducing the likelihood of NIC saturation

Instead of overloading a small number of hosts, migration activity is distributed evenly across the cluster.

Why It Matters

This approach helps:

  • Prevent network bottlenecks
  • Improve migration performance
  • Maintain host responsiveness
  • Increase overall cluster efficiency

The enhancement is particularly valuable in environments with hundreds or thousands of virtual machines.


Dynamic Concurrency Control

Historically, vMotion concurrency has been governed by relatively static limits.

VCF 9.1 introduces Dynamic Concurrency Control, giving administrators greater flexibility to match migration performance to their infrastructure capabilities.

Moving Beyond Fixed Migration Limits

Rather than being constrained by a fixed cluster-wide limit of eight concurrent migrations, administrators can now fine-tune concurrency settings based on:

  • Cluster size
  • Network bandwidth
  • Host resources
  • 25GbE networking
  • 100GbE networking
  • Infrastructure design

This allows modern environments to take full advantage of available hardware resources.

Linear Scalability

The key advantage is improved scalability.

As clusters grow and additional resources become available, migration throughput can increase proportionally rather than being constrained by legacy limits.

Benefits include:

  • Faster cluster evacuations
  • Accelerated maintenance workflows
  • More efficient hardware utilization
  • Reduced upgrade times
  • Improved operational flexibility

For organizations investing in high-speed networking and large-scale infrastructure, Dynamic Concurrency Control helps unlock the full potential of the platform.


Why These Enhancements Matter

Taken together, the clustering and availability improvements in VCF 9.1 focus on three important operational goals:

Enhanced Reliability

  • More accurate HA failover alarms
  • Better visibility into recovery events
  • Reduced alert noise

Smarter Resource Management

  • Optimized DRS decision-making
  • Faster remediation of CPU and memory contention
  • Improved workload balancing

Greater Scalability

  • Continuous streaming migrations
  • Intelligent host-pair distribution
  • Dynamic migration concurrency
  • Faster maintenance operations

These improvements help organizations maintain service availability while reducing the effort required to manage increasingly complex virtual infrastructure.


Final Thoughts

VCF 9.1 delivers meaningful advancements in clustering and availability that go beyond traditional performance improvements. VMware has focused on making the platform smarter, more predictable, and better suited for modern large-scale environments.

The redesigned HA failover alarms provide greater confidence in monitoring and recovery operations. Enhanced DRS logic ensures resource contention is addressed faster and more effectively. Meanwhile, the new Streaming vMotion Orchestrator introduces a modern migration architecture capable of maximizing throughput while intelligently balancing infrastructure utilization.

For VMware administrators, architects, and operations teams, these enhancements translate into faster maintenance activities, improved workload protection, and more efficient cluster operations. Whether you're managing a small production environment or a large-scale enterprise private cloud, the clustering and availability capabilities in VCF 9.1 represent a significant step forward in operational resilience and scalability.

Monday, 7 September 2026

What's New in the vSphere Client for VCF 9.1? Enhanced Visibility, Smarter Operations, and Greater Scale

 

VMware Cloud Foundation (VCF) 9.1 introduces a wide range of enhancements across the vSphere platform, but many of the most visible improvements arrive through the vSphere Client. From improved Memory Tiering management and GPU device visibility to advanced networking workflows and major usability enhancements, vSphere administrators gain new capabilities that simplify day-to-day operations while improving scalability and efficiency.

Let's explore what's new in the vSphere Client and related infrastructure capabilities in VCF 9.1.


Memory Tiering Gets a Major Usability Upgrade

Memory Tiering continues to evolve as organizations look for ways to optimize memory utilization while controlling hardware costs. With vCenter 9.1, VMware significantly improves the management experience through the vSphere Client.

Enhanced Memory Visibility

A new Memory Tiering view provides administrators with better visibility into memory consumption and tiering performance.

The updated Memory pane now includes:

  • Tier 1 memory statistics at both host and cluster levels
  • Dedicated memory summary cards
  • Simplified monitoring views
  • Improved tiering-specific performance graphs

Rather than navigating multiple screens, administrators can quickly understand how memory tiering is performing across their environment.

Simplified Configuration Workflows

Deploying Memory Tiering is now much easier.

Cluster-level configuration has been streamlined into a single workflow that includes:

  • Device selection
  • Tiering configuration parameters
  • Validation and deployment settings

This reduces administrative complexity and helps accelerate adoption of Memory Tiering within production environments.


Improved GPU Passthrough Management

As GPU adoption continues to grow for AI, machine learning, VDI, and HPC workloads, managing passthrough devices becomes increasingly important.

VCF 9.1 significantly improves how GPU passthrough devices are presented within the vSphere Client.

Key Enhancements

  • Human-readable device descriptions
  • Simplified device naming
  • Improved readability for administrators
  • Enhanced filtering capabilities
  • Faster identification of available passthrough devices

Instead of deciphering hardware identifiers, administrators can now quickly locate and assign the correct GPU resources to virtual machines.

For environments with multiple GPU types and large inventories, this significantly improves operational efficiency.


Advanced VPC Networking Comes to the vSphere Client

One of the most exciting additions in VCF 9.1 is expanded support for VPC networking capabilities directly from the vSphere Client.

These additions bring greater visibility and control over modern network architectures without leaving the vSphere management interface.


Transit Gateway Integration

Administrators can now configure external connectivity through a Transit Gateway from within the vSphere Client.

This enables:

  • Centralized external connectivity
  • Distributed external connection models
  • Flexible VPC connectivity policies
  • Simplified network architecture management

The Transit Gateway can connect through a single centralized connection or multiple distributed connections depending on operational requirements.


Traceflow

Network troubleshooting receives a major boost through built-in Traceflow capabilities.

Administrators can:

  • Inspect packet paths
  • Validate network routing
  • Troubleshoot connectivity issues
  • Verify network policy enforcement

Traceflow provides visibility into how packets move throughout the virtual network infrastructure, making root cause analysis significantly easier.


Live Traffic Analysis (LTA)

VCF 9.1 also introduces Live Traffic Analysis (LTA).

This capability provides:

  • Live packet tracing
  • Bidirectional traffic visibility
  • Real-time network troubleshooting
  • Improved observability

Instead of relying solely on logs or packet captures, administrators gain a live view of network flows directly from the vSphere Client.


Additional VPC Enhancements

To support complete VPC lifecycle management, VMware has also added:

External Connectivity Integration

Allows definition of VPC connectivity policies and external communication paths.

Port Mirroring (SPAN)

Enables traffic monitoring across VPC environments for:

  • Troubleshooting
  • Security investigations
  • Performance analysis

Virtual Network Appliance Clusters (VNAC)

Provides advanced VPC connectivity services through clustered network appliances.

IP Management Capabilities

Administrators can now manage:

  • IP address allocation
  • DHCP configuration
  • Address assignment policies

directly as part of the VPC workflow.


Significant vSphere Client Usability Improvements

VCF 9.1 includes a collection of quality-of-life improvements that administrators will appreciate immediately.


VM Tagging During Provisioning

One common operational task has been streamlined considerably.

When creating, cloning, or deploying virtual machines from templates, administrators can now assign tags directly during the workflow.

Benefits include:

  • Faster VM organization
  • Improved automation support
  • Better governance
  • Simplified inventory management

Tagging is now built directly into the Create VM wizard.


Virtual Scrolling

Large environments often contain thousands of inventory objects.

Virtual scrolling eliminates the need to jump between pages when browsing:

  • Virtual machines
  • Hosts
  • Datastores
  • Clusters
  • Other inventory objects

This creates a much smoother user experience in large-scale deployments.


Automatically Adjustable Columns

Long object names and descriptions can be difficult to read when text wraps across multiple rows.

The vSphere Client now offers:

  • Auto-sizing columns
  • Improved readability
  • Better inventory navigation
  • User-selectable display preferences

A small improvement that makes daily administration noticeably easier.


CSV Export for Roles and Permissions

Administrators can now export roles and permissions directly to CSV format.

Supported exports include:

  • Global permissions
  • vCenter permissions
  • Cluster permissions
  • ESX host permissions

This simplifies:

  • Audit preparation
  • Security reviews
  • Compliance reporting
  • Permission analysis

Additional Interface Improvements

VCF 9.1 also introduces:

  • Alphabetical sorting for roles and permissions
  • Automatic permission propagation to child objects
  • Alphabetical object selection in OVF deployments
  • Up to 900 rows per page in Tasks and Events views
  • Live event list refresh capabilities

These improvements collectively enhance navigation and reduce administrative effort.


Better Visibility into HA Recovery Events

Troubleshooting host failures and HA recovery processes often requires investigating multiple logs and dashboards.

VCF 9.1 introduces a new Event Tracking page that provides a centralized view of recovery operations.

The interface presents:

  • ESX host failure events
  • HA decision processes
  • VM restart actions
  • Recovery timelines
  • Correlated infrastructure events

This creates a clear end-to-end view of what occurred during a failure event and helps administrators quickly understand recovery behavior.


Better Alignment Between NSX and vCenter

Organizations frequently integrate NSX and vCenter object structures.

To improve compatibility, VCF 9.1 increases the maximum Folder name length from:

80 characters → 255 characters

This enhancement enables:

  • Common object identifiers
  • Better naming consistency
  • Improved NSX integration
  • Simplified automation workflows

It's a small but valuable change for large enterprises with extensive naming conventions.


Faster vCenter Operations at Scale

Scalability remains an important focus area in VCF 9.1.

VMware has improved operational performance, delivering up to:

20% Faster vCenter Operations

Common management activities such as:

  • VM power operations
  • Host management tasks
  • Inventory actions
  • Administrative workflows

can now execute significantly faster in large-scale environments.

For organizations operating thousands of virtual machines, these improvements can lead to meaningful time savings.


Content Library Enhancements

Content Library continues to be a core component of image and template distribution.

VCF 9.1 introduces the ability to:

Convert a Subscribed Library into a Published Library

This capability is particularly valuable when retiring or decommissioning a vCenter instance.

Instead of losing the source library, administrators can promote a subscribed library to become the new published library.

Benefits include:

  • Improved resiliency
  • Protection against content loss
  • Simplified migrations
  • Business continuity for template distribution

Storage Enhancements in VCF 9.1

Several important storage improvements also appear in this release.


VAAI-NAS Unmap Support for NFS 4.1

Space reclamation is now supported for thin-provisioned NFS 4.1 datastores using VAAI-NAS Unmap.

Advantages include:

  • Better storage efficiency
  • Automatic space recovery
  • Reduced storage waste
  • Improved capacity management

Larger NFS Datastore Scale

VCF 9.1 increases host scalability for NFS datastores.

Support now extends to:

256 Hosts per NFS v3 or NFS v4.1 Datastore

This allows organizations to support significantly larger deployments while maintaining centralized storage architectures.


NVMe Stretch Cluster Support

VMware introduces support for NVMe dispersed namespaces, enabling partners to deliver validated NVMe-based stretch cluster solutions.

This enhancement supports:

  • High availability
  • Geographic resiliency
  • Modern NVMe architectures
  • Partner-certified storage platforms

iSNS Support for iSCSI

Storage administration becomes simpler with support for the Internet Storage Name Service (iSNS).

Administrators benefit from:

  • Automated target discovery
  • Simplified iSCSI configuration
  • Centralized management
  • Reduced manual administration

This improves scalability and streamlines storage provisioning.


Final Thoughts

The vSphere Client enhancements in VCF 9.1 go far beyond cosmetic improvements. VMware has focused on delivering practical features that reduce operational complexity, improve visibility, and enhance scalability across compute, networking, and storage.

From the redesigned Memory Tiering workflows and GPU passthrough improvements to advanced VPC networking tools, Event Tracking, and Content Library resiliency, VCF 9.1 gives administrators more control and better insight into their environments. Combined with faster vCenter operations and expanded storage capabilities, these enhancements make day-to-day management simpler while preparing organizations for increasingly large and complex infrastructure deployments.

For VMware administrators, architects, and operations teams, the vSphere Client in VCF 9.1 represents a meaningful step forward in usability, efficiency, and enterprise-scale management.

Sunday, 6 September 2026

vSphere Lifecycle Manager in VCF 9.1: Smarter Remediation, Stronger Compliance, and Greater Efficiency

 

Keeping ESX hosts compliant, secure, and consistently configured is a critical responsibility for every VMware administrator. With VMware Cloud Foundation (VCF) 9.1, vSphere Lifecycle Manager (vLCM) continues to evolve, introducing enhancements that improve remediation control, strengthen image governance, and reduce unnecessary overhead during host updates.

While these features may not attract the same attention as AI infrastructure or confidential computing innovations, they address some of the most important operational challenges faced by enterprise infrastructure teams. Let's explore what's new in vSphere Lifecycle Manager with VCF 9.1.


Greater Control with Global Remediation Settings

One of the most significant vLCM enhancements in VCF 9.1 is the ability to configure Global Remediation Settings for clusters that use:

  • Image-based lifecycle management
  • vSphere Configuration Profiles
  • Desired state management

As organizations increasingly adopt desired-state operations, administrators need more predictable control over how maintenance activities affect hosts and workloads.

With VCF 9.1, administrators can now define how ESX hosts and virtual machines behave before and during remediation operations.

Why This Matters

Remediation activities often involve:

  • Entering maintenance mode
  • Migrating virtual machines
  • Verifying host compliance
  • Applying updates and configuration changes

By providing centralized remediation behavior settings, VMware enables organizations to create a more consistent and predictable update process across clusters.

Benefits Include

  • Improved maintenance planning
  • Reduced operational risk
  • More predictable remediation workflows
  • Consistent behavior across managed clusters
  • Better integration with desired-state management principles

For environments with strict operational procedures or change management requirements, this additional level of control can significantly simplify lifecycle operations.


Strengthening Compliance with ESX Image Integrity Verification

Enterprise organizations frequently create customized ESX images that include:

  • Vendor-specific drivers
  • Hardware firmware packages
  • Security extensions
  • Internal software requirements
  • Regulatory compliance modifications

Before such images can be deployed in production, they often go through rigorous review, testing, and approval processes.

VCF 9.1 introduces Integrity Verification for Customized and Exported ESX Images, helping ensure that approved images remain unchanged throughout their lifecycle.

SHA-256 Image Validation

vSphere Lifecycle Manager now supports validation using SHA-256 hashing, enabling administrators and compliance teams to verify image authenticity and integrity.

This capability helps answer an important question:

Is the image being deployed the exact same image that was approved and signed off by the compliance team?

By validating image integrity before deployment, organizations can reduce the risk of:

  • Unauthorized modifications
  • Accidental image changes
  • Configuration drift
  • Supply chain concerns
  • Compliance violations

Why Compliance Teams Will Appreciate This Feature

In many enterprises, infrastructure images become part of regulated operational processes.

Common requirements include:

  • Change control verification
  • Security approval validation
  • Audit traceability
  • Configuration consistency

SHA-256 integrity verification provides a simple but highly effective mechanism for demonstrating that hosts are being deployed and updated using approved images.

This enhancement aligns particularly well with organizations operating in regulated industries such as:

  • Financial services
  • Government
  • Healthcare
  • Telecommunications
  • Critical infrastructure

Faster Remediation with Reserved VIB Optimization

Another welcome enhancement in VCF 9.1 focuses on remediation performance and efficiency.

During image remediation, vSphere Lifecycle Manager traditionally transfers the components required to bring a host into compliance. In some environments, this process may include handling VIBs (vSphere Installation Bundles) that are reserved but not actually included in the customized image.

Starting with VCF 9.1, vLCM intelligently skips the transfer of these unnecessary reserved VIBs.

What Are the Benefits?

By eliminating the transfer of unused packages, remediation workflows become more efficient.

Reduced Bandwidth Consumption

Less data needs to be transferred during remediation operations, which is especially valuable in:

  • Large-scale deployments
  • Distributed environments
  • Remote locations
  • Edge deployments

Faster Host Updates

Skipping unnecessary content reduces the overall duration of remediation tasks, helping administrators complete maintenance activities more quickly.

Improved Scalability

As environments grow, even small efficiencies can have a significant impact when multiplied across hundreds or thousands of hosts.

The result is a streamlined lifecycle experience that reduces resource consumption while improving operational performance.


A Continued Focus on Desired State Management

Taken together, these enhancements demonstrate VMware's continued investment in desired-state lifecycle management.

The goal is simple:

  • Define the desired state once
  • Validate image integrity
  • Maintain compliance automatically
  • Optimize remediation operations
  • Deliver predictable outcomes at scale

As organizations increasingly rely on automation to manage modern infrastructure, lifecycle tools must provide not only update capabilities but also governance, compliance assurance, and operational efficiency.

VCF 9.1 moves vSphere Lifecycle Manager further in that direction.


Final Thoughts

The vSphere Lifecycle Manager enhancements in VCF 9.1 may appear incremental at first glance, but they address real-world operational challenges that administrators face every day.

The introduction of Global Remediation Settings provides greater control and consistency for clusters using vSphere Configuration Profiles. SHA-256 image integrity verification strengthens governance and compliance processes by ensuring only approved ESX images are deployed. Meanwhile, the ability to skip reserved VIBs during remediation improves performance and reduces unnecessary bandwidth consumption.

For organizations embracing image-based lifecycle management and desired-state operations, these improvements make vSphere Lifecycle Manager more efficient, more secure, and more enterprise-ready than ever before. VCF 9.1 continues VMware's journey toward simplified lifecycle management, helping administrators maintain compliant, consistent, and resilient infrastructure at scale.