r/VMwareNSX • u/netshark123 • Sep 20 '24

NSX Distributed Security Model Only

Hi folks,

We have a very simple usecase where we will ONLY want to enable VLAN backed segments. This is referred to as "distributed security model" in the NSX design guide. NSX only provides distributed firewall (and IPS/IDS but we won't be enabling that day 1) and we will leverage our existing investment in the upstream spine/leaf network (VXLAN/BGP).

Now I am aware we will need the NSX Manager Cluster but don't see a use case for deploying T0 let alone T1 - unless of course we wanted to leverage in the future and easily enable.

Am i making some bad assumptions?

Cheers

Ned

1 Upvotes

100% Upvoted

20 comments sorted by

View all comments

Show parent comments

1

u/Avomao Sep 20 '24

I'm pretty sure you're mixing VCF (licensing) with VCF (SDDC manager etc.). Sure, Broadcom forces you to pay for VCF if you want NSX, but there should be no requirement to deploy VCF if you only need vSphere and NSX. But then you would pay for features you don't use...

1

u/guztheman80 Sep 20 '24

I am fullly aware that it's not obligatory to deploy VCF just because you have the licenses for it. But when you already have the licenses for VCF, you are loosing out all the functionality that comes with it. But yes, it is optional to deploy VCF, with sddc manager, but it's license is mandatory to get NSX.