VCF Automation's main way of hosting tenants (VM Apps being the other organization type). Tenants never see vSphere or NSX: they use VMs, VKS clusters and more from projects and vSphere Namespaces running on Supervisors with NSX VPC networking, separated from each other by namespace and NSX project boundaries.
Read more: Broadcom TechDocs
In the Ultra Transcenders books
Each book explains All Apps organization in context, with comparison tables and the common traps.
Terms in this definition
- VCF Automation
Self-service platform in VCF for provisioning VM, Kubernetes and AI workloads. Providers manage regions and tenants in one portal, while tenants handle projects and consumption in theirs.
- organization
VCF Automation's top-level tenant, completely isolated, owning separate users, networks and resources. Three kinds exist: All Apps, VM Apps and Provider Consumption.
- vSphere
VMware's platform for virtualisation, made up of vCenter and ESX hosts, supplying compute for VCF clusters.
- NSX
Software that handles networking and security across VCF, covering firewalling, load balancing, NAT, VPCs, overlay segments and Tier-0/1 gateways.
- Virtual machines
Infrastructure-as-a-service compute giving complete control of the operating system, making it a fit for lift-and-shift moves and for software relying on OS-level pieces like COM.
- VKS
Supervisor service, previously the Tanzu Kubernetes Grid Service, that deploys and looks after VMware-supported upstream Kubernetes clusters inside vSphere Namespaces.
- NSX VPC
Isolated network space users run self-service under an NSX project, with dedicated subnets, security rules and built-in IPAM; a further tenancy tier.
- NSX Project
Tenant-like boundary in NSX, keeping each group's network and security objects apart within a single deployment; VPCs sit inside one.
Related terms
- region network configuration
To let an All Apps organization create VPCs in a region, VCF Automation applies this per-region configuration, which provides outbound SNAT towards the Tier-0 gateway, an NSX project, a transit gateway and a default VPC along with its connectivity profile.
- region quota
Set per region, this is the share of compute and storage that VCF Automation grants an All Apps organization: VM classes and storage classes cover the whole quota, and CPU and memory are given zone by zone. An organisation can hold just one per region, every quota has a limit, and VM Apps organizations are not subject to them.