NSX VPC generated automatically once regional networking is completed for a VCF Automation organization, alongside an NSX project, a transit gateway, a default VPC connectivity profile and an SNAT rule.
Read more: Broadcom TechDocs
In the Ultra Transcenders books
Each book explains Default VPC in context, with comparison tables and the common traps.
Terms in this definition
- NSX VPC
Isolated network space users run self-service under an NSX project, with dedicated subnets, security rules and built-in IPAM; a further tenancy tier.
- Once flow
A flow that executes a single time and repeats only if the pipeline is fully refreshed. It's a common choice for a first full load ahead of a change feed, and that refresh becomes dangerous once the original files no longer exist.
- Nonzonal
Describes a resource with no availability zone configuration. Azure can put it in any zone, so it may go offline if that zone fails.
- organization
VCF Automation's top-level tenant, completely isolated, owning separate users, networks and resources. Three kinds exist: All Apps, VM Apps and Provider Consumption.
- NSX Project
Tenant-like boundary in NSX, keeping each group's network and security objects apart within a single deployment; VPCs sit inside one.
- transit gateway
Joins up a project's VPCs with each other and with outside networks in NSX, either in a distributed fashion on the hosts or centrally via a Tier-0 gateway running on an Edge cluster.
- SNAT
Translating the source address of a flow. Azure Firewall does this automatically to its public IP for outbound internet traffic, and NAT gateway supplies SNAT ports for outbound connections.
Related terms
- NSX segment model
A way to consume networking that gives every advanced NSX feature, with the network team building topologies from segments plus Tier-0 and Tier-1 gateways. Designs choose it over the default VPC model for advanced Tier-1 security, VPNs on Tier-1 gateways, or Layer 2/Layer 3 extension between VCF Instances with NSX Federation; VCF Automation All Apps organizations cannot use it.
- region network configuration
To let an All Apps organization create VPCs in a region, VCF Automation applies this per-region configuration, which provides outbound SNAT towards the Tier-0 gateway, an NSX project, a transit gateway and a default VPC along with its connectivity profile.