recent posts
- Testing the VCF 9.1 Distributed Connection Model with BGP EVPN and VXLAN
- Using Kasm as a Browser-Based Jump Point for a VCF 9 Lab
- Building the Foundation for a VCF Automation All Apps Landing Zone with Terraform
- Using Keycloak as an OIDC Identity Provider for a VCF Automation Organization
- Guardrails in VCF Automation 9.1
about
Category: platform architecture
-
Terraform can describe parts of a VCF Automation 9.1 All Apps landing zone, but not the full model end to end. In this post I walk through the first layers of the landing zone foundation, including organization creation, identity provider configuration, quota, networking, content library and namespace consumption, while also calling out where the current…
-
Self-service without guardrails is just delegated infrastructure access with a nicer interface. In this post I look at guardrails in the VCF Automation 9.1 All Apps model, and how organizations, quotas, namespaces, networking, policies, and extensibility work together to make private cloud consumption safer and more repeatable.
-
In my previous article, I reflected on what I would design differently if I were building an NSX platform today. That piece focused on architectural choices — fewer abstractions, clearer boundaries, stronger defaults. But design decisions are only part of the story. What ultimately matters is who carries responsibility for how the platform behaves over…
rutgerblom.com 