VMware add-ons for VMware Cloud Foundation
You must order separately a number of VMware® add-ons for your VMware Cloud Foundation™ bundle.
VMware Avi Load Balancer add-on
Avi Load Balancer (formerly VMware NSX Advanced Load Balancer) is available as a VMware add-on.
If you need load balancing for your environment, order the Avi Load Balancer from the IBM Cloud® console.
VMware NSX firewall add-ons
The distributed and gateway firewalls are extracted from NSX into the VMware Cloud Foundation bundle and offered as a separate add-on, which is available for purchase in the IBM Cloud console. You must purchase licenses for the number of cores that are required for your environment separately.
Although you must order NSX firewall add-ons to represent your firewall usage, you cannot enter firewall license keys into NSX Manager yet. In the future, VMware Solutions will provide a new set of NSX license keys. Then, you are expected to enter the new NSX license keys, along with the NSX firewall keys that you ordered into NSX Manager.
The NSX firewall add-on is the same for both the distributed and the gateway firewall. You must order the appropriate number of firewall cores for your environment.
- If you are ordering a new VMware Cloud Foundation for Classic - Automated instance, the minimum gateway firewall cores are calculated for your order.
- If you are an existing customer, you must purchase NSX firewall licenses separately for the number of cores that are required for your environment.
- To calculate the number of firewall cores that you need for your environment and to confirm the cost (depending on whether you use distributed, gateway, or no firewall), based on your procurement vehicle, contact your IBM Business Partner representative or IBM Sales representative.
For on-demand, the cost for the firewall add-on is $12.50 per core, per month. Discounts are available depending on your contract commitment.
- Distributed Firewall: For this option, all host cores that are running VMware NSX must be licensed for the DFW Firewall Add-On. This is done because virtual network segments span the entire environment and a virtual machine (VM) can run on any host.
- Gateway Firewall: For this option, the vCPUs that are running on the edge VMs provide the gateway firewall service, therefore they are counted. To get the edge VMs properly configured, the VMs are sized and 4 cores per vCPU in the edge VMs are calculated.
For example, by using the sizing guidance at NSX Edge Installation Requirements if you choose a large edge, then each edge requires 8 vCPU, therefore 32 cores to be licensed: 8 vCPUs in the VM * 4 cores per vCPU = 32 cores
As many environments use multiple edges for redundancy, 2 large edges (8 vCPUs each) require 64 cores worth of licensing: 2 edge VMs * 8 vCPUs per edge * 4 cores per vCPU = 64 cores
vSAN add-on
VMware vSAN is included at a rate of 1 TiB per VMware Cloud Foundation core.
To calculate the amount of vSAN storage for your entire environment, see Counting Cores for VMware Cloud Foundation and vSphere Foundation and TiBs for vSAN. If you need more than 1 TiB of vSAN, order the new vSAN add-on from the IBM Cloud console.
The vSAN add-on is priced at $21 per TiB of vSAN per month. Discounts are available depending on your contract commitment.
The vSAN add-on does not generate any license keys. It is used only to report your vSAN usage.
Ordering the VMware add-ons
You can order the VMware add-ons from the IBM Cloud console.
- Click Infrastructure > Classic Infrastructure from the left navigation menu.
- Click Manage > VMware licenses.
- Order the VMware add-on.
You can also cancel the VMware add-ons from the IBM Cloud® console.
What to do next
If applicable to you, complete the following tasks:
- If you ordered the Avi Load Balancer add-on, also install an Avi (NSX ALB) license key. For more information, see Using NSX Advanced Load Balancer License File.
- If you are planning to order VMware Cloud Foundation for VPC instances, also configure the NSX firewalls for VCF for VPC instances after you deployed your VCF for VPC instance.