As enterprise infrastructure evolves toward highly automated, software-defined architectures, traditional perimeter-centric security models are increasingly ineffective at protecting against modern attack vectors. While organizations have invested heavily in securing north-south traffic flows, many environments still permit unrestricted east-west communication between…
When deploying applications on VMware vSphere Kubernetes Service (VKS), one of the questions that often comes up is how applications are exposed outside the Kubernetes cluster. Kubernetes provides the concepts needed to expose applications, such as Service and Ingress, but…
I had the pleasure of being invited to be a guest on the VMware Podcast vBarbeque talking about VKS on VCF.
If you’re running VMware vSphere Kubernetes Service (VKS) and want to deploy a containerized application, the process is very similar to deploying workloads on any standard Kubernetes cluster. At a high level, the workflow looks like this: Container image →…
Kubernetes has become the standard platform for running containerized applications, but Kubernetes itself is only part of the story. Organizations still need to decide where Kubernetes runs, how clusters are managed, how networking and storage are provided, and who is…
As organizations modernize their application portfolios, Kubernetes has become the de facto platform for deploying and operating cloud-native applications. The challenge for many enterprises is not whether to adopt Kubernetes, but how to do so without creating additional infrastructure silos,…
For years, infrastructure transformations have largely been driven by technology. New hardware, new hypervisors, new management tools, and new architectures promised greater efficiency and scalability. Yet many organizations discovered that while the technology changed, the way they operated did not.…
Designing for FTT=1 and STT=1 Without Creating Hidden Risk vSAN Stretched Clusters are often positioned as the pinnacle of on‑premises availability design: two active data centers, synchronous storage replication, and automated recovery. Yet in practice, many stretched clusters fail not…
Admission Control is the policy engine within VMware vSphere HA that enforces survivability guarantees.Its purpose is not performance optimization—it is risk containment. Admission Control ensures that the cluster never commits more compute resources than it can safely recover after a defined failure…
VMware stretched clusters are frequently treated as the gold standard of availability design. They promise zero recovery point objective, automated failover, and the comforting idea that an entire site can disappear without anyone noticing. In presentation decks and architecture diagrams,…
