Sizing tool

Management Domain Sizing & Fit Check

Reproduces the Broadcom Planning & Preparation Workbook (v1.9.1.102) Management Domain Sizing sheet, and adds the check the spreadsheet lacks: enter the cluster you intend to build and see whether the fleet fits at N-1, and where the headroom is. For vSphere Foundation (VVF), switch the platform: the workbook has no VVF sheet, so that profile is built from Broadcom TechDocs with the same appliance sizes. Both platforms get a licence count (cores and vSAN TiB). Everything runs in your browser; nothing is sent anywhere.

Work top to bottom. Every field says what it is; where a field says Not sure?, that value is a safe starting point you can refine later with the VCF architect.

Your VCF fleet

VCF follows the workbook's management domain (SDDC Manager, NSX, workload domains). VVF has none of those: vCenter, VCF Operations, a License Server and, optionally, the VCF Management Services. In VVF the management VMs usually share the cluster with your workloads.

vSphere Foundation profilenot in the workbook

Built from the TechDocs 9.1 VVF deployment pages, with appliance sizes from the workbook tables. The VCF Installer deploys VVF with a Medium vCenter, a Medium VCF Operations node and Small management services; a manual build can leave the management services out. What it counts and why

The services runtime with fleet and SDDC lifecycle, the software depot and telemetry. Not sure? Include.

The two fields below size the VCF Management Services (services runtime) only. The Installer uses Simple / Small; a JSON spec can change it.

Simple runs one copy of each management appliance — fine for labs and small sites, but a failure takes it offline. High Availability runs clustered copies that survive a failure. Not sure? High Availability.

How large the environment is that VCF will manage. As a guide, the management vCenter at each size handles: Small up to 100 hosts / 1,000 VMs, Medium up to 400 hosts / 4,000 VMs, Large up to 1,000 hosts / 10,000 VMs. Simple is always Small. Not sure? Medium.

First Instance: the first (or only) VCF instance — it also hosts the fleet-wide services. Additional Instance: a second site or region joining an existing VCF fleet. Not sure? First Instance.

vSAN-ESA: storage built from the hosts' own NVMe disks (current generation). vSAN-OSA: the older vSAN with separate cache and capacity disks. NFS / FC: an external storage array. Not sure? vSAN-ESA.

Your hosts

The management cluster you intend to build — the tool checks whether everything above and below fits on it, even with one host down.

Standard: one site. Stretched: the cluster spans two sites so it survives losing a whole site (at least 8 hosts, half per site). Not sure? Standard.

Physical cores of all CPUs in one host together — not threads / hyperthreading.

Only used for the licence count: every CPU is licensed at 16 cores minimum.

How many virtual CPUs may share one physical core. Not sure? 1 (no overcommit — the workbook default; do not go above 2 for management).

How far memory may be overcommitted. Not sure? 1.

Free vSAN space kept for rebuilding after a host failure and for day-to-day operations. Not sure? 30.

Extra storage headroom for future growth. Not sure? 10.

Management infrastructureAdd-ons

Optional infrastructure that runs in the management cluster. Leave anything you have not heard about in the design on Excluded.

Optional extras that most VVF environments do not use. Leave them on Excluded unless the design includes Kubernetes (Supervisor) or the Avi load balancer.

Route traffic between VCF's virtual networks (NSX) and the physical network. NSX Edge is the classic option, VNA the newer VPC option. Not sure? Excluded, unless the network design puts NSX routing on the management cluster.

Only for NSX Federation — one network and security policy spanning several sites. Not sure? Excluded.

The Supervisor runs Kubernetes on vSphere. Only when Kubernetes runs in the management domain; counts its 1 or 3 control-plane VMs. An Edge-backed Supervisor also needs the NSX Edges at Large or bigger. Not sure? Excluded.

The Supervisor runs Kubernetes on vSphere. Without NSX it uses vDS networking with a load balancer (Foundation Load Balancer or Avi). Counts its 1 or 3 control-plane VMs only. Not sure? Excluded.

VMware's load balancer (formerly NSX Advanced Load Balancer), e.g. for Kubernetes or VCF Automation. Counts its 3 controllers; the service engines run in the workload domainsnext to the workloads they serve and are not counted. Not sure? Excluded.

The platform behind vDefend advanced security (intrusion detection, malware prevention). Only with a vDefend licence. Not sure? Excluded.

A small licensing appliance. Needed for vDefend; for Avi only when it is licensed on-premises (Avi can also license directly from the cloud). Not sure? Tick it only if vDefend is bought.

A small licensing appliance, for Avi only when it is licensed on-premises (Avi can also license directly from the cloud). It is not the License Server, which is always counted. Not sure? Leave off.

VVF management software

Small up to 100 hosts / 1,000 VMs, Medium up to 400 hosts / 4,000 VMs, Large up to 1,000 hosts / 10,000 VMs. Not sure? Medium (the Installer default).

VVF includes VCF Operations; you need it to license the hosts. Single Node is what the Installer deploys. HA - 2 nodes adds a replica; HA - 3 nodes adds a data node as well. Not sure? Single Node.

Use the Ops & Logs sizer or Broadcom's estimator for the right size. Not sure? Medium (the Installer default).

TechDocs lists the Cloud Proxy as optional for VVF. Not sure? Small.

The License Server (2 vCPU / 4 GB / 12 GB) is always counted: every VCF Operations instance that manages licences needs one.

VCF management software

The central management and monitoring console of VCF — every VCF fleet has one. Include: deploy it here (it brings a Cloud Proxy and, on a first instance, the License Server). Existing: it already runs elsewhere, e.g. when adding to an existing fleet — only its Cloud Proxy and the License Server are counted. Not sure? Include.

A Cloud Proxy collects data for VCF Operations. It is added automatically with VCF Operations; tick this only when VCF Operations is Excluded but a proxy should still run here.

Self-service portal for provisioning VMs and Kubernetes (formerly Aria Automation) — the private-cloud layer. Not sure? Leave off unless self-service is in scope.

Network monitoring and traffic-flow analysis (formerly Aria Operations for Networks / vRNI). Not sure? Excluded.

Optional services

These run inside VCF's own management platform (the services runtime), so they do not add separate appliances — they add capacity to it. The result below shows how many runtime nodes that comes to.

Central log collection and search (formerly Aria Operations for Logs). Not sure? Exclude, or Small for a small fleet.

High-frequency (real-time) performance data in VCF Operations. Not sure? Leave off.

Only on an additional instance: a local copy of the VCF software repository, and a local sign-in (single sign-on) service. The first instance already has both.

Disaster recovery

Replication and failover to a second site with VMware Live Recovery (formerly Site Recovery Manager / vSphere Replication). Choose what is protected; mark protected workload domains below. Not sure? Exclude.

An isolated recovery environment for ransomware incidents. Only when that add-on is planned.

Workload domains

A workload domain is a separate vCenter + NSX environment where the customer's own workloads run. Its management VMs (vCenter, NSX Managers, and any Avi / vDefend controllers) live in this management cluster, so add one row per planned workload domain. NSX model: Shared reuses an existing NSX, Dedicated gets its own (HA Cluster = 3 managers).

Advanced: override sizes experts

Leave this off unless a design document specifies sizes that differ from the profile. It is the workbook's Advanced Management Domain Sizing.

Fit against your cluster

DimensionFleet needsCluster offersHeadroom

CPU and RAM are checked against the tolerated failure: N-1 (one host) for a standard cluster, or N/2 (the surviving AZ must run everything) for a stretched cluster. For vSAN, storage rebuild is covered by the reserve %, and stretched mirrors a full copy per AZ. For NFS / FC, storage is checked against the datastore capacity you enter; resilience and replication are the array's job.

Fleet requirement

Licensing (these hosts)

Component footprint (0 line items)
ComponentNodesvCPURAM GBDisk GB
vSAN raw capacity breakdown

Figures transcribed from reference/vcf-9.1.1-planning-and-preparation-workbook.xlsx (v1.9.1.102), sheet Management Domain Sizing. This is a planning aid; always confirm the final numbers against the official workbook for your revision. The VVF profile has no workbook sheet to check against: its component list comes from Broadcom TechDocs 9.1 and the licence count from KB 313548 (sources).

ITQ – What's Next. VCF 9.1 deployment-planning and operations helper material. © 2026 Paul van Dieen. hollebollevsan.nl