An architect is designing networking for a developer-ready infrastructure on VMware Cloud Foundation.
Which use case would require the architect to consider a CIDR range larger than /27 for Egress?
An architect is designing networking for a developer-ready infrastructure on VMware Cloud Foundation.
Which use case would require the architect to consider a CIDR range larger than /27 for Egress?
When designing networking for a developer-ready infrastructure on VMware Cloud Foundation, if more than 30 namespaces are required, an architect would need to consider a CIDR range larger than /27 for egress. This is because each egress IP address is assigned per namespace. Therefore, having more than 30 namespaces would exceed the capacity of a /27 range, which only supports up to 30 unique IP addresses.
i Think EvilRobs answer is right....the limitation is one ip pro namespace.
A. More than 30 services are required https://docs.vmware.com/en/VMware-vSphere/7.0/vmware-vsphere-with-tanzu/GUID-B1388E77-2EEC-41E2-8681-5AE549D50C77.html
Shouldn't it be D per that same link? "Only one egress IP address is assigned for each namespace in the Supervisor Cluster."
D is correct Ingress and egress networks allow external workloads to communicate with vSphere pods. Ingress and egress networks have the following characteristics: • They are routed and advertised to external networks through the Tier-0 router. • A /27 CIDR range or higher is the best practice. • One egress IP address is assigned to each segment. • One ingress IP address is assigned to each deployment of type ingress or load balancer. Because the ingress and egress networks are externally accessible, you must carefully consider the size of the CIDR range that you require for each network type. If your ingress subnet is too small, you limit the number of ingress and load balancer services that you can deploy in the cluster. If your egress subnet is too small, you limit the number of segments or namespaces that you can deploy. From VMware Cloud Foundation: Deploy, Configure, Manage [V5.0]
There would be one Egress per vSphere Namespace created, irrespective of the number of TKC clusters/pods created it that namespace
https://docs.vmware.com/en/VMware-vSphere/7.0/vmware-vsphere-with-tanzu/GUID-B1388E77-2EEC-41E2-8681-5AE549D50C77.html#:~:text=Only%20one%20egress%20IP%20address%20is%20assigned%20for%20each%20namespace%20in%20the%20Supervisor%20Cluster