NSX introduced the multi-tenancy framework with NSX Projects and NSX Virtual Private Cloud (VPC), using which you can configure multiple tenants and specific role-based users on a single NSX deployment by delivering flexible resource allocation, management, and cloud-like consumption.

NSX  users across NSX Projects and NSX VPCs can access the same NSX Manager to provision networking and security objects on shared hosts.

For more information, see NSX Multi-tenancy.

NSX Projects

Starting with NSX 4.0.1.1, to support multi-tenancy NSX introduced Projects analogous to a tenant. In an NSX multi-tenancy deployment, users in each project have access to:

  • Objects that they create in their project

  • In a read-only mode, objects that the Enterprise Admin has shared with their project from the default space.

The NSX Project created by the Enterprise Admin provides the capability to assign user roles for the specific Projects. For example, Project Admin, set Quota, DFW rules, Route Filtering, Network Services provisioning, Inventory management (Groups, Services) per NSX Project.     

Note:

In an NSX Project, multi-tenancy environment, a subset of NSX features are available. For more information, see Features Available for Consumption Under NSX Projects.

   

NSX VPCs

Starting with NSX 4.1.1, NSX Virtual Private Clouds (VPCs) was introduced to simplify the setting up of self-contained Virtual Private Cloud networks within an NSX project to consume networking and security services in a self-service consumption model.

NSX VPCs are created by either the Project Admin or Enterprise Admin providing the self-service model for the network services like auto subnet allocations, IPAM, NAT,  L2, L3, DFW, and load balancing.

Note:

NSX VPCs are optional under a project and an NSX Project can be configured with classic Tier-1s without any NSX VPCs.

With NSX 4.1.1, Avi Load Balancer provides load balancing functionality conduit for NSX VPC and NSX Projects starting version 30.1.1.