Network Design for vRealize Suite Lifecycle Manager

Network Segments

For secure access to the application UI and API, the vRealize Suite Lifecycle Manager appliance is connected to an NSX segment that is overlay-backed (recommended) or VLAN-backed.

This network design has the following features:

vRealize Suite Lifecycle Manager has routed access to the management VLAN through the Tier-0 gateway in the NSX-T Data Center instance for the management domain.
Routing to the management VLAN, NSX segments, and external networks is dynamic and is based on the Border Gateway Protocol (BGP).

The vRealize Suite Lifecycle Manager appliance is connected to the cross-instance NSX segment for secure access to the application UI and API. The NSX segments are connected to the management networks in each VMware Cloud Foundation instance through the NSX Tier-0 and Tier-1 gateways. — Figure 1. Network Design for vRealize Suite Lifecycle Manager

Table 1. Design Decisions on the NSX Segments for vRealize Suite Lifecycle Manager
Decision ID	Design Decision	Design Justification	Design Implication
VCF-VRS-vRSLCM-NET-001	Place the vRealize Suite Lifecycle Manager appliance on an overlay-backed (recommended) or VLAN-backed NSX network segment.	Provides a consistent deployment model for management applications.	You must use an implementation in NSX-T Data Center to support this networking configuration.

IP Addressing Scheme

Allocate a static IP address from the NSX segment to the vRealize Suite Lifecycle Manager appliance.

Table 2. Design Decisions on the IP Addressing Scheme for vRealize Suite Lifecycle Manager
Decision ID	Design Decision	Design Justification	Design Implication
VCF-VRS-vRSLCM-NET-002	Allocate a statically assigned IP address and host name to the vRealize Suite Lifecycle Manager virtual appliance.	Using statically assigned IP addresses ensures stability across the SDDC and makes it simpler to maintain and easier to track.	Requires precise IP address management.

Name Resolution

The IP address of the vRealize Suite Lifecycle Manager appliance is associated with a fully qualified domain name whose suffix aligns with your domain name, and must have valid DNS forward (A) and reverse (PTR) records.

Table 3. Design Decisions on Name Resolution for vRealize Suite Lifecycle Manager
Decision ID	Design Decision	Design Justification	Design Implication
VCF-VRS-vRSLCM-NET-003	Configure forward and reverse DNS records for the vRealize Suite Lifecycle Manager appliance.	vRealize Suite Lifecycle Manager is accessible by using a fully qualified domain name instead of by using the IP address only.	You must provide DNS records for the vRealize Suite Lifecycle Manager appliance.
VCF-VRS-vRSLCM-NET-004	Configure the DNS settings for the vRealize Suite Lifecycle Manager appliance to use DNS servers from its corresponding VMware Cloud Foundation instance.	vRealize Suite Lifecycle Manager requires DNS resolution to connect to SDDC Components.	None.

Name Resolution for Multiple VMware Cloud Foundation Instances

Multiple DNS servers are available across the instances, providing higher DNS availability and resilience.

Table 4. Design Decisions on Name Resolution for vRealize Suite Lifecycle Manager for Multiple VMware Cloud Foundation Instances
Decision ID	Design Decision	Design Justification	Design Implication
VCF-VRS-vRSLCM-NET-005	Configure the DNS settings for the vRealize Suite Lifecycle Manager appliance to use DNS servers in each instance.	vRealize Suite Lifecycle Manager can resolve DNS from local DNS servers during a planned migration or disaster recovery between VMware Cloud Foundation instances.	As you scale from a deployment with a single VMware Cloud Foundation instance to one with multiple VMware Cloud Foundation instances, the DNS settings the vRealize Suite Lifecycle Manager appliance must be updated.

Time Synchronization

vRealize Suite Lifecycle Manager depends on time synchronization.

Table 5. Design Decisions on Time Synchronization for vRealize Suite Lifecycle Manager
Decision ID	Design Decision	Design Justification	Design Implication
VCF-VRS-vRSLCM-NET-006	Configure the NTP settings for the vRealize Suite Lifecycle Manager appliance to use NTP servers in the first VMware Cloud Foundation instance.	vRealize Suite Lifecycle Manager depends on time synchronization.	None.

Time Synchronization for Multiple VMware Cloud Foundation Instances

Multiple NTP servers are available across the instances, providing higher NTP availability and resilience.

Table 6. Design Decisions on Time Synchronization for vRealize Suite Lifecycle Manager for Multiple VMware Cloud Foundation Instances
Decision ID	Design Decision	Design Justification	Design Implication
VCF-VRS-vRSLCM-NET-007	Configure the NTP settings for the vRealize Suite Lifecycle Manager appliance to use NTP servers in each VMware Cloud Foundation instance.	vRealize Suite Lifecycle Manager can query NTP from local NTP servers to synchronize time during a planned migration or disaster recovery between the VMware Cloud Foundation instances.	As you scale from a deployment with a single VMware Cloud Foundation instance to one with multiple VMware Cloud Foundation instances, the NTP settings on the vRealize Suite Lifecycle Manager appliance must be updated.