An HCX Service Mesh is the effective HCX services configuration for a source and destination site. A Service Mesh can be added to a connected Site Pair that has a valid Compute Profile created on both of the sites.

Adding a Service Mesh initiates the deployment of HCX Interconnect virtual appliances on both of the sites. An interconnect Service Mesh is always created at the source site.


Creating a Service Mesh requires:

  • A connected Site Pair.

  • A valid compute profile at the HCX Source site.

  • A valid compute profile at the HCX destination site.

  • For each switch that is present in the Compute Profile at both the source and the destination sites, the switch must span all hosts in at least one of the compute clusters. If the switch does not span all hosts in the compute cluster, then it is possible that the Network Extension appliance is deployed on a different host in a compute cluster and spans across a different switch. In this case, the Service Mesh deployment can fail.


  1. Navigate to the Service Mesh interface:
    1. In the vSphere Client, navigate to HCX > Interconnect > Multi-Site Service Mesh > Service Mesh tab.

    Created Service Mesh configurations are listed.

  2. Click Create Service Mesh:
    Shows the Create Service Mesh button highlighted in the HCX Manager Interconnect > Service Mesh screen.
  3. Select Sites:
    1. Click each drop-down and select a source and destination site. Only connected Site Pairs are displayed.
    2. Click Continue.
  4. Select Compute Profiles:
    1. Click the Select Source Compute Profile drop-down and select a Compute Profile.
    2. Click the Select Remote Compute Profile drop-down and select a Compute Profile.
    3. Click Continue.
  5. Select the HCX services to be activated, and click Continue:

    Premium services require an additional HCX Enterprise license.

    List of services to enable with an unique icon for each service. Upon selecting a service, a green check appears with the icon.
  6. (Optional) Override the default Uplink Network Profile:

    By default, the HCX interconnect uses the Uplink Network Profiles defined in the Compute Profile for the source and the destination sites. You can override the default. As an example, an override can be useful in Cloud Director-based deployments where an uplink network that deviates from a common configuration is created for an Organization to consume during the Service Mesh creation.

    1. Click the Select Source Uplink Network Profile drop-down.
    2. Select one or more networks. Click Close.

      The HCX Service Mesh can use up to three HCX Uplinks, adding network path failover and improving overall resiliency for HCX services. Multiple HCX Uplinks are not aggregated for increased throughput capacity. The following specific behaviors apply:

      • HCX attempts to load balance traffic on the Network Extension (HCX-NE) appliance based on characteristics of the flow and the performance of the uplinks.

      • HCX does not load balance migration traffic on the Interconnect (HCX-IX) appliance. Additional uplinks may or may not be used.

    3. Click Continue.
    4. Optionally, repeat these steps for the destination site.
  7. Configure the Network Extension appliances deployed per switch or Transport Zone:

    As an example, this advanced configuration can be useful when deploying Network Extension appliances to extend high volume source networks.

    1. In Advanced Configuration - Network Extension Appliance Scale Out, review the default Extension appliances per Network Container.
    2. For each entry, set the number of Network Extension appliances that HCX deploys when it activates the Service Mesh configuration.

      Extended network service can be carried by a single (standalone) Network Extension appliance at each site, or an HA group that consists two Network Extension appliances at each site. For example, to create two standalone Network Extension appliances and one HA group for a container entry, set the scale-out number to 4 (2 + 1 x 2 = 4) in the Service Mesh.

      The default setting is 1. This setting restricts the Service Mesh to deploying one Network Extension appliance.


      You must configure the Network Extension Appliance limit in the Compute Profile at both the source and remote sites to equal or exceed the number of scale-out appliances set in the Service Mesh.

      For system resource considerations, see System Requirements for HCX.

    3. Click Continue.
  8. (Optional) Configure HCX Traffic Engineering features:

    The Application Path Resiliency and TCP Flow Conditioning features are available with the HCX Enterprise license.

    1. To create multiple transport tunnels for directing the HCX traffic to a destination site, check Application Path Resiliency.

      To view the available tunnels after completing the Multi-Site Service Mesh configuration, navigate to Interconnect > Multi-Site Service Mesh > Service Mesh > View Appliances and expand the HCX-WAN-IX appliance.

      Important: Additional dynamic tunnels use a random source UDP port in the 4500 - 4628 range to create a different flow for each tunnel. Ensure the firewall settings on either side allow for that connectivity.
    2. To dynamically manage the TCP segment size and optimize the transport performance for the HCX Network Extension service traffic, check TCP Flow Conditioning.

      This option is available only after activating the HCX Network Extension service.

    3. To manage the bandwidth consumed for migrations across all uplink networks, use the up and down arrows to change the bandwidth setting.

      This option is available only after activating the HCX WAN Optimization service.


      It is a best practice to retain the default setting of 10000 Mb/S.

  9. Review Topology Preview:
    1. Review the selected clusters and resources.
    2. Click Continue.
  10. Ready to Complete:
    1. To view a summary of the Service Mesh selections, click the here link.
    2. Name the Service Mesh.
      The Service Mesh name has a limit of 50 characters.
    3. To create the service mesh, click Finish.

What to do next

If it is necessary to make any direct changes to an existing Services Mesh, such activating or deactivating services and overriding uplinks, select Interconnect > Service Mesh > Edit. The editing workflow includes a preview screen, listing the changes and describing the impact of those changes on related services prior to finishing the procedure. You can select to complete or cancel the update.