A transport zone is used to define the scope of a VXLAN overlay network and can span one or more clusters within one vCenter Server domain. One or more transport zones can be configured in an NSX for vSphere solution. A transport zone is not meant to delineate a security boundary.

Table 1. Design Decisions on Transport Zones

Decision ID

Design Decision

Design Justification

Design Implications


Use a single global transport zone.

A single transport zone localizes networks and security policies within a ROBO.



Enable Controller Disconnected Operation (CDO) mode.

During times when the NSX controllers are unable to communicate with ESXi hosts data plane updates, such as VNIs becoming active on an ESXi host, still occur.

Enabling CDO mode adds some overhead to the hypervisors when the control cluster is down.