As a part of this design, use the application virtual network configuration to connect the vRealize Automation proxy agents with the other management solutions in the ROBO site.

This design uses NSX logical switches to abstract the vRealize Automation application and its supporting services. You can place the application in any site regardless of the underlying physical infrastructure such as network subnets, compute hardware, or storage types.

Application Virtual Networks

The vRealize Automation appliance and main IaaS components are installed in the cross-region shared application virtual network in the hub, and the vSphere proxy agent nodes are installed in the shared application virtual networks in each ROBO site.

This networking design has the following features:

  • The vRealize Automation appliance and IaaS nodes are on the same network because they can be failed over between regions of the hub. vRealize Automation and vRealize Business also share this network.

  • All nodes in the hub have routed access to the vSphere management network through the NSX Universal Distributed Logical Router.

  • Routing to the vSphere management network and other external networks is dynamic and is based on the Border Gateway Protocol (BGP).

  • All nodes in the ROBO site have routed access to the vSphere management network through the NSX Distributed Logical Router.

For more information about the networking configuration of the application virtual network, see Virtualization Network Design in ROBO and NSX Design in ROBO.

Table 1. Design Decisions on the Application Virtual Network for vRealize Automation

Decision ID

Design Decision

Design Justification

Design Implication


Place the vRealize Automation IaaS Proxy Agent virtual machines on the management application virtual network.

According to ROBO-VI-SDN-026, all management virtual machines must reside on VXLAN backed networks, unless you must satisfy an explicit requirement to use VLAN backed port groups for these virtual machines .

All management applications share the same Layer 2 broadcast domain.