vSAN stretched cluster requires a witness host deployed in a third location, different from the location of both availability zones.

In VMware Cloud Foundation, you deploy the vSAN witness appliance instead of using a dedicated physical ESXi host as a witness host. Unlike a general purpose ESXi host, the witness appliance does not run virtual machines and its only purpose is to serve as a vSAN witness.