The Controller is deployed to the Management Network where it can interface with the vCenter Server, ESXi hosts, and Supervisor Cluster control plane nodes. The Service Engines are deployed with interfaces to the Management network and the Data network.

The Management network, such as MGMT-VLAN1009, is where the Controller resides.

The Data network, such as DATA-VLAN1068, is where the Service Engine interfaces connect to the VIP. The load balanced traffic reaches the Service Engines through this network.

The Workload network, such as TKGS-VLAN1000, is where the Tanzu Kubernetes clusters run. The Service Engines do not require interfaces to the Workload network. The Service Engines route the load balanced traffic over the router to the Workload network.