https://blog.vcf9.aiField notes on designing, securing and running VMware Cloud Foundation 9.https://blog.vcf9.ai/posts/vpc-in-vcf-9-1/https://blog.vcf9.ai/posts/vpc-in-vcf-9-1/Sun, 18 Oct 2026 09:00:00 +0000VCF 9.1 gives VPCs multiple transit gateways, stateful services without NSX Edges, VLAN-backed subnets and firewall-free isolation between VPCs. Here is how the model fits together and where it changes what your physical firewall sees.https://blog.vcf9.ai/posts/network-model-changes-firewall-rule-count/https://blog.vcf9.ai/posts/network-model-changes-firewall-rule-count/Sun, 18 Oct 2026 09:00:00 +0000Same products, same features, same answers. Only the network model changed, and the final rule count moved from 176 to 228. Here is why, and why you should compare models before committing to a design.https://blog.vcf9.ai/posts/layer-2-same-vlan-flows/https://blog.vcf9.ai/posts/layer-2-same-vlan-flows/Sun, 18 Oct 2026 09:00:00 +0000Traffic between two components on the same VLAN never crosses a firewall, yet the ports catalogue lists it like any other flow. Removing it took 408 rules out of one customer's rule set.https://blog.vcf9.ai/posts/most-vcf-flows-never-need-a-firewall-rule/https://blog.vcf9.ai/posts/most-vcf-flows-never-need-a-firewall-rule/Sun, 18 Oct 2026 09:00:00 +0000The Broadcom ports catalogue lists every port for every product. It is not a firewall design. Here is how a 12-step assessment cut one customer's candidate rules by 79%, with a reason recorded for every exclusion.