Skip to main content

Posts

AI Agents on VMware Cloud Foundation: Security, Isolation and the Blast Radius Problem

Running an AI model is one thing. Running an AI agent that can actually perform actions inside an enterprise environment is a very different architecture problem. A traditional model interaction is roughly: Prompt → Model → Response An agent can go much further: Objective → Reason → Retrieve → Select Tool → Execute → Observe For me, the important word is execute . Once an AI system can call APIs and change something, this is no longer only a model-hosting problem. It becomes a security, infrastructure and operational architecture problem. Think of an Agent as a Workload with Authority Imagine an infrastructure operations agent. It might read monitoring data, inspect logs, search documentation and recommend a remediation. So far, the blast radius is limited. But then somebody asks: "Why can't it just fix the problem automatically?" That question changes the architecture. An AI agent is not only an intelligent application. It is an appl...

Private AI on VMware Cloud Foundation: How I Would Architect It

Private AI on VMware Cloud Foundation: How I Would Architect It There is a big difference between running an AI model and building an AI platform. We can attach GPUs to infrastructure, deploy an LLM and expose an endpoint fairly quickly. That proves the technology works. It does not mean we have built an enterprise AI platform. Once different application teams start asking for models, GPUs, knowledge bases and AI agents, the architecture problem changes. Now we need to think about shared infrastructure, isolation, model lifecycle, data access, GPU utilization, security, observability and cost. That is the point where I think VMware Cloud Foundation becomes more interesting. In this article, I want to look at the problem from an architect's perspective: If I already have VMware Cloud Foundation, how would I structure it to provide Private AI as a platform rather than simply running a few AI workloads? Start with the Consumer, Not the GPU One mistake I would av...

Running Enterprise AI Agents on VMware Cloud Foundation: An Architect's View

For the last couple of years, most infrastructure conversations around AI have started with GPUs. "How many GPUs do we need?" "Should we use NVIDIA or something else?" "Should the workload run on-premises or in public cloud?" Those are valid questions. But with AI agents entering enterprise environments, I think we need to ask a different question first. What kind of platform do we need when AI is no longer just answering a prompt, but actually performing work? This changes the architecture discussion considerably. An AI agent may call an LLM, query enterprise data, invoke an API, execute code, contact another agent and make several decisions before returning a result. From an infrastructure perspective, that is not simply "another AI workload". It is a distributed application with some unusual characteristics. And this is where VMware Cloud Foundation becomes interesting. AI Agents Change the Infrastructure Conversation C...

The AI Summit and What It Really Means for Your Career

As I write this, the global AI Impact Summit is happening in New Delhi. The first ever AI summit in the developing world. Prime Minister Modi just delivered his inaugural address. UN Secretary General is there. Sam Altman, Sundar Pichai, business leaders from across the globe are gathered at Bharat Mandapam. And my LinkedIn feed is full of the same question. "Will AI take my job?" Last week, a colleague working in banking operations called me. He had just read another article predicting massive job losses from AI. He sounded genuinely worried about his future in financial services. I understand this fear. But I also think we are looking at this completely wrong. What the Leaders Actually Said Today Let me tell you what struck me about Modi's speech this morning. He presented the "MANAV Vision" for AI. But more importantly, listen to what he actually said. "While some see fear in AI, others see the future. I can say with utmost pride t...

Troubleshooting vSAN Storage Policy Migration Failures in VMware Cloud Foundation 9.0

Recently I had a customer who migrated their VMware infrastructure from vSphere 7.0 to VMware Cloud Foundation 9.0. After the migration, they wanted to update their vSAN storage policies to take advantage of the new vSAN ESA (Express Storage Architecture) features. However, when they tried to change the storage policy for their production VMs, the operation kept failing with a cryptic error message. The error they were getting was: "Cannot complete operation due to insufficient resources to satisfy current storage policy." This was strange because they had plenty of disk space available. The vSAN cluster was only at 45% capacity, and all the hosts were healthy. Let me walk through how we troubleshooted and fixed this issue. Understanding the Problem First, let's understand what was happening in their environment: They had a 6-node vSAN cluster running VCF 9.0 vSAN was configured with the new ESA architecture They were trying to migrate VMs fro...

Fixing Tanzu Kubernetes Pod to External Services Connectivity Issues with NSX-T

Fixing Tanzu Kubernetes Pod to External Services Connectivity Issues with NSX-T Last month I got a call from a customer who was pulling their hair out over a networking issue. They had just deployed VMware Tanzu Kubernetes Grid on their vSphere with Tanzu environment, everything looked good in the dashboards, all pods were running, but their applications inside the pods could not reach external databases running on traditional VMs in the same datacenter. The frustrating part was that some pods could reach external services perfectly fine, while others would just timeout. There was no clear pattern. Let me tell you how we figured this out and fixed it. The Initial Problem Here is what the customer setup looked like: vSphere 8.0 with Tanzu enabled NSX-T 4.1.2 for networking Three Tanzu Kubernetes clusters running different microservices applications External PostgreSQL database running on traditional VMs (non-Kubernetes) External API services running on another se...

Unlocking VMware Cloud Foundation 9.0: A Strategic Blueprint for Enterprise Transformation

The evolution of VMware under Broadcom represents not disruption, but clarification—a focused vision toward unified private cloud excellence. As organizations navigate this transformation, the opportunity has never been greater to build truly modern, efficient, and powerful infrastructure with VMware Cloud Foundation. After architecting VMware solutions across diverse enterprise environments, I've observed a pattern: organizations that embrace VMware Cloud Foundation (VCF) strategically—rather than viewing the transition as a burden—emerge with significantly more capable, cost-effective, and future-ready infrastructure. This post shares a practical framework for successfully modernizing your VMware environment, maximizing your investment, and positioning your organization for the AI-driven, cloud-native future. Understanding the VMware Cloud Foundation Vision Let's start with clarity about what Broadcom and VMware are building: VMware Cloud Foundati...