Module 7: Multi-Tenancy

Learning Objectives

By the end of this module, you will be able to:

• Design a multi-tenant environment with proper isolation and resource boundaries
• Create tenants and allocate resources using the VergeOS tenant management system
• Configure tenant recipes for standardized, repeatable tenant provisioning

Prerequisites

• Completion of Module 1: Architecture Fundamentals — understanding of VergeOS platform architecture
• Completion of Module 4: Networking — understanding of virtual networks and tenant network isolation
• Completion of Module 5: Storage — understanding of vSAN tiers and storage allocation
• Completion of Module 6: Virtual Machines — understanding of VM provisioning and recipes

Estimated Time

3 hours (1.5 hours reading + 1.5 hours lab)

VMware Bridge

VergeOS multi-tenancy is fundamentally different from VMware’s approach. In VMware, multi-tenancy is typically achieved through vRealize Automation, NSX micro-segmentation, and resource pools within a shared vCenter — resulting in a complex stack of products. VergeOS provides native tenancy as a first-class platform feature: each tenant runs as an isolated virtual data center (VDC) with its own networking, storage, and compute resources. Think of it as “nested vCenters” but with far less overhead and built-in isolation at every layer.

Nutanix Bridge

Nutanix multi-tenancy is achieved through Prism Self-Service (formerly Calm) and Projects in Prism Central, which provide role-based access control, quotas, and resource isolation. However, tenants share the same Prism management plane and AOS infrastructure — isolation is logical, not architectural. VergeOS provides native tenancy where each tenant runs as a fully isolated Virtual Data Center (VDC) with its own networking stack, storage allocation, and management interface. Think of it as each tenant getting their own Prism Central, but without the overhead of a separate deployment.

Topics

Virtual Data Center Concepts

Understanding VergeOS tenants as isolated virtual data centers, resource allocation models, and tenant hierarchy.

Creating & Configuring Tenants

Creating tenants, assigning compute, memory, and storage quotas, and configuring tenant-level networking.

Tenant Recipes

Building reusable tenant recipes for standardized provisioning, including pre-configured networks, VMs, and settings.

Resource Allocation & Scaling

Tenant node planning, right-sizing strategies, and scaling paths for single-node and multi-node tenant deployments.

Tenant Isolation & Security

Network isolation between tenants, resource guarantees, and security boundaries in a multi-tenant deployment.

Lab: Multi-Tenant Environment

Create tenants, allocate resources, deploy from a tenant recipe, and verify tenant isolation.

Module Outline

1. Virtual Data Center Concepts — VergeOS tenant architecture, virtual data centers, resource allocation models, and use cases (MSP, enterprise, lab environments)
2. Creating & Configuring Tenants — Creating tenants via UI, assigning CPU/memory/storage quotas, configuring tenant networking and access
3. Tenant Recipes — Building and managing tenant recipes for repeatable deployments, pre-configured tenant templates
4. Resource Allocation & Scaling — Tenant node planning, right-sizing strategy, scaling vertically and horizontally
5. Tenant Isolation & Security — Network encapsulation, storage isolation, tenant resource guarantees, and security best practices
6. Lab: Multi-Tenant Environment — Hands-on tenant creation, resource allocation, recipe-based deployment, and isolation verification