Broadcom has released the updated Feature Comparison & Upgrade Paths white paper for VMware Cloud Foundation 9.1 and VMware vSphere Foundation 9.1. This document is the authoritative reference for understanding the differences between VVF, VCF Edge, and full VCF — and it reveals some significant additions worth paying attention to.
Three product tiers, one portfolio
The VMware by Broadcom portfolio is now structured around three primary offerings:
VMware vSphere Foundation (VVF) serves as the entry-level enterprise virtualization platform, combining vSphere, VKS, VCF Operations, and vSAN in a single SKU. It is the logical replacement for vSphere Enterprise Plus, vSphere Enterprise, vSphere for Desktop, and vSphere Scale-Out.
VMware Cloud Foundation Edge is an optimized VCF configuration tailored specifically for edge deployments, supporting single-host all the way up to multi-host clusters. This tier targets environments where full VCF management overhead is impractical, such as remote sites, operational technology environments, and disconnected locations.
VMware Cloud Foundation (full) is the complete private cloud platform, combining all VVF capabilities with NSX, VCF Automation, fleet management, and Private AI Services. All previous VCF tiers (Starter, Standard, Advanced, Enterprise) and vCloud Suite customers are directed here.
What's notably new in 9.1
Confidential Computing is now listed as a feature exclusive to VCF Edge and full VCF, not available in VVF. This is significant for organisations with strict data classification requirements — hardware-enforced memory isolation for sensitive workloads is increasingly relevant in regulated sectors.
DPU and Dual DPU Support also appears exclusively in VCF Edge and VCF, reflecting Broadcom's push toward infrastructure offload using Data Processing Units such as NVIDIA BlueField. This enables compute, networking, and security functions to be offloaded from the host CPU, directly relevant for high-density AI inference environments.
Private AI Services in 9.1 is now a proper platform capability within VCF Automation, including a Catalog Setup Wizard, GPU-capable Deep Learning VM provisioning, Data Services Manager integration for RAG workloads, Vector Databases, AI Agent Builder, and Model Context Protocol (MCP) support. This is exclusively available in VCF Edge and full VCF.
vSAN Cyber Recovery Clusters appear for the first time as a distinct feature in the comparison matrix, available in VCF Edge and VCF (requires Advanced Cyber Compliance add-on). Combined with the existing VMware Live Cyber Recovery integration, this positions VCF 9.1 as a platform with integrated ransomware recovery capabilities.
Security posture: what requires add-ons
One aspect worth calling out explicitly: Compliance Management with remediation — including regulatory compliance baselines such as PCI, custom compliance templates, and vSphere hardening — now requires the Advanced Cyber Compliance (ACC) add-on for both VCF Edge and full VCF. This is a change from earlier versions where some of these capabilities were bundled. Organisations in regulated industries should factor this into their licensing discussions.
Similarly, Configuration Drift Management is listed as deprecated and moved to the ACC add-on. For security-conscious environments, this is a procurement consideration that deserves attention during contract renewal.
Networking highlights
The networking feature delta between VVF and VCF remains substantial. VVF gets vSphere Distributed Switch with L2 capabilities, but everything above that — dynamic routing (OSPFv2/BGP/BFD), VRF, EVPN, NAT, L2/L3 VPN, Virtual Private Clouds, NSX Federation, live traffic analysis, and Traceflow — requires at minimum VCF Edge. For organisations running NSX for micro-segmentation and zero-trust networking, this reinforces VCF as the only viable path.
VCF Operations for Networks (formerly vRNI) is exclusively available in VCF Edge and full VCF, providing end-to-end network visibility across virtual and physical underlay, including FIPS 140-2 compliance for the network operations platform. Physical device integration covers Cisco, Arista, Juniper, and Infoblox.
Upgrade paths clarified
The white paper includes clear upgrade path diagrams that resolve a question many customers have been asking since the Broadcom acquisition. The short version:
- vSphere Enterprise Plus, Enterprise, Desktop, and Scale-Out → vSphere Foundation
- Any combination of vSphere + vSAN + NSX + Aria → VMware Cloud Foundation
- vCloud Suite Enterprise/Advanced → VMware Cloud Foundation
- vCloud Suite Standard → vSphere Foundation
- All previous VCF tiers → VMware Cloud Foundation (with Firewall add-on)
Notably, customers currently using vSphere + vSAN without NSX or Aria are given a choice: full VCF or vSphere Foundation with a vSAN add-on. The latter is the lower-cost option for environments that do not require automation, NSX, or AI capabilities.
Practical takeaway for infrastructure architects
VCF 9.1 continues the trajectory Broadcom set after the acquisition: consolidate the product line, make VCF the premium destination, and bundle AI infrastructure capabilities deeply into the platform. For organisations evaluating their 2026-2027 licensing strategy, the key decision point remains whether NSX and VCF Automation justify the cost delta over VVF. For most enterprise environments — especially those with multi-site deployments, security requirements, or AI ambitions — the answer is yes.
For edge and disconnected environments, VCF Edge in 9.1 deserves a serious look. The combination of single-host cluster support, GitOps-driven desired state management, air-gapped operation, and Private AI inference support makes it a compelling platform for operational technology and mission-critical remote deployments.
The full white paper is available here.
