VMware Kubernetes Service (VKS): Kubernetes Without the Complexity

One of the headline announcements at VMware Explore 2025 was the evolution of Kubernetes within VMware Cloud Foundation through the VMware Kubernetes Service (VKS).

For years, Kubernetes adoption has been hindered by complexity. Enterprises struggled with multi-cluster sprawl, uneven compliance, patching headaches, and the lack of operational expertise. VKS directly tackles these challenges by embedding Kubernetes as a fully managed, enterprise-grade service within vCF 9.0.

Why VKS Matters

Lifecycle Automation: VKS automates the full Kubernetes lifecycle—from cluster provisioning to patching, upgrades, and decommissioning—without requiring manual intervention. Consistency Across Environments: Whether running in a central data center, regional hub, or edge location, VKS provides a consistent operational model. Integrated Security: Security is enforced at the platform level, including RBAC, identity integration via Pinniped, network policies, and continuous compliance checks. Unified Developer Experience: Developers interact with Kubernetes the same way they would in the public cloud, but IT operations are unified and simplified under vCF.

Image suggestion: Screenshot or diagram of the VKS lifecycle workflow (cluster creation → monitoring → scaling → upgrade).

Developer Velocity at Scale

With VKS, developers can:

Spin up CNCF-compliant clusters directly through self-service portals or GitOps workflows. Use familiar toolchains such as VS Code, GitHub, Helm, and CI/CD pipelines without disruption. Seamlessly move between containerized workloads and traditional VMs on the same vCF platform.

Meanwhile, IT teams maintain centralized visibility and governance—ensuring developers move fast without creating compliance or security risks.

VKS in the Real World

Imagine a financial services company running trading apps and AI models side by side. With VKS:

Dev teams deploy microservices in Kubernetes for real-time transaction monitoring. Data teams spin up GPU-enabled clusters for AI-driven risk analysis. IT maintains audit trails, compliance enforcement, and disaster recovery policies automatically.

The result is not just agility, but confidence—something enterprises can’t afford to compromise.

Key Point on VKS: By embedding Kubernetes directly into vCF 9.0, VMware has eliminated the barriers to enterprise-scale adoption—turning what was once a fragmented, complex ecosystem into a streamlined, policy-driven service.

.

This unified approach reduces operational overhead while empowering organizations to focus on innovation, not integration.

Canonical – Ubuntu embedded into VCF

The partnership with Canonical, the company behind Ubuntu, was another major highlight. By directly embedding Ubuntu into vCF, VMware strengthens both performance and security for enterprise cloud-native environments.

Key benefits include:

Chiseled Containers: Minimal, purpose-built containers containing only essential components—reducing attack surface and improving security posture. vGPU-ready Infrastructure: AI/ML workloads can now run with native GPU drivers pre-integrated, making vCF the fastest path to AI-ready infrastructure. Long-Term Supported (LTS) Ubuntu Images: Enterprises get fully maintained, hardened Ubuntu releases supported by Canonical—eliminating patching and upgrade guesswork.

This collaboration ensures developers and IT teams benefit from the best of both worlds: VMware’s enterprise-grade infrastructure with Ubuntu’s cloud-native agility.

Empowering Developer Autonomy with IT Governance

One of the most important themes of the session was balance: developers need freedom to innovate, while IT needs control to maintain compliance and governance. VMware’s vCF delivers exactly that.

Robust multi-tenancy: Business units like legal, finance, engineering, and operations can each consume resources independently under central IT policy. Self-service consumption: Developers gain direct access to Kubernetes, VMs, storage, and networking resources without waiting for IT tickets. Policy-driven governance: IT admins can predefine guardrails while still enabling flexibility for developers.

Examples included services like:

Private AI as a Service – Secure access to AI images and toolchains, ready to deploy in private environments. Database-as-a-Service (DBaaS) – Pre-approved versions of Postgres, MySQL, and SQL Server delivered instantly with compliance controls.

Image suggestion: Demo screenshot showing developers launching Kubernetes + AI services from a self-service catalog.

This dual approach makes it possible for enterprises to move fast without breaking things—a recurring theme throughout the keynote.

Conclusion: A New Era of Cloud-Native Infrastructure

The message from VMware Explore was clear: Kubernetes isn’t just an add-on to vCF—it’s a first-class citizen. With seamless integration, CNCF compliance, Ubuntu collaboration, and AI-ready infrastructure, VMware is positioning vCF as the most secure, most complete, and easiest-to-manage private cloud platform for cloud-native workloads.

As organizations embrace containers, microservices, and AI-driven applications, vCF with Kubernetes and Ubuntu provides a future-proof foundation that scales without sacrificing security or governance.

Image suggestion: Closing keynote slide with “Cloud-Native at Scale” headline.

Key Takeaway: VMware is delivering a streamlined, enterprise-ready Kubernetes platform with vCF 9.0—uniting the developer’s need for speed with IT’s need for control.

In 2025, the cloud isn’t just a place to run apps—it’s a key part of every company’s strategy. At first, the public cloud seemed perfect, offering unlimited growth, flexibility, and fast innovation. But now, many businesses are seeing the downsides: rising costs, slower performance, and strict data rules. That’s why more companies are starting to bring their workloads back on-premises or into hybrid cloud setups. It’s a quiet shift, but it’s changing everything.

Leading this movement is VMware Cloud Foundation (VCF) 9.0, Broadcom’s rearchitecture of the private cloud platform. So it is a lot more than just an upgrade, VCF 9.0 delivers a unified experience for virtual machines (VMs), containers, and AI workloads, offering unmatched automation, security, and cost control. Let’s explore why VCF 9.0 is a platform every modern enterprise should consider.

The Cloud Reset: Why Private Cloud Is Back

Today’s enterprise cloud reality is more complex than ever. While the public cloud offered agility and scalability, many organizations now face escalating cloud bills, unpredictable performance, and data residency concerns due to evolving global regulations. Broadcom’s latest research reveals that 69% of enterprises are actively repatriating workloads back to on-premises or sovereign cloud environments, driven by the need for cost control, governance, and operational consistency.

VMware Cloud Foundation 9.0 is Broadcom’s direct response to this shift. It enables enterprises to run modern workloads—including VMs, containers, and AI/ML pipelines—within a cloud-like environment deployed on-premises, at the edge, or within hybrid architectures that span hyperscalers and sovereign cloud partners. With native integration into platforms like Azure VMware Solution, Google Cloud VMware Engine, and AWS VMware Cloud, VCF 9.0 provides true workload mobility, allowing businesses to run applications wherever it makes the most economic or strategic sense.

Crucially, VCF 9.0 brings operational parity across environments. Whether workloads are on-premises or in the cloud, IT teams can use the same tools, policies, and automation frameworks to deploy, manage, secure, and optimize them. This eliminates the silos and complexity that traditionally plagued hybrid strategies. This consistency also helps organizations meet regulatory demands for data sovereignty while enabling innovation at the edge or in the public cloud.

In essence, VCF 9.0 offers the best of both worlds: the control and performance of on-premises infrastructure with the agility and scalability of the cloud. It’s not just about bringing workloads back—it’s about running them smarter, wherever they deliver the most value.

Unified Platform Architecture

One of VCF 9.0’s most powerful advantages is its single control plane architecture. This unifies every layer of the IT stack—compute, storage, networking, identity, security, and automation—into a cohesive, centrally managed platform. This approach not only eliminates infrastructure silos but also dramatically simplifies how environments are deployed, maintained, and scaled.

Through the new Operations Console and Quick-Start App, VCF 9.0 empowers IT teams to manage the entire cloud lifecycle—from Day-0 design to Day-1 deployment and Day-2 operations—from a single pane of glass. What once took days or weeks of coordinating across teams and toolsets can now be achieved in hours, with fewer errors, lower cost, and full compliance.

Key components of the unified control plane include:

• vSphere for abstracting and managing compute resources with deep VM and container integration.
• vSAN ESA (Express Storage Architecture) for delivering high-performance, cost-optimized storage with global deduplication.
• NSX with Enhanced Data Path for programmable, secure, and high-throughput networking across all tenants and workloads.
• VMware Aria (formerly vRealize) for cost visibility, performance optimization, workload insights, and lifecycle automation.

Efficiency and Performance Gains

VCF 9.0 delivers a transformative leap in efficiency and performance optimization, enabling enterprises to achieve significantly more with less. At the core of this improvement is advanced NVMe memory tiering, which intelligently prioritizes critical workloads across memory tiers, driving a 38% reduction in memory and server Total Cost of Ownership (TCO).

On the storage front, the adoption of vSAN ESA (Express Storage Architecture) with global deduplication offers up to 34% savings by eliminating redundant data and enabling smarter capacity utilization. Networking has also received a major upgrade, with the enhanced NSX datapath delivering up to 3x the throughput, reducing latency and CPU load while freeing up compute cycles for mission-critical applications. Notably, AI and GPU-driven workloads benefit from near-zero disruption thanks to vGPU vMotion, which enables seamless live migration of workloads without interrupting performance.

Together, these innovations allow organizations to maximize infrastructure ROI, reduce operational overhead, and scale intelligently—delivering cloud-level elasticity and performance within the efficiency bounds of a private cloud model.

A summary of the most exciting advancements in VCF 9.0’s efficiency and throughput:

• 38% lower memory and server TCO via NVMe memory tiering.
• 34% lower storage costs with vSAN ESA global deduplication.
• 3x better network performance with enhanced NSX datapath.
• Near-zero downtime for AI workloads with vGPU vMotion.

These features allow enterprises to run more workloads with fewer resources, leading to faster ROI and reduced overhead.

Built-In Security and Resilience

In VCF 9.0, security isn’t an afterthought; it’s intrinsically built into every layer of the stack. As cyber threats become more sophisticated, security must be foundational. VCF 9.0 embraces this philosophy by delivering a zero-trust architecture and operational resilience by design.

At the heart of VCF 9.0’s security strategy is the new Security Operations Dashboard, which provides IT and SecOps teams with real-time visibility into security posture, system compliance, and known vulnerabilities. With automated CVE tracking, compliance alerts, and guided remediation workflows, teams can now respond to emerging threats in minutes, not days.

VCF 9.0 also supports Confidential Computing, leveraging Intel TDX and AMD SEV-SNP to isolate workloads at the hardware level. This ensures that even privileged software cannot access sensitive memory regions. Combined with FIPS 140-2 validated encryption, STIG-compliant configurations, and TLS 1.3 support, VCF provides the cryptographic assurance required for regulated industries like finance, healthcare, and government.

Microsegmentation via vDefend enables fine-grained control over east-west traffic between workloads, drastically reducing the attack surface and containing lateral movement during a breach. Each tenant or workload can be automatically isolated into its own secure zone with just a few clicks.

Perhaps most critically, VCF 9.0 is built to defend against ransomware, one of the most urgent threats facing organizations today. With vSAN-to-vSAN replication, deep snapshot capabilities, and immutable backup support, VCF can help organizations recover rapidly from ransomware attacks without paying a ransom. Even in the event of encrypted or deleted data, organizations can restore clean, secure copies, minimizing business disruption and financial damage. Non-disruptive patching and in-place upgrades further reduce the operational gaps that attackers often exploit.

In essence, VCF 9.0 doesn’t just secure the infrastructure; it secures the business, offering peace of mind in an environment where a single breach can result in millions in losses and permanent brand damage.

Native Automation & Day 2 Operations Made Effortless

With VCF 9.0, Broadcom makes automation native, not optional. One of its most defining features is its native support for intelligent automation across the entire cloud lifecycle—from provisioning to optimization, from patching to reporting. Broadcom has moved away from fragmented tooling and stitched-together scripts; with VCF 9.0, automation is deeply integrated, intelligent, and essential.

At the core of this is the VCF Automation Console, a centralized hub that gives cloud administrators and DevOps teams a self-service interface to provision virtual machines, Kubernetes clusters, and entire infrastructure stacks on demand. Whether through the GUI or via API, teams can define reusable templates, enforce policies, and apply consistent configurations across environments—reducing manual effort and ensuring compliance by design.

The platform supports Infrastructure as Code (IaC), allowing organizations to automate deployments using familiar tools and workflows. Administrators can build, version, and manage cloud resources through APIs, JSON/YAML templates, or orchestration pipelines—speeding up developer onboarding, reducing human error, and eliminating bottlenecks in infrastructure delivery.

One of the most critical Day 2 capabilities in VCF 9.0 is fleet-wide configuration drift detection. Using VMware Aria integrations, the platform continuously monitors the desired state of infrastructure across hosts, clusters, and tenants, automatically flagging deviations that could introduce risk or instability. This enables proactive compliance enforcement and prevents issues before they impact production.

Automated patching and lifecycle management are now built-in capabilities, not complex, disruptive tasks. Whether managing three clusters or thirty, VCF 9.0 allows you to schedule, stage, and roll out patches, security updates, and version upgrades with minimal downtime, ensuring the platform stays secure and performant without interrupting business operations.

In addition to automation, operational efficiency is improved through enhanced tooling:

• The new VCF Installer UI offers a guided deployment experience, making greenfield and brownfield deployments faster, less error-prone, and easier to scale.
• The Operations Console offers chargeback and showback, identity and certificate management, diagnostics and telemetry, and role-based access control—giving infrastructure and FinOps teams the insights they need to optimize usage and costs.

Ultimately, VCF 9.0 transforms traditional infrastructure management into a cloud-like operating model—fast, programmable, resilient, and transparent. It frees teams from repetitive tasks, minimizes human error, and provides consistent operations at scale, from core data centers to the edge.

A Unified Platform for VMs, Kubernetes, and AI Workloads

In VCF 9.0, all workloads are treated equally—whether it’s a legacy ERP system, a stateless Kubernetes app, or an AI training pipeline.

VCF 9.0 redefines workload versatility by treating all application types—legacy or modern—as first-class citizens. Whether you’re running a monolithic ERP system, a containerized microservice, or a GPU-intensive AI pipeline, VCF 9.0 provides a consistent, performant, and secure foundation.

With embedded vSphere Kubernetes Service, organizations can deploy and manage Kubernetes natively alongside traditional VMs. The platform also offers Kubernetes-as-a-Service, enabling multi-tenant self-service environments ideal for internal teams or external customers. For AI-driven workloads, VCF 9.0 includes vGPU scheduling, live migration for GPU-backed workloads, and seamless integration with NVIDIA AI Foundation, allowing data scientists and ML engineers to run, train, and infer large models at scale—directly on-premises or in hybrid environments.

By consolidating infrastructure for VMs, containers, and AI under a unified control plane, VCF 9.0 empowers cloud-native developers, DevOps engineers, and AI/ML teams to innovate without the friction of siloed infrastructure. It’s a platform truly built for the future of computing.

Key capabilities:

• Embedded vSphere Kubernetes Service.
• Kubernetes-as-a-Service for multi-tenancy and self-service.
• Support for vGPU scheduling, AI inference, and Private AI workloads in containers or VMs.
• Tight integration with NVIDIA AI Foundation and GPU hardware.

This makes VCF 9.0 an ideal platform for cloud-native developers, DevOps teams, and data scientists alike.

Business Outcomes: Faster, Cheaper, Smarter

VCF 9.0 isn’t just a technical win—it’s a business accelerator. According to IDC and internal benchmarks, enterprises can expect a 61% acceleration in workload deployments, a 66% reduction in outage recovery time, and up to 40% cost savings compared to public cloud alternatives. Even more compelling, organizations using vSAN ESA can save up to $10 million over three years versus traditional storage solutions. VCF 9.0 empowers businesses with both control and agility—no trade-offs required.

Based on IDC and internal data, key business outcomes include:

• 61% faster workload deployments.
• 66% quicker recovery from outages.
• 40% cost savings vs. public cloud.
• Up to $10M saved over 3 years using vSAN ESA over traditional storage.

Enterprises no longer have to choose between control and agility. With VCF 9.0, they get both.

Ecosystem Support & Compatibility

To ensure seamless adoption and long-term scalability, VCF 9.0 is built with broad ecosystem compatibility at its core, reducing risk during upgrades and simplifying procurement across diverse environments. On the hardware front, it supports industry-leading vendors like Dell, HPE, Lenovo, and Supermicro, giving customers flexibility in choosing infrastructure that fits their needs. Processor support includes modern architectures like Intel Xeon and AMD EPYC, while older, less efficient CPUs such as Intel Skylake have been deprecated to promote a faster, leaner baseline.

VCF 9.0 is also cloud-ready, integrating with platforms like Azure VMware Solution, AWS, and Google Cloud, enabling true hybrid operations. For AI and ML workloads, NVIDIA-certified GPU compatibility ensures enterprises can harness advanced compute power natively. With built-in compliance for FIPS, STIG, and TLS 1.3, organizations operating in regulated industries can deploy confidently. This ecosystem-first approach makes VCF 9.0 a future-proof investment for both IT and procurement leaders.

Advanced Services Built on VCF 9.0

Beyond foundational infrastructure, VCF 9.0 introduces a new tier of advanced services that elevate it from a private cloud platform to a full-fledged application delivery engine.

• With Avi Load Balancer, organizations gain fine-grained Layer 7 traffic control, integrated WAF (Web Application Firewall), and global load balancing, empowering app teams to scale securely.
• Disaster Recovery is redefined with immutable snapshots and enhanced replication via vSAN-to-vSAN, ensuring ransomware resilience and faster recovery.
• The Data Services Manager (DSM) streamlines database provisioning for developers with policy-driven guardrails.
• vDefend delivers dynamic microsegmentation that adapts to tenant, workload, and traffic context in real time.
• Finally, the Private AI Foundation enables enterprises to run, fine-tune, and infer from large language models using certified GPU infrastructure—all from within their secure environment.

These capabilities turn VCF into not just a cloud platform—but a full application delivery engine.

Conclusion: Why VCF 9.0 Is a Must-Have

VMware Cloud Foundation (VCF) 9.0 represents a significant leap forward from VCF 5, transforming the platform from a primarily infrastructure-focused solution into a modern, workload-agnostic cloud operating model. While VCF 5 offered basic automation and support for traditional workloads, VCF 9.0 brings built-in Kubernetes-as-a-Service, native support for AI/ML workloads with vGPU scheduling, and deep integration with NVIDIA AI Foundation. It also drastically improves operational efficiency—offering 61% faster workload deployments and 66% quicker recovery from outages—while delivering up to 40% cost savings compared to public cloud. With vSAN ESA, businesses can save up to $10 million over three years versus traditional storage. In short, VCF 9.0 combines the control enterprises expect with the agility they need to compete in a cloud-smart world.

You can see a lot of changes in modernization of Infrastructure in VCF 9.0

The future of cloud is hybrid, sovereign, AI-ready, and developer-empowered. VCF 9.0 is the infrastructure layer built for that future. Whether you’re building AI apps, running mission-critical ERP workloads, or serving hundreds of tenants in a sovereign cloud—VMware Cloud Foundation 9.0 gives you the control of on-premises infrastructure with the power of the cloud.