Broadcom's acquisition of VMware forced enterprises to choose between two primary subscription bundles: VMware Cloud Foundation (VCF) and vSphere Foundation (VVF). A 10-host environment with 400 cores could face subscription costs ranging from approximately $162,000 (VVF, 3-year) to $420,000 (VCF, 3-year). This guide provides CIOs, IT procurement, SAM managers, and finance leaders with the strategic analysis needed to make an informed, data-driven decision.
Both VMware Cloud Foundation and vSphere Foundation are sold as subscription licences on a per-CPU core basis, with a mandatory minimum of 16 cores per physical CPU. This represents a fundamental departure from the legacy per-socket model. A dual-socket host with 20-core CPUs (40 physical cores total) now requires 40 licence units instead of 2. Both subscriptions can be purchased as 1-, 3-, or 5-year contracts, with longer terms yielding better effective annual rates.
For an environment with 10 dual-socket hosts with 20-core CPUs (400 cores), vSphere Foundation at approximately $135/core/year yields ~$54,000 annually, whilst Cloud Foundation at approximately $350/core/year totals ~$140,000 annually. Over a standard 3-year term, this is the difference between roughly $162,000 and $420,000 in subscription fees. The gap only widens with larger estates.
Because licences are tied to physical cores, procurement and infrastructure teams must coordinate closely. Favour CPUs with slightly fewer, higher-performance cores where workload requirements permit: fewer cores means fewer licences. Ensure each CPU is populated to multiples of 16 cores where possible. Two 8-core CPUs in a host still count as 16 cores each due to the minimum rule, potentially doubling your effective licence cost versus a single 16-core CPU.
Broadcom enforces strict renewal timelines with no grace period after subscription expiry, and late renewals may incur a 20% penalty fee on the first-year subscription cost. Build a 90-day advance renewal process. Inventory every host's CPU configuration (sockets, cores per socket, total cores) and apply the 16-core minimum rule to each CPU. Model both bundles across 1-, 3-, and 5-year terms.
Cloud Foundation includes a generous vSAN entitlement of 1 TiB of raw storage per licensed core, whilst vSphere Foundation includes just 250 GiB per core (recently increased from 100 GiB). This 4x difference in included storage can dramatically alter the total cost of ownership calculation, particularly for data-intensive environments.
A financial services firm with 200 cores and 500 TB storage needs automatically receives up to 200 TiB of vSAN capacity included with VCF. With VVF, those same 200 cores provide only 50 TiB, leaving 450 TB requiring additional vSAN add-on licences purchased separately. Critically, vSAN add-on licensing starts at 0 TiB, meaning you must licence the full capacity, not just the increment above your base entitlement. This can erode or entirely eliminate VVF's lower core price advantage.
A healthcare organisation running 1,600 cores but relying on a dedicated NetApp SAN, using vSAN only for a small 30 TB test cluster, receives 400 TiB of vSAN entitlement under VVF (1,600 x 250 GiB), far exceeding their 30 TB need. Paying the VCF premium for 1 TiB/core storage they will never use offers no value. VVF saves this organisation approximately $344,000/year versus VCF with no meaningful capability loss. If your primary storage strategy is external SAN/NAS, VVF's included allocation is likely sufficient.
Both subscriptions include Kubernetes capabilities via Tanzu Kubernetes Grid (TKG). However, VCF bundles NSX for network virtualisation (limited to overlay networking), whilst VVF does not include NSX at all. The distributed firewall (DFW) for micro-segmentation is not included in the base VCF subscription. It is only available as the "VMware Firewall" add-on, which must be purchased separately on top of VCF. VVF customers cannot purchase this add-on at all: upgrading to VCF is required first.
If containers are experimental or small-scale, basic networking (via distributed vSwitch) in VVF may suffice. Organisations using Calico, Cilium, or other container networking interfaces may not need VMware's native NSX integration, reducing the justification for VCF. If east-west security is on your roadmap, budget for VCF plus the VMware Firewall add-on, not just VCF alone.
VVF comes with Aria Suite Standard: Aria Operations Advanced for performance monitoring and Aria Operations for Logs for centralised log analytics. VCF raises the bar with Aria Suite Enterprise, adding Aria Automation for infrastructure-as-code and self-service provisioning, and Aria Operations for Networks for enhanced network dependency mapping and security planning. If your team primarily needs performance dashboards, capacity planning, and centralised log management, VVF's Aria Suite Standard fully covers those needs.
VCF's included automation tools introduce operational complexity. Deploying and maintaining Aria Automation requires dedicated expertise, process redesign, and ongoing governance. For organisations without existing skills, the "included" tools may remain shelfware. However, organisations serious about private-cloud-like agility will find that purchasing Aria Automation separately to complement VVF can cost more than the incremental difference between VVF and VCF. In that scenario, VCF genuinely delivers better value.
VCF includes Select Support (premium tier with faster SLAs, senior engineers, proactive guidance) and SDDC Manager for automated lifecycle management. VVF includes Production Support (standard 24x7) with no SDDC Manager, meaning vSphere Foundation customers must manage upgrades manually or via custom scripting. For large estates, this operational difference can be significant: automated lifecycle management reduces human error and downtime risk during complex multi-component updates.
| Add-On Capability | Available with VCF? | Available with VVF? | Cost Impact |
|---|---|---|---|
| NSX Distributed Firewall and ATP | Yes (add-on) | No: requires VCF upgrade | Significant per-core premium |
| Advanced Load Balancer (Avi) | Yes (add-on) | No | Per-service-core pricing |
| VMware Cloud Disaster Recovery / SRM | Yes | Yes | Same pricing for both bundles |
| vSAN Capacity Expansion | Yes (beyond 1 TiB/core) | Yes (beyond 250 GiB/core) | Starts at 0 TiB: covers full capacity |
| HCX Enterprise (Cloud Migration) | Included | Not included | VCF bundled benefit |
If your organisation starts with VVF to minimise costs but later determines micro-segmentation or advanced networking is required, the only path forward is upgrading to VCF first and then purchasing the firewall add-on. A SaaS company that selected VVF for 300 cores had to upgrade all cores from VVF (~$135/core) to VCF (~$350/core) after a security audit mandated NSX micro-segmentation for PCI DSS compliance, then add the firewall on top. Effective annual cost tripled. If advanced security or networking features are anywhere on your 3 to 5 year roadmap, starting with VCF can be the more cost-effective choice over the contract lifecycle.
| Feature / Metric | VMware Cloud Foundation (VCF) | vSphere Foundation (VVF) |
|---|---|---|
| List price | ~$350/core/year | ~$135/core/year |
| Core licensing rule | 16-core minimum per CPU | 16-core minimum per CPU |
| Included vSphere edition | vSphere Enterprise Plus | vSphere Enterprise Plus |
| Kubernetes | Tanzu KG + NSX overlay networking | Tanzu KG (basic networking only) |
| vSAN storage included | 1 TiB raw per core (aggregatable) | 250 GiB raw per core (per cluster) |
| Network virtualisation | NSX overlay included (no DFW) | Not included |
| Management suite | Aria Suite Enterprise | Aria Suite Standard |
| Automation | Aria Automation included | Not included |
| Hybrid cloud tools | HCX Enterprise included | Not included |
| Lifecycle management | SDDC Manager included | Manual / custom scripts |
| Support level | Select Support (premium 24x7 + SRE) | Production Support (standard 24x7) |
| NSX security add-on | Available (DFW, ATP, Avi) | Not available: requires VCF upgrade |
| Environment Profile | Total Cores | VVF Annual Cost | VCF Annual Cost | Delta |
|---|---|---|---|---|
| Small (5 hosts, 2x16-core CPUs) | 160 | $21,600 | $56,000 | +$34,400 (+159%) |
| Mid-Size (25 hosts, 2x20-core CPUs) | 1,000 | $135,000 | $350,000 | +$215,000 (+159%) |
| Enterprise (100 hosts, 2x24-core CPUs) | 4,800 | $648,000 | $1,680,000 | +$1,032,000 (+159%) |
The right subscription is not the one with the most features. It is the one where every feature is actively deployed and delivering measurable business value. For the enterprise scenario, the VCF premium exceeds $1 million annually. If even two of the four major VCF components (NSX, Aria Automation, HCX, full vSAN) are not actively deployed, VVF almost certainly delivers better value. Conversely, when you genuinely need the full stack, VCF is not just a premium product: it is the more economical choice versus assembling the same capabilities from separate add-ons.
Map technical requirements across storage, networking, Kubernetes, and automation. Identify which capabilities map exclusively to VCF. Model 3- and 5-year total cost of ownership including subscription fees, support costs, and any add-on licences. VCF often proves more cost-effective when you factor in the separate costs of tools it replaces, but only if you actually use those tools.
Engage Broadcom early to discuss credit for existing perpetual licences. These programmes are often time-limited and not proactively offered. Coordinate with infrastructure teams on CPU configurations: favour higher-performance CPUs with fewer cores. Verify the 16-core minimum rule is factored into every hardware procurement decision. A single poorly configured server refresh can add hundreds of unnecessary core licences.
You do not need one subscription for all environments. Many enterprises employ a tiered approach: VCF for core data centres where the full feature set delivers value, VVF for secondary sites, and vSphere Standard (~$50/core/year with vCenter only) for edge or test environments. Different subscription types can coexist on different hosts. Match subscription to operational maturity. If you are not ready for full cloud automation, VVF's management suite is more than adequate.
Track how close you are to included vSAN capacity limits. Approaching the 250 GiB/core threshold on VVF triggers non-linear cost escalation (add-on covers all capacity from 0 TiB). Large customers can sometimes negotiate premium support as a separate line item alongside VVF, rather than paying for the entire VCF bundle just to access Select Support. Stay informed: VMware's portfolio continues evolving (VVF's vSAN was recently increased from 100 to 250 GiB/core).
VMware Cloud Foundation (~$350/core/year) is a comprehensive bundle including vSphere Enterprise Plus, NSX network virtualisation (overlay only), vSAN storage (1 TiB/core), Aria Suite Enterprise (Operations, Logs, Automation, and Network Insight), HCX for hybrid cloud migration, SDDC Manager for lifecycle automation, and premium Select Support. vSphere Foundation (~$135/core/year) includes vSphere Enterprise Plus with a smaller vSAN allocation (250 GiB/core), no NSX or HCX, Aria Suite Standard (monitoring and logs only), and standard Production Support.
Each physical CPU processor must be licensed for at least 16 cores, even if the physical CPU has fewer. A dual-socket server with 2 x 10-core CPUs is counted as 2 x 16 = 32 cores for licensing purposes. This means servers with CPUs under 16 cores pay a significant premium. Favour CPUs with 16 or more cores and consolidate workloads onto fewer, larger hosts to minimise the licensing impact of this rule.
Broadcom is phasing out new perpetual licence sales and will eventually end support renewals. If your existing environment is stable and licences are active, you can continue using them short-term. Engage with Broadcom about trade-in conversion offers: they often provide credit for remaining support value when migrating to subscription. Plan for the eventual transition at a natural refresh cycle or before support expiry.
Yes. You can deploy VCF in your core data centre and VVF at secondary sites. Outside of certain enterprise licence agreements that require standardisation, VMware allows different subscription types on different hosts, provided each host is fully licensed under one model. Features do not extend between licence types: a VVF-licensed host will not gain NSX from a nearby VCF-licensed host. Many organisations find this tiered approach financially prudent.
If you exceed VVF's included 250 GiB/core vSAN entitlement, the add-on licensing starts at 0 TiB, meaning you must licence the full vSAN capacity, not just the increment above your base entitlement. This non-linear cost escalation can erode or entirely eliminate VVF's lower core price advantage for storage-intensive environments. Model your storage needs carefully before choosing VVF if vSAN is your primary storage platform.
VCF saves money when you genuinely need the full stack. A 4,800-core environment licensing VCF components individually via VVF plus vSAN expansion plus separate NSX plus separate Aria Automation would cost approximately $2.1M/year. VCF at list price is $1.68M/year with all components included and Select Support at no extra charge. The key test: if three or more of the four major VCF components are on your active roadmap, VCF is likely the more economical choice.
Key risks include: strict renewal policies with no grace period and 20% late renewal penalties, potential annual price increases (negotiate caps or multi-year fixed pricing), subscription contracts that lock you in without meaningful downscaling options, NSX and advanced security features requiring separate add-on purchases even on VCF, and Broadcom's reduced channel flexibility. Scrutinise all contract terms, negotiate termination-for-convenience clauses, and ensure any verbal promises are documented in writing. See Top 20 Broadcom Negotiation Tips.
Redress Compliance provides independent Broadcom/VMware advisory: subscription selection and cost modelling, per-core optimisation, contract negotiation, audit defence, and transition planning. We help enterprises right-size their VMware investment based on actual usage and genuine operational requirements. Complete vendor independence. No Broadcom partnerships, no resale commissions.
Broadcom Advisory ServicesIndependent Broadcom/VMware advisory helping enterprises choose between VCF and VVF, optimise per-core licensing, negotiate contracts, and right-size VMware investments. Fixed-fee engagement models.