NSX has its share of downsides, but I'm pretty clear on what it can and can't do - and I mean for real, in a real world scenario, not roadmaps or theories. I am really struggling to get the same level of clarity around ACI.

>The author seems to be surprised or confused about how we can accomplish this using the VDS.

Perfect example right here. You take jabs at the author of the NSX blog for not understanding how you could meaningfully secure the VDS without the same level of kernel access that VMware has.... but you don't actually explain how it works. Do *you* even know?

I am an architect for a VAR who sells both products and have no particular dog in this fight, but my customers are asking me how the heck ACI could accomplish this, and I can't get a straight answer.