Skip to content

Why Azure over VMware -- Executive Strategic Brief

An executive brief for CIOs, CTOs, CFOs, and board-level decision-makers evaluating their virtualization and infrastructure platform strategy in the post-Broadcom era.


Executive summary

For twenty years, VMware was the default virtualization platform. vSphere powered data centers across every industry and government agency. The VMware ecosystem was stable, predictable, and deeply embedded in enterprise operations. That era ended on November 22, 2023, when Broadcom completed its $69 billion acquisition of VMware.

The consequences have been swift and severe. Broadcom eliminated perpetual licenses, forcing every customer to subscription-only pricing. It consolidated more than 80 individual product SKUs into 4 bundles that require customers to purchase capabilities many do not need. Documented price increases range from 2x to 12x. The partner ecosystem has been restructured, with thousands of channel partners de-authorized. Support quality has declined as Broadcom reduced VMware's workforce.

This is not a temporary disruption. Broadcom has explicitly stated that its strategy is to focus on the largest 500--600 VMware customers and transition the rest to subscription models that maximize revenue per customer. For the 500,000+ organizations running VMware, the message is clear: your costs will increase, your purchasing flexibility will decrease, and your vendor relationship will be transactional.

Azure offers three distinct paths out of this situation. Azure VMware Solution (AVS) provides a lift-and-shift path that preserves VMware compatibility while eliminating on-premises licensing costs. Azure IaaS re-platform eliminates the VMware dependency entirely. And for data and analytics workloads, CSA-in-a-Box modernizes VM-based databases, ETL servers, and reporting infrastructure into cloud-native PaaS services.

This document presents the strategic case for Azure. It is honest where VMware still has advantages and direct about the trade-offs.


1. The Broadcom disruption -- what actually happened

The acquisition

Broadcom completed its acquisition of VMware on November 22, 2023, at a price of \(69 billion (\)142.50 per VMware share). This was the largest technology acquisition in history at the time, funded by $32 billion in new debt.

Broadcom's acquisition playbook is well-established. It acquired CA Technologies in 2018 (\(18.9B) and Symantec's enterprise division in 2019 (\)10.7B). In both cases, Broadcom:

  1. Eliminated perpetual licenses in favor of subscription-only
  2. Increased prices significantly (2x--5x reported for CA and Symantec customers)
  3. Reduced R&D spending and workforce
  4. Focused on the largest accounts and reduced channel breadth
  5. Optimized for margin, not market share

The VMware acquisition has followed the same pattern, but at a larger scale.

Perpetual license elimination

Before the acquisition, VMware offered both perpetual licenses (buy once, pay support annually) and subscription licenses. Many enterprises and government agencies held perpetual licenses acquired over 10--20 years. These licenses represented significant capital investments and provided budget predictability.

Broadcom eliminated all perpetual license offerings effective immediately upon acquisition close. All customers must transition to subscription-based licensing. For customers with large perpetual license portfolios, this represents a fundamental change in cost structure -- shifting from a depreciable capital asset to an ongoing operational expense.

Product bundling and consolidation

VMware previously offered granular product licensing: vSphere, vCenter, NSX, vSAN, SRM, Aria Operations, and dozens of other products could be purchased individually. Customers paid only for what they used.

Broadcom consolidated the portfolio into 4 bundles:

Bundle Contents Target customer
VMware Cloud Foundation (VCF) vSphere, vCenter, NSX, vSAN, Aria Suite, Tanzu, HCX Large enterprise, full SDDC
vSphere Foundation (VVF) vSphere, vCenter, Aria Suite (subset) Mid-market, compute-only
vSphere Standard vSphere, vCenter Small/mid, basic virtualization
vSphere Essentials Plus vSphere (3 hosts max), vCenter Small business

The problem: most customers previously licensed only vSphere and vCenter. Under the new model, customers who want advanced features must purchase VCF or VVF, which include NSX, vSAN, and Aria capabilities they may not use. This bundling is the primary driver of the 2x--12x price increases.

Documented price increases

Price impact data from industry analysts and customer surveys:

Customer segment Typical pre-acquisition cost Post-acquisition cost Increase
Enterprise (500+ hosts) \(2,000--\)3,500/CPU \(5,000--\)8,500/CPU (VCF) 2x--3x
Mid-market (50--500 hosts) \(1,000--\)2,500/CPU \(3,500--\)8,500/CPU (VVF/VCF) 2x--5x
Small business (< 50 hosts) \(500--\)1,500/CPU \(3,500--\)6,000/CPU (VVF) 3x--12x
Government (per-core pricing) Varies by contract Varies, but increases reported across agencies 2x--4x

The wide range reflects differences in existing license portfolios, enterprise agreement terms, and negotiation outcomes. But the direction is uniformly upward.

Partner ecosystem disruption

VMware had a partner ecosystem of approximately 75,000 partners worldwide. Broadcom restructured the partner program to focus on approximately 500 top partners, de-authorizing or down-tiering thousands of smaller partners. For customers who relied on regional VMware partners for support, implementation, and licensing, this disruption has been significant.

Workforce and support changes

Broadcom reduced VMware's workforce significantly (estimates range from 2,000 to 4,000+ positions eliminated). Customer reports of longer support response times, reduced support quality, and difficulty reaching knowledgeable support engineers have been consistent since the acquisition.


2. Azure VMware Solution -- VMware on Azure without the licensing pain

Azure VMware Solution (AVS) runs VMware vSphere, vCenter, NSX-T, and vSAN natively on dedicated Azure bare-metal infrastructure. VMs run on the same hypervisor, use the same management tools, and require zero application changes.

What AVS includes at no additional license cost

Component On-prem (separate license required) AVS (included)
vSphere Enterprise Plus Yes ($5,535/CPU list) Included
vCenter Server Yes ($7,505/instance list) Included
NSX-T Advanced Yes ($6,995/CPU list) Included
vSAN Enterprise Yes ($5,500/CPU list) Included
HCX Enterprise Yes ($5,000+/site) Included free
VMware Aria Operations Separate license Not included (use Azure Monitor)
VMware SRM Separate license Not included (use Azure Site Recovery)

HCX Enterprise -- the migration tool that enables live vMotion from on-prem to AVS -- is included free. On-premises, HCX Enterprise is a separately licensed product.

Key AVS capabilities

  • Same VMware tools: vCenter, vSphere Client, PowerCLI, vRealize Automation all work against AVS
  • No application changes: VMs run unmodified on the same hypervisor
  • Azure billing: single Azure invoice, no separate VMware procurement
  • Azure integration: ExpressRoute connectivity, Azure Monitor, Defender for Cloud, Azure Backup
  • Dedicated infrastructure: bare-metal hosts not shared with other tenants
  • Elastic scaling: add or remove hosts in minutes (minimum 3 hosts per cluster)
  • Azure Government availability: US Gov Arizona, Virginia, Texas, DoD Central, DoD East

3. Cloud-native modernization -- beyond lift-and-shift

AVS is the fastest path out of on-premises VMware, but it is not the final destination for every workload. Azure-native services provide capabilities that VMware on-premises cannot match:

Compute modernization

VMware approach Azure-native approach Advantage
Fixed ESXi host capacity Azure VM auto-scaling Pay only for what you use
Manual VM provisioning Azure Resource Manager / Bicep IaC Repeatable, auditable deployments
VMware HA (restart VMs on failure) Azure Availability Zones (survive datacenter failure) Higher availability
DRS (balance across hosts in cluster) Azure auto-scaling + load balancing Broader scaling, cross-region
Tanzu for Kubernetes Azure Kubernetes Service (AKS) Managed control plane, integrated with Entra ID
VM templates + Content Library Azure Compute Gallery + Shared Image Gallery Global replication, RBAC-controlled

Data platform modernization via CSA-in-a-Box

The highest-value modernization opportunity is data workloads. Database VMs, ETL servers, reporting infrastructure, and analytics clusters running on VMware can be transformed into managed PaaS services:

  • SQL Server VMs become Microsoft Fabric Warehouses or Azure SQL Managed Instances -- eliminating OS patching, backup management, and capacity planning
  • ETL server VMs (running SSIS, Informatica, or custom scripts) become Azure Data Factory pipelines with dbt transforms -- version-controlled, monitored, and scalable
  • Reporting VMs (SSRS, Tableau Server) become Power BI with Direct Lake semantic models -- Copilot-enabled, zero-copy analytics over OneLake
  • Hadoop/Spark cluster VMs become Databricks workspaces with Unity Catalog -- managed Spark with enterprise governance
  • AI/ML training VMs become Azure AI Foundry deployments with Azure OpenAI -- managed inference, responsible AI, RAG patterns

CSA-in-a-Box provides the Bicep modules, dbt models, Purview automation, and compliance mappings to deploy this entire data platform as infrastructure-as-code.


4. Operational burden elimination

Running VMware on-premises requires a team of specialized administrators and a continuous operational investment:

VMware operational overhead

Operational task Effort Azure equivalent
ESXi host patching (monthly) 2--4 hours/host, coordinated with DRS evacuation AVS: Microsoft-managed host lifecycle
vCenter upgrades (quarterly) 4--8 hours per upgrade, downtime risk AVS: Microsoft-managed vCenter
NSX upgrades 6--12 hours, complex dependency chain AVS: Microsoft-managed NSX, or Azure VNet (IaaS path)
vSAN firmware and disk replacement Hardware vendor coordination, 4--8 hours per event AVS: Microsoft-managed storage, or Azure Managed Disks
Capacity planning Quarterly review, 6--12 month hardware procurement cycle Azure: scale in minutes, no procurement
Hardware refresh (every 4--5 years) Major project, \(2M--\)10M+ capital, 6--12 month lead time Azure: no hardware refresh, ever
Datacenter costs (power, cooling, space) \(200--\)500/kW/month ongoing Azure: included in service pricing
Physical security and compliance Facility audits, camera systems, access controls Azure: inherited from Azure datacenter compliance

Staffing impact

A typical VMware-first organization running 200+ hosts requires 8--12 FTEs dedicated to VMware operations:

  • 2--3 VMware administrators (vSphere, vCenter, ESXi)
  • 1--2 NSX network engineers
  • 1--2 vSAN/storage engineers
  • 1 backup administrator (Veeam, Commvault)
  • 1--2 hardware/datacenter engineers
  • 1 monitoring/Aria Operations administrator

After migration to AVS or Azure IaaS, this team can be reduced to 4--6 FTEs focused on Azure operations, with the remainder redeployed to higher-value cloud engineering, application development, or data platform work.


5. Azure-native services integration

VMware on-premises exists in isolation from cloud services. Azure provides native integration across security, identity, monitoring, and AI:

Security integration

  • Microsoft Defender for Cloud: unified security posture management across AVS and Azure IaaS workloads
  • Microsoft Sentinel: cloud-native SIEM with built-in connectors for AVS and Azure resources
  • Entra ID (Azure AD): single identity plane for both VMware administrators and Azure resource access
  • Azure Policy: enforce organizational standards across all Azure resources, including AVS

AI and analytics integration

  • Azure OpenAI: GPT-4, GPT-4o models available for integration with any Azure workload
  • Microsoft Fabric: unified analytics platform for data engineering, data science, and BI
  • Power BI: enterprise BI with Copilot, Direct Lake, and semantic models
  • Purview: unified data governance across on-premises, multi-cloud, and Azure resources

Operations integration

  • Azure Monitor: unified monitoring for AVS, IaaS VMs, PaaS services, and applications
  • Azure Automation: runbook-based automation for operational tasks
  • Azure Arc: extend Azure management to on-premises and multi-cloud resources during migration
  • Azure Update Manager: centralized patch management for all Azure VMs

6. Where VMware still has advantages

This document is a strategic brief, not marketing material. VMware retains genuine advantages in specific scenarios:

VMware advantages

Scenario VMware advantage Azure mitigation
Deeply embedded VMware automation Organizations with 10+ years of PowerCLI scripts, vRealize Automation workflows, and custom integrations face significant re-engineering AVS preserves VMware automation; re-platform path requires rewriting to Bicep/ARM/Azure Automation
VMware-certified applications Some ISVs certify only on VMware (SAP HANA TDI, some EHR systems) AVS runs certified VMware; check ISV support for Azure IaaS before re-platforming
Air-gapped / classified environments VMware runs in fully air-gapped environments with no cloud dependency AVS requires Azure connectivity; Azure Stack Hub or Azure Stack HCI for disconnected scenarios
Specialized hardware (GPU passthrough, FPGA) VMware DirectPath I/O for specialized hardware is mature Azure N-series/ND-series VMs for GPU; AVS supports GPU hosts in preview
Small footprint (3--10 hosts) vSphere Essentials Plus is cost-effective for very small environments AVS minimum is 3 hosts (~$55K/month); Azure IaaS is more cost-effective for small footprints

Honest assessment

If your organization has fewer than 50 hosts, no compliance forcing function, deep VMware automation, and a stable Broadcom contract at pre-acquisition pricing, staying on VMware may be the rational choice. But for most organizations -- especially those facing 2x+ price increases and multi-year contract renewals -- the economics strongly favor migration.


7. Decision framework

Migrate to Azure when

  • Broadcom pricing increases exceed budget tolerance (2x+ increase)
  • VMware contract renewal is within 12--18 months
  • Organization has an Azure-first or cloud-first strategy
  • Federal compliance requirements favor Azure Government (FedRAMP, IL2--IL5)
  • Data and analytics modernization is a concurrent priority
  • Hardware refresh cycle is approaching (avoid \(2M--\)10M+ capital expenditure)
  • VMware specialist staff are difficult to recruit or retain

Stay on VMware when

  • Small VMware footprint (< 50 hosts) with Essentials Plus pricing
  • Stable, pre-acquisition Broadcom contract with multi-year pricing protection
  • Air-gapped / classified environment with no cloud connectivity option
  • ISV applications certified only on VMware with no Azure IaaS support
  • Deep VMware automation that would cost more to re-engineer than the licensing increase

Hybrid approach

Most large organizations will use a hybrid approach:

  1. Immediate: Migrate the largest, most cost-impacted workloads to AVS (fastest license relief)
  2. Near-term (6--12 months): Re-platform standard VMs to Azure IaaS (eliminate VMware dependency)
  3. Medium-term (12--24 months): Modernize data workloads to PaaS via CSA-in-a-Box (highest long-term value)
  4. Long-term (24--36 months): Decommission on-premises VMware infrastructure entirely

8. Federal-specific considerations

Federal agencies and DoD components face unique considerations:

Broadcom's federal impact

  • DoD and IC have some of the largest VMware estates globally (estimated 200,000+ hosts across DoD)
  • Federal enterprise agreements with Broadcom are under renegotiation with significant price increases reported
  • Congressional oversight of defense IT spending makes 2x--12x cost increases politically difficult to absorb
  • Many federal VMware deployments use perpetual licenses acquired through multi-year procurement cycles

Azure Government advantages

  • AVS available in 5 Azure Government regions (US Gov Arizona, Virginia, Texas, DoD Central, DoD East)
  • FedRAMP High authorization inherited from Azure Government
  • IL2--IL5 support for AVS workloads
  • Single vendor relationship (Microsoft) versus Broadcom + hardware vendor + datacenter provider
  • Azure Government ExpressRoute for dedicated private connectivity

CSA-in-a-Box federal compliance

For data workloads migrated via CSA-in-a-Box, machine-readable compliance mappings are provided:

  • NIST 800-53 Rev 5 (FedRAMP High)
  • CMMC 2.0 Level 2
  • HIPAA Security Rule

See the Federal Migration Guide for detailed guidance.


9. Next steps

Action Timeline Resource
Assess VMware estate and Broadcom contract impact This week Migration Playbook
Build TCO comparison 1--2 weeks TCO Analysis
Evaluate AVS vs IaaS re-platform for your workloads 2--3 weeks Feature Mapping
Deploy AVS proof-of-concept 3--4 weeks HCX Migration Tutorial
Plan data workload modernization 4--6 weeks CSA-in-a-Box Architecture
Begin migration execution 6--8 weeks Best Practices


Last updated: 2026-04-30 Maintainers: CSA-in-a-Box core team