NSX controller provides a control plane functionality to distribute logical routing and VXLAN network information to the underlying hypervisor. Controllers are deployed as virtual appliances and should be deployed in the same vCenter NSX manager is connected to. In a production environment it is recommended to deploy a minimum of three controllers. For better availability and scalability we need to ensure DRS ant-affinity rules are configured to deploy controllers on a separate ESXI host. Control plane to management and data plane traffic is secured by certificate-based authentication.
It is important to note that controller nodes employ a scale-out mechanism where by each controller node uses a slicing mechanism that divides the workload equally across all the nodes. This renders all controller nodes active at all times. If one controller node fails...