Audit fixes — sizing formulas & validation lists

A full multi-pass audit against the Excel workbook surfaced and fixed several residual divergences. Sizing calculator: Log Management is now computed per the workbook's row-26 formula (a new "Log Management Replicas" input — min 1 for Small / 3 for Medium-Large; the Large size deploys 2 nodes per replica; CPU/RAM per node from the VCFMS worker tier; disk = replicas × 575 GB) and gains the missing Large size, replacing both the previous flat estimates and the separate "Log Management Replicas" toggle; VCF Automation is now a single component computed from the per-node VCFA table × node count (×1 Small / ×3 Medium-Large), replacing the previous duplicate flat entry; Real-time Metrics scales with the Instance Profile Size (×2 nodes, ×3 for Large); Identity Broker now counts only its disk (the workbook excludes its CPU/RAM from every total); Software Depot disk corrected from 0 to 1500 GB; and the minimum host count now applies the workbook's 3-host vSAN quorum floor even for Simple deployments (previously 1-2 hosts could be shown for Simple + vSAN). Validation lists: the Deploy Cluster Teaming Policy gains "Route Based on Physical NIC Load", certificate Key Size fields gain 3072, Supervisor Control Plane Size gains XLarge, the management-domain vSAN FTT is restricted to 1-2 per the workbook, and the "NSX Connectivity Type" / "Transit Gateway Type" casing was corrected to match each field's actual workbook validation list (Title Case for NSX Connectivity, lowercase for Transit Gateway — the v1.1.1 change had matched the wrong cells). The two verification documents (tools/check_lt_constants.py, tools/sizing_scenarios.md) were re-run/updated accordingly.

Sizing calculator aligned with the Excel workbook

The Management Domain Sizing calculator's lookup tables and formulas have been re-verified line-by-line against vcf-9.1-planning-and-preparation-workbook-updated.xlsx ("Static Reference Tables" and "Management Domain Sizing" sheets) and corrected where they had drifted: SDDC Manager RAM (8 → 16 GB), NSX Manager (added Extra-Small tier, corrected XLarge), NSX Edge/VNA disk sizes (→ 200 GB) and VNA CPU/RAM, VCF Operations CPU/RAM/disk, AVI Load Balancer Large/Extra-Large, Cloud Proxy tiers (Small/Medium/Large), and a full rework of vDefend SSP into cluster-aggregate values plus a separate "vDefend/AVI Licensing Hub" add-on. The VCF Services Runtime (VCFMS) control/worker node sizing is now computed from node-count tables driven by Instance Profile Size, Cluster Model, and a new VCF Services Instance Model selector (First Instance / Additional Instance), matching the Excel's per-node × node-count + extra-disk formula. The disk-sizing chain (Required Hosts, Total Storage Required, Disk per Host) now follows the Excel's exact order of operations (interim total → FTT1 redundancy → ops reserve → growth), and Subnet Mask options now cover the full /32–/0 range (33 entries, was 24). New sizing components: VRMS, SRM, Health Reporting and Monitoring (HVM), Cloud-Based Ransomware Recovery, and HCX Connector, plus Identity Broker / VCF Operations for Networks / VCF Operations for Networks Collector upgraded from single-size placeholders to full size-tier tables. Minor validation fixes: added the "Route Based on Physical NIC Load" Teaming Policy option and corrected "NSX Connectivity Type" casing. A new tools/check_lt_constants.py script and tools/sizing_scenarios.md let these lookup tables and formulas be re-verified against the Excel workbook in the future.

DEMO data, AD toggle, Log Management replicas & navigation improvements

New "🧪 DEMO" topbar button instantly fills every Management Domain field (Planning, Deploy Management Domain, vCenter, SDDC Manager, NSX Manager 3-node cluster, and a 2-node NSX Edge cluster) with a consistent, ready-to-review example based on a 4-node vSAN-ESA cluster — a confirmation prompt warns before overwriting existing values. The Active Directory / LDAP page now has an "Include/Exclude" toggle (defaults to Exclude, like the AVI/NSX Edge/VCF Operations toggles) so the detailed AD inputs are hidden until needed. Log Management (under VCF Management Services / Fleet Management Day-N) gains an HA Mode selector with dedicated replica node and load balancer / cluster VIP FQDN/IP fields when "HA Cluster" is selected. The VCF Management Services section adds 3 spare "Additional IP" fields for fleet-level scale-out. Fleet MTU now defaults to 1500 (was 9000). All password fields now show "AUTO-GENERATED" as their default sample/placeholder for a consistent convention. Discoverability: a persistent "🔌 Ports" topbar button and an As-Built page callout banner now link directly to the Ports & Protocols reference. The Ports & Protocols matrix also gains a "Group by: By Component / By Category" toggle that organizes the 19 components into 5 functional categories (Core Infrastructure, Fleet Management & Operations, Automation & Security, Recovery & Disaster Recovery, Private AI); within "By Category", each category is further sub-divided into collapsible per-component groups for easier navigation.

Live Ports Matrix & Security Hardening

The Ports & Protocols page gains a "Show my configured values" toggle: when enabled, each row displays the actual FQDN/IP you entered elsewhere in the form (vCenter, ESXi hosts, NSX Manager/Edges, SDDC Manager, VCF Operations, AD, DNS/NTP, AVI, HCX, VCF Automation, VCF Operations for Networks, Log Management, vSAN Witness, Identity Broker) next to the generic role label, and the CSV export gains matching "Resolved Source/Destination" columns — turning the reference matrix into an as-built firewall rule list. Security hardening: the Alpine.js and @alpinejs/collapse CDN scripts are now pinned to v3.14.1 with Subresource Integrity (SRI) hashes, and a new "Privacy & Data Handling" section was added to the About page and README documenting that no data ever leaves the browser and that password fields are stored/exported in plaintext.

Ports & Protocols Reference

New "🔌 Ports & Protocols" page (Reference section) provides a searchable, filterable matrix of 1083 port/protocol entries across all 19 VCF 9.1 components, sourced from Broadcom's official Ports and Protocols Tool. Browse grouped by component (collapsible), or filter by free-text search, traffic direction (Inbound/Outbound/Bidirectional/Unspecified), and component, with a "Show 100 more" pager for large result sets. A dedicated "⬇ CSV" button exports the currently filtered rows for firewall rule planning. Reference-only — not part of the VCF Installer JSON export or As-Built report.

Aligned with workbook v1.9.1.002 & Advanced Sizer

Updated against Broadcom's v1.9.1.002 revision of the VCF 9.1 Planning & Preparation Workbook (fixed sizing for the Workload Domain NSX cluster, added an Advanced Sizer for the Management Domain). Changes: the Management Domain Sizing calculator gains a vCenter Storage Size selector (Default/Large/XLarge, affecting vCenter disk footprint), an NSX Manager Model selector (Mandatory - Single Node ×1 / Mandatory - HA Cluster ×3, replacing the previous hardcoded ×3), and a Cloud Proxy Small/Standard size tier; corrected VCF Automation (VCFA) sizing values (Small/Medium/Large) to match the workbook's Static Reference Tables; the vCenter Server appliance size default changed from Small to Medium (matching the updated workbook sample); the Workload Domain count now supports up to 35; the Configure Workload Domain page's "WLD NSX Network Connectivity" section adds a WLD Edge HA Mode field (Active-Active / Active-Standby); and the Fleet Management Day-N IP samples were renumbered from the 10.11.10.x range to 10.11.99.x to avoid overlap with Management Domain addressing.

Removed Share & Print

The "🔗 Share" (URL-hash state encoding) and "🖨 Print" (browser print / PDF) toolbar buttons have been removed, along with the As-Built page's print button and the on-load URL-hash restore logic, to simplify the toolbar and avoid the size limits and staleness issues of hash-encoded state. Export JSON / Import JSON remain the supported way to back up, share, and restore your configuration, and 📄 MD / 📊 CSV remain available for As-Built reporting.

Import "VCF Installer Ready JSON"

New "⬆ JSON VCF Installer ready" / "⬆ Import VCF Installer JSON" buttons (topbar and As-Built page) let you load a previously exported SddcSpec-shaped JSON (the v1.0.3 export, or a real VCF Installer POST /v1/sddcs payload) and restore it into the form — a best-effort companion to the v1.0.3 export. Restored: top-level options (VCF version, instance name, SDDC ID, CEIP, deployment type, ESXi thumbprint validation), DNS, NTP, ESXi host FQDNs, network specs (management/vMotion/vSAN/NFS CIDR, gateway, VLAN, MTU, IP range, uplink teaming policy), vCenter, cluster, datastore (vSAN/VMFS-FC/NFSv3), distributed switch names and per-network MTUs, NSX Manager FQDNs and overlay network, VCF Operations node FQDNs and appliance size, and SDDC Manager hostname. Not restored — and flagged in a post-import summary for manual review: ESXi host management IPs, vCenter IP, NSX Manager IPs, VCF Operations IPs/load balancer/HA mode, the distributed switch profile/uplink names/LACP configuration (dvsSpecs reverse-mapping is deferred), and all passwords other than the ESXi root and vCenter root passwords — these are not present in the SddcSpec JSON by design.

VCF Management Services fields

The Fleet Management Day-N page now includes a "VCF Management Services" section covering the fleet- and instance-level lifecycle components from the Planning & Preparation workbook (Deploy Management Domain sheet, "VCF Management services" block): Fleet Components FQDN/IP, Instance Components FQDN/IP, VCF Services Runtime FQDN/IP, License Server FQDN/IP, and a shared SSH password for the vmware-system-user service account. These fields are informational/IPAM only — they are independent of the "VCF Services Runtime" / "License Server" toggles on the Management Domain Sizing calculator (which only affect resource-footprint math) and are not part of the VCF Installer JSON export, which covers Day-0 bring-up only.

VCF Installer JSON export

New "🚀 Installer" / "🚀 VCF Installer JSON" buttons (topbar and As-Built page) export a SddcSpec-shaped JSON file matching the VCF 9.1 Installer's POST /v1/sddcs request body, built from your current form data (DNS, NTP, hosts, management/vMotion/vSAN/NFS network specs, vCenter, cluster, datastore, distributed switches, NSX Manager, VCF Operations, and SDDC Manager). A new "VCF Installer Export Settings" section on the Deploy Management Domain page adds VCF Instance Name, SDDC ID, CEIP, and ESXi SSL thumbprint validation fields used by this export. Note: vSphere Supervisor (vSphere IaaS Control Plane), Fleet/SDDC LCM bootstrap options, and a few other optional installer spec blocks are not yet covered by this export — always review the generated JSON against the official VCF Installer documentation before use.

Storage type consistency & custom VDS NICs

The Management Domain Sizing "Storage Type" selector now offers the same four options as "Principal Storage Type" on the Deploy Management Domain page (vSAN-ESA, vSAN-OSA, VMFS on Fibre Channel (FC), NFSv3) and the two fields stay in sync — choosing one updates the other automatically. The vSAN network segment (VLAN/Gateway/CIDR/MTU/IP pool) and the "vSAN Datastore Name" field are no longer mandatory when a non-vSAN principal storage type (FC or NFSv3) is selected. The Distributed Switch Profile section now supports up to 10 NIC uplinks (a new "Number of Uplinks" field plus Uplink 3–10 Name fields) when "Custom Switch Configuration" is chosen as the DVS Profile.

Bug fix

Fixed a display/visibility mismatch on Include/Exclude toggle fields (e.g. Use Proxy, Deploy Cloud Proxy, vSAN Stretched Cluster, Supervisor, Identity Broker, VCF Automation/Logs/Operations for Networks, Site Protection & DR, Cyber Recovery, Ransomware Recovery, Cross Cloud Mobility, Private AI, and others) where the toggle button could display "Include" while its dependent fields stayed hidden, requiring an Include → Exclude → Include click sequence to reveal them. Toggle fields now initialize to their documented default value, so the displayed label and the visible fields are consistent from the start and a single click toggles both correctly.

Evolution update

Dark mode, keyboard navigation, share URL, expand/collapse all, jump to missing, Fill IPs, copy section, Markdown & CSV export, VLAN/IP/CIDR conflict detection, DNS pre-flight checklist, VLAN topology table, vCPU bar chart, FQDN validation, sidebar progress bars, contextual help bubbles linking to official VCF design docs, and stricter selection-field validation aligned with the original Excel data-validation lists. Also added: WLD vCenter sizing (Shared/Dedicated, with size and storage tier) on the Deploy Workload Domain page, an Instance Profile Size field in the sizing calculator that is automatically forced to "Small" when the Cluster Model is set to Simple (matching the workbook's formula), and VCF Management Services / Fleet Components (VCF Services Runtime, Cloud Proxy, License Server, Identity Broker, Software Depot, Log Management Replicas, VCF Operations for Networks and its Collector, Real-time Metrics) now included in the live sizing calculator. The Fleet Management Day-N page now models VCF Operations as a full 4-node cluster (Primary, Replica, Data, and Load Balancer nodes, each with FQDN and IP), adds a VCF Automation IP pool (5 fields, noting that Small/Standard deployments need 2 IPs and HA deployments need 4), and adds Platform Node and Collector Node IPv4/IPv6 fields for VCF Operations for Networks (with a note that these IPs must reside in the VCF Management Network).

Initial release

Full conversion of the 27-sheet VCF 9.1 Excel workbook. All deployment modes (VCF/VVF), sizing calculator, NSX Federation, AVI LB, vSphere Supervisor, Private AI, Ransomware Recovery, HCX.