# VMware / Broadcom 日跟踪 · 2026-10-19
> 日期：2026-10-19（Asia/Shanghai，周一）。窗口：2026-10-16（周五）早报之后 → 2026-10-19（周一）早（含周末）。上一成功早报 / 日跟踪 **2026-10-16**。 原料：archive/2026-10-19/vmware/。抓取全库：Saved 242 / skipped 28 / errors 47；blocked_hosts：community.hpe.com、docs.redhat.com、e.huawei.com、support.huawei.com、www.globenewswire.com、www.reddit.com、www.sangfor.com、www.suse.com。Blocks&Files / NextPlatform / The Register 本日 industry/ **仍无上述主机条目**（与 10-16/10-15/10-13 同态，RSS/Atom 未见新文章展开，未列入 blocked_hosts）。

> 相对 2026-10-16 归档真正新增 URL **4**（Snapshots；vSAN ESA×NVMe；Securing AI Workloads；What It Actually Takes… 播客预告）。Breakroom Ep95 等为既有稿重抓。

## 摘要
- **中 NEW · Snapshots Are Your Best Friend（安全月 Day12，10-16）**：把 VM 快照定位为安全工具——变更前回滚、含内存取证、vSAN ESA 原生快照 + **immutable** 防勒索删除（至 200 张/VM；不可变组需 Broadcom 支持才能关）；强调快照≠备份、NSX Manager/Edge 不支持快照、传统 VMFS 链建议 ≤72h——**厂商安全教育博，非发版**。
- **中 NEW · Why vSAN ESA Only Supports NVMe（10-16）**：明确 ESA **不支持** 转盘 / SAS·SATA flash / Tri-Mode；NVMe 直插 PCIe、自带控制器、高队列深度；理论成本对比（转盘 3× 镜像 vs NVMe EC 1.5× + 自称 4:1 减负）——**厂商架构/选型博**；旁注 OSA 混合集群已在 VCF 9.0 发布说明中弃用。
- **中 NEW · Securing AI Workloads（安全月 Day11，10-15）**：Private AI vs 托管；vDefend 微隔离 + Security Intelligence；vGPU/MIG/Enhanced DirectPath；机密计算（SEV-SNP/TDX，**不含 GPU 内存**）；Private AI Services（Model Runtime / MCP / Agent Builder / Harbor gallery）——**安全教育 + 白皮书导流，非版本 GA**。
- **轻–中 NEW · What It Actually Takes to Run AI at Production Scale（10-16）**：预告 **10-29** SD Times Economics of AI Supercast（Chris Wolf × ValueOps）——防生态锁定、agentic RAG 参考架构、低成本 PoC——**活动预告博**。
- 续档：Breakroom Ep95 VKS×Kyverno（10-16）；HyperArmor / VCF 9.1.1 证书·FinOps·AI time-slice / 安全月前序。r/vmware **host_blocked**。

## 原文摘录

### [Snapshots Are Your Best Friend](https://blogs.vmware.com/cloud-foundation/2026/10/16/snapshots-are-your-best-friend/) · 中
- 归档：`vmware/snapshots-are-your-best-friend-74624c6b.txt`
- 口径：**厂商安全教育博**。

> Snapshots might be the most underrated security tool in VMware Cloud Foundation (VCF)… with vSAN data protection, a last line of defense against ransomware that has deleted everything else.  
> … Mark a protection group immutable, and its snapshots can’t be deleted through normal administration… once it’s on, an administrator can’t turn it off without help from Broadcom support…

### [Why vSAN ESA Only Supports NVMe Solid State Storage Devices](https://blogs.vmware.com/cloud-foundation/2026/10/16/why-vsan-esa-only-supports-nvme-solid-state-storage-devices/) · 中
- 归档：`vmware/why-vsan-esa-only-supports-nvme-solid-state-storage-devices-3e081ba4.txt`
- 口径：**厂商架构博**。

> … spinning disks will not work with, and are not supported in vSAN ESA… vSAN ESA only supports NVMe devices plugged directly into the PCIe bus. vSAN ESA does not support the use of Tri-Mode controllers.  
> … the deprecation of hybrid clusters in vSAN OSA was announced in the VCF 9.0 release notes.

### [Securing AI Workloads](https://blogs.vmware.com/cloud-foundation/2026/10/15/securing-ai-workloads/) · 中
- 归档：`vmware/securing-ai-workloads-d6b70854.txt`
- 口径：**厂商安全教育 / 白皮书导流**。

> … VMware Private AI Services, a native part of VCF… Model Runtime, Data Indexing and Retrieval, MCP Servers and Tool Gallery, and Agent Builder…  
> … VCF 9.1 supports confidential VMs on both of those CPU technologies… The protection covers the VM’s memory, not data in GPU memory.

### [What It Actually Takes to Run AI at Production Scale](https://blogs.vmware.com/cloud-foundation/2026/10/16/what-it-actually-takes-to-run-ai-at-production-scale/) · 轻–中
- 归档：`vmware/what-it-actually-takes-to-run-ai-at-production-scale-e5f464af.txt`
- 口径：**活动预告**。

> On October 29, Chris Wolf… joins … for SD Times’ Economics of AI Supercast…

## 对基础档案的影响
- **最近动态须追加**：安全月 Day11/12（AI 工作负载安全 + 快照）；ESA 仅 NVMe 架构说明；10-29 AI Supercast 预告。