HCX L2 extension to cloud with hair pinning at on-prem

[tantis14]

1. Is it possible to extend VLAN for HCX if customer has hair pinning due to security reasons? If no, what options we have?

[ChrisFD2]

Can you explain a little more please, or if possible post a diagram? 

[mmoubarak]

Hair-pinning to security device? kindly share more info.

[t0mzukowski]

Yes, that is the default behavior in HCX.  The default gateway for all VMs connected to the extended network remains on-prem.

[battybishop]

As @t0mzukowski says this is the default behaviour for HCX and this is clear in the documentation.

Please can you explain if your scenario is different or clarify what your concerns are?