I've been asked if we should enable Spoofguard in NSX-T 3.x and I can see that the process is relatively easy.

What has me concerned is: does enabling it incurr any overhead for the hosts or other elements given that it needs to record all of the IPs against MAC addresses and also check them?

Thanks