you choose. It's mostly a question of which is easier in your environment - updating VMs or updating the physical network.