The benefit of a physical controller is that the performance is predictable and it has hardware acceleration for encryption features and a TPM for enhanced security. If you deploy on VM, you will need to make sure that you have the required resources reserved for the virtual mobility controller.
As your question is quite broad, the local Aruba sales team should be able to help/guide you towards the best solution in your case.