NSX-T Load Balancer application profile parameters are not persistent on NCP restart

Products

• VMware NSX

Issue/Introduction

• This issue can affect all K8S based NCP integrations, including TKGi.
• The Load Balancer application profile parameters are set via K8s.

For example, the request header size is set to 65536:

GET /api/v1/loadbalancer/application-profiles/<App-profile-id>
{ "http_redirect_to_https" : false, "ntlm" : false, "idle_timeout" : 15, "request_header_size" : 65536, "response_timeout" : 900, "response_header_size" : 65536, "resource_type" : "LbHttpProfile", "id" : "########-ed08-4d77-ad7f-########", "display_name" : "ncp-pks-########-d116-462a-90d8-########-LbHttpProfile", "tags" : [ { "scope" : "ncp/version", "tag" : "1.2.0" }, { "scope" : "ncp/cluster", "tag" : "pks-########-d116-462a-90d8-########" } ], "_system_owned" : false, "_create_user" : "pks-########-d116-462a-90d8-########", "_create_time" : 1617024296892, "_last_modified_user" : "pks-########-d116-462a-90d8-########", "_last_modified_time" : 1617024296892, "_protection" : "REQUIRE_OVERRIDE", "_revision" : 0 }

• After a restart of NCP, these values are back to default.

The request header is now set to 1024:

GET /api/v1/loadbalancer/application-profiles/<App-profile-id>
{ "http_redirect_to_https" : false, "ntlm" : false, "idle_timeout" : 15, "request_header_size" : 1024, "response_timeout" : 900, "response_header_size" : 4096, "resource_type" : "LbHttpProfile", "id" : "########-ed08-4d77-ad7f-########", "display_name" : "ncp-pks-########-d116-462a-90d8-########-LbHttpProfile", "tags" : [ { "scope" : "ncp/version", "tag" : "1.2.0" }, { "scope" : "ncp/cluster", "tag" : "pks-########-d116-462a-90d8-########" } ], "_system_owned" : false, "_create_user" : "pks-########-d116-462a-90d8-########", "_create_time" : 1617024296892, "_last_modified_user" : "pks-########-d116-462a-90d8-########", "_last_modified_time" : 1617025089030, "_protection" : "REQUIRE_OVERRIDE", "_revision" : 1 }

Environment

VMware NSX-T Data Center

Resolution

This issue is resolved in VMware NSX-T NCP version 3.2.0 available at Broadcom Downloads.
If you are having difficulty finding and downloading software, please review the Download Broadcom products and software KB.

Workaround:

Re-apply the configuration via NSX-T REST API:

PUT /api/v1/loadbalancer/application-profiles/<application-profile-id>

Example Request:

PUT https://<nsx-mgr>/api/v1/loadbalancer/application-profiles/########-a058-48fd-ac55-######## 
{
  "resource_type" : "LbHttpProfile",
  "description" : "LB_HTTP_Application_Profile",
  "id" : "########-a058-48fd-ac55-########",
  "display_name" : "LB_HTTP_Application_Profile",
  "ntlm" : false,
  "request_header_size" : 65536,
  "http_redirect_to_https" : false,
  "idle_timeout" : 30,
  "_create_time" : 1515741466296,
  "_last_modified_user" : "admin",
  "_last_modified_time" : 1515741466296,
  "_system_owned" : false,
  "_create_user" : "admin",
  "_protection" : "NOT_PROTECTED",
  "_revision" : 0
}