ISO 8583 message type is not supported by NSX (V and T) L7 Load balancer
Article ID: 327353
Updated On:
Products
VMware NSX Networking
Issue/Introduction
Symptoms:
When a client makes request to NSX Load balancer with ISO message format (ISO 8583) using the application profile type set to HTTPS offloading, it appears that the sessions are prematurely aborted by the LB with error 400 - bad request.
Issue does not occur when using l4 load balancer.
In the Edge log file, you may see messages similar to:
2021-11-30T07:44:20+00:00 NSX-edge-255-0 loadbalancer[9606]: [default]: [local0.info] 10.0.54.36 - - [30/Nov/2021:07:44:20 +0000] "<BADREQ>" 400 207 "" "" 48238 256 "VIP_8961~" "VIP_8961" "<NOSRV>" -1 -1 -1 -1 0 PR-- 1 1 0 0 0 0 0 "" ""
When a client makes request to NSX Load balancer with ISO message format (ISO 8583) using the application profile type set to HTTPS offloading, it appears that the sessions are prematurely aborted by the LB with error 400 - bad request.
Issue does not occur when using l4 load balancer.
In the Edge log file, you may see messages similar to:
2021-11-30T07:44:20+00:00 NSX-edge-255-0 loadbalancer[9606]: [default]: [local0.info] 10.0.54.36 - - [30/Nov/2021:07:44:20 +0000] "<BADREQ>" 400 207 "" "" 48238 256 "VIP_8961~" "VIP_8961" "<NOSRV>" -1 -1 -1 -1 0 PR-- 1 1 0 0 0 0 0 "" ""
Environment
VMware NSX-T Data Center
Cause
NSX-V and NSX-T L7 Load balancer supports only HTTP/HTTPS traffic. ISO 8583 is not HTTP/HTTPS based traffic and hence cannot be load balanced by an NSX L7 Load balancer.
Resolution
Workaround:
To resolve this issue, you will need to switch to L4 load balancer. Which means SSL traffic will be offloaded at the backend pool members.
Feedback
Yes
No
Powered by
