ISO 8583 message type is not supported by NSX (V and T) L7 Load balancer

Products

• VMware NSX

Issue/Introduction

• When  a client makes request to NSX Load balancer with ISO message format (ISO 8583) using the application profile type set to HTTPS offloading, it appears that the sessions are prematurely aborted by the LB with error 400 - bad request.
  
  
• Issue does not occur when using l4 load balancer.
  
  
• In the Edge log file, you may see messages similar to:
  
  YYYY-MM-DDTHH:MM:SS:MSZ NSX-edge-255-0 loadbalancer[9606]: [default]: [local0.info] <IP> - - [DD/MM/YYYY:HH:MM:SS +0000] "<BADREQ>" 400 207 "" "" 48238 256 "VIP_8961~" "VIP_8961" "<NOSRV>" -1 -1 -1 -1 0 PR-- 1 1 0 0 0 0 0 "" ""
  
  
  
  
  

Environment

VMware NSX-T Data Center

Cause

NSX-V and NSX-T L7 Load balancer supports only HTTP/HTTPS traffic. ISO 8583 is not HTTP/HTTPS based traffic and hence cannot be load balanced by an NSX L7 Load balancer. 

Resolution

Workaround:
To resolve this issue, you will need to switch to L4 load balancer. Which means SSL traffic will be offloaded at the backend pool members.