Adding a member in a Security Group through the User Interface (UI) and with bulk addition API takes time

Products

• VMware NSX

Issue/Introduction

Symptoms:
Adding a member in a Security Group through the User Interface (UI) and with bulk addition API takes time.

Environment

VMware NSX for vSphere 6.3.x
VMware NSX for vSphere 6.4.x

Cause

This issue occurs because of nested Security Groups. Addition of members in Security Group that is lower in the hierarchy takes time through the User Interface and bulk addition API.

Note: Time taken is proportional to amount of nesting.

Resolution

This is a known issue affecting VMware NSX for vSphere 6.3.x and 6.4.x.

This issue is resolved in VMware NSX for vSphere 6.4.2

Workaround:
To work around this issue, use this API call to add members to a Security Group instead of NGC UI or bulk addition API:

For example:

PUT https://NSXMGR_IP/api/2.0/services/securitygroup/securitygroup-10/members/vm-25