Distributed Firewall rules using context-profiles are not working when applied to Kubernetes pods

Products

• VMware NSX Networking

Issue/Introduction

Symptoms:

• Distributed Firewall rules using context-profiles (layer 7) are not working as expected when applied to Kubernetes pods.
• Similar Distributed Firewall rules using Services (layer 4) instead of context-profile are working as expected.

Environment

VMware NSX-T Data Center 2.x
VMware NSX-T Data Center
VMware NSX-T Data Center 3.x

Cause

Distributed Firewall rules using a context-profile (layer 7) are not supported with Kubernetes pods.

Resolution

This issue is resolved in VMware NSX-T Data Center 3.1.0

Workaround:
Use Services instead of Context-profiles.