DFW publish operations times out on the UI but rules are still published
book
Article ID: 338624
calendar_today
Updated On:
Products
VMware NSX
Issue/Introduction
Symptoms:
DFW tab takes more than 5 minutes to load.
Running a GET API consumes a lot of time to show the DFW config.
After the DFW tab loads, The new created rules would appear.
Publishing Firewall rules per section helps in reducing the time elapsed
Environment
VMware NSX Data Center for vSphere 6.4.x
Cause
Publishing complete configuration takes more than 2 mins for large setups, As all the DFW rules will be checked and changed as needed Even if one or two rules are modified, the backend needs to validate the entire configuration. This causes timeout on the UI because timeout value is imposed by VC and that is 2 mins.
Resolution
This issue is fixed in 6.4.7
A new API system is implemented as it accepts Complete set of Sections all the time in this API with the rules of Modified Sections [Only the rules of modified sections will be sent]