DFW publish operations times out on the UI but rules are still published

Products

• VMware NSX

Issue/Introduction

Symptoms:

• DFW tab takes more than 5 minutes to load.
• Running a GET API consumes a lot of time to show the DFW config.
• After the DFW tab loads, The new created rules would appear.
• Publishing Firewall rules per section helps in reducing the time elapsed

Environment

VMware NSX Data Center for vSphere 6.4.x

Cause

Publishing complete configuration takes more than 2 mins for large setups, As all the DFW rules will be checked and changed as needed Even if one or two rules are modified, the backend needs to validate the entire configuration. This causes timeout on the UI because timeout value is imposed by VC and that is 2 mins.

Resolution

This issue is fixed in 6.4.7

A new API system is implemented as it accepts Complete set of Sections all the time in this API with the rules of Modified Sections [Only the rules of modified sections will be sent]