Infoblox resource enumeration is too slow.

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

On large Infoblox environments the plugin is not able to enumerate all of the resources from Infoblox before the start of the next enumeration. This generates a huge load of requests for two reasons. First, the plugin creates a request for each page of resources and second, two or more enumerations running at the same time slows down the process even more.

Environment

Aria Automation 8.x

Cause

Slow internet or too many resources to enumerate

Resolution

The solution is to limit the resources that VCF Console enumerates.

• There are two possible approaches:

 

1. • The first approach is to limit the resources that will be enumerated in VCF Console by configuring the IPAM integration in VCF Console by setting the Infoblox.IPAM.NetworkContainerFilter, Infoblox.IPAM.NetworkFilter and Infoblox.IPAM.RangeFilter filters. On how to use them can be found in the official VCF Console documentation - Control network data collection by using Infoblox filters in VMware Aria Automation. 

                  For example:

In Infoblox I have 3000 resources. I want to only use two networks in VCF Console - 192.168.0.0/30 and 192.168.0.4/30. I am configuring the Infoblox.IPAM.NetworkFilter parameter of the IPAM integration with Infoblox to have value network~=192.168.   Now, from the networks in Infoblox only those that correspond to the regex will be enumerated.

                  Another example of filter of multiple networks 

                 Only Infoblox.IPAM.NetworkFilter (10.181. and 10.182. and 172.27. and 172.31.)             

                 The filer regex syntax should be network~=(10.181.|10.182.|172.27.|172.31.) 

 

1. • The second approach is to set an Infoblox group, limit its permitted resources and set the IPAM integration in VCF Console with a user from that group. More can be found in the Infoblox documentation about permissions: https://docs.infoblox.com/space/nios90/280275153/Administrative+Permissions+for+DHCP+Resources

For example:

I have a network container 192.168.0.0/24. The network container holds two networks 192.168.0.0/30 and 192.168.0.4/30.

I am creating an admin group ag-test and adding a user george to it. I am giving the group permission to the network container. Now, user george will have access to the network container and the two networks.

In VCF Console I am validating the IPAM integration with Infoblox with username george and the user's password. Now, only the permitted resources will be enumerated and will be accessible in VCF Console.

Additional Information

Impact:

The plugin generates huge amount of requests which floods the customer's Infoblox server.