Service timeouts while navigating the GUI and Analytics on Avi Controller fail to load

Products

• VMware Avi Load Balancer

Issue/Introduction

While navigating the GUI service timeouts errors are observed and the SE, VS, Pool analytics will fail to load (spinning wheel animation).

In the web-browser developer tools, the API endpoint for the analytics metrics collection will fail with an HTTP 504.

In the portal access logs on the leader or follower controller nodes ( File /var/log/nginx/portal.access.log), there are HTTP 504, 502, 499 response codes for the analytics metrics collection API endpoint.

x.x.x.x [cache:-] django_others_https [-] - - [06/Nov/2024:23:20:13 +0000] [UI] [-] "POST /api/analytics/metrics/collection/?include_name=true&include_refs=true&pad_missing_data=false&dimension_limit=1000& HTTP/2.0" 502 26 "https://example.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 0.000 0.000 .

x.x.x.x [cache:-] x.x.x.x:443, x.x.x.x:443 [-] - - [06/Nov/2024:23:20:38 +0000] [UI] [-] "POST /api/analytics/metrics/collection/?include_name=true&include_refs=true&pad_missing_data=false&dimension_limit=1000& HTTP/2.0" 504 31 "https://example.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 120.008 60.002, 60.006 .

x.x.x.x [cache:-] x.x.x.x:443 [-] - - [06/Nov/2024:23:22:33 +0000] [UI] [-] "POST /api/analytics/metrics/collection/?include_name=true&include_refs=true&pad_missing_data=false&dimension_limit=1000& HTTP/2.0" 499 0 "https://example.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 59.928 59.929 .

127.0.0.1 [cache:-] x.x.x.x:443, x.x.x.x:443 [-] - - [06/Nov/2024:23:38:47 +0000] [-] [-] "POST //api/analytics/metrics/collection/ HTTP/1.1" 504 31 "https://localhost/" "Go-http-client/1.1" 120.046 60.033, 60.014 .

Environment

Affects Versions: 20.1.x, 21.1.x, 22.1.x, 30.1.x, 30.2.x

Cause

These GUi timeouts and analytics issues occur when "Allow External HTTPS Clients" access is restricted via ACL (Administration > System Settings> EDIT Access) and the controller node IP + cluster VIP are not included in the list.

Resolution

Please include the controller node IP + cluster VIP under the "Allow External HTTPS Clients" access. 

This is stated under the following documentation: Web Interface Access Settings

Enhancements will be made to future VMware Avi Load Balancer releases to prevent such issue.