NSX Standard Load Balancer (in-line) virtual service connectivity issue from client VMs directly connected to Tier-1 gateway hosting the Load Balancer.
Article ID: 419701
Updated On:
Products
Issue/Introduction
Client(s) (Overlay VMs) that are directly connected to the Tier-1 gateway where an NSX LB is hosted are unable to access virtual service(s) on this LB.
A curl request might return the following error:
Environment
VMware NSX
Cause
The SNAT Translation mode is set to "Deactivated". When using NSX LB in the inline mode, clients and servers should not be connected to overlay segments on the same tier-1 logical router if SNAT on the load balancer is not desired. If clients and servers are connected to overlay segments on the same tier-1 logical router, SNAT is required.
Resolution
Either use the Automap Mode or IP Pool SNAT Translation Mode to meet the requirements. For more details refer to https://techdocs.broadcom.com/us/en/vmware-cis/nsx/vmware-nsx/4-2/administration-guide/load-balancer/key-load-balancer-concepts/load-balancer-topologies.html
Feedback
