Avi - Multiple External IP Block Handling Failure in NSX-VPC Mode

Products

• VMware vSphere Kubernetes Service

Issue/Introduction

When multiple External IP Blocks are configured within a single VPC Connectivity Profile in NSX Manager, the Avi Controller fails to handle the Virtual IPs.

Error Message in Avi Virtual Service Events:

Attach IP failed for Virtual Service domain-#### on Service Engine nsxalb_Avi-se-####.
Reason - Invalid IP used XXX.XXX.XXX.X/32.  Only allocated IPs can be used in Network. Allocate IP from external Block associated with Vpc.

Consequently, although an EXTERNAL-IP may appear to be assigned to the service(kubectl get svc), the LoadBalancer fails to function and does not pass traffic.

Environment

VCF9 - vSphere Kubernetes Service with NSX-VPC AVI integration mode

Cause

Avi Controller does not support multiple External IP Blocks within the same VPC Connectivity Profile.

Resolution

Use a single External IP Block per VPC Connectivity Profile.

Note: Avi Engineering is aware of this limitation. A fix is planned for a future release.