NSX Native Load Balancer objects for a L7 virtual server show in 'Down' state in NSX UI when SSL is configured.

Products

• VMware NSX

Issue/Introduction

• The configured L7 virtual server, and its related load balancer objects like Server Pools and possibly Monitor, show 'Down' in the NSX Manager UI. 

• Clicking the 'Down' status and the 'Errors' tab shows a status of 'SSL handshake timeout'. 

Environment

VMware NSX

Cause

SSL handshakes can fail when the configured MTU settings are mismatched between the client and server causing packet fragmentation. 

Resolution

Isolate where the packet fragmentation is occurring and adjust the configured MTU as appropriate to prevent it from occurring. 

For assistance with this in NSX, refer to Troubleshooting MTU issues and fragmentation in NSX fabric.

Additional Information

For a similar issue causing this status, see Server pool in Degraded state after upgrading to NSX 4.2.x (SSL or TCP Handshake Timeout error as per Edge logs).