Failed to create new instance of OSE in solution add-on landing zone

Products

• VMware Cloud Director

Issue/Introduction

- Below error found when create OSE instance in Solution add-on landing zone:

"Cloud director endpoint is not reachable"

- Create test VM in oVDC and ping vcloud provider address successfully

- VCD is 3 nodes cluster and NSX AVI is LB in front

Environment

VMware Cloud Director 10.6.x

Cause

There is DFW rule that define any external HTTP request containing the "/cloudapi/1.0.0/sessions/provider" will be dropped, so the setup of solution add-on will be interrupted due to cloudapi session query failure with external source IP address. 

Resolution

Modify the DFW rule with the confirmation of network/security team