The DNAC plugin experiences a high volume of HTTP 429 errors documented in the oc.log. Although the configuration specifies a 60-second delay for performance retries, the plugin ignores this setting and retries immediately. This results in SDN API endpoint errors and prevents tenant devices from alarming.
ERROR MESSAGE: "HTTP 429" (Logged in oc.log)
SYMPTOMS:
High volume of HTTP 429 errors in /opt/CA/VNA/wildfly/standalone/log/oc.log
SDN API endpoint errors
Tenant devices fail to generate alarms
CONTEXT: Occurs consistently in a production environment due to excessive un-throttled API calls.
IMPACT: Users cannot sufficiently use the API; production environment stability is impacted.
Virtual Network Assurance DNAC plugin
The default configuration lacks a mechanism to throttle the API calls in the event of performance retries, leading to immediate retry attempts and subsequent rate-limiting (HTTP 429) from the DNAC API endpoint. The provided DNAC-Inventory.xml implements RetryAfterDelay variables for these functions.
The resolution for this issue is currently targeted for DX NetOps 25.4.6.
Note that this is subject to change, and there are no release dates which can be provided at this time.
There is a list of fixed issues in the documentation which is updated with each release.
You can sign up for notifications in your support account to be notified when new DX NetOps releases are available
Workaround:
STOP THE PLUGIN INSTANCE
From the NetOpa Portal or VNA Swagger UI, stop the affected DNAC plugin instance.
NAVIGATE TO THE CONFIGURATION DIRECTORY
Path: <VNA_HOME>/collector/<DNAC plugin instance>/repository/deviceConfig
BACKUP AND REPLACE INVENTORY FILE
Backup the existing DNAC-Inventory.xml file. Replace it with the updated version attached. Ensure the new file has the same permissions and ownership as the original.
EXPECTED: The updated DNAC-Inventory.xml is in place.
NAVIGATE TO THE OPENCOLLECTOR CONFIGURATION DIRECTORY
Path: <VNA_HOME>/plugins/DNAC Plugin/opencollector/repository/deviceConfig/DNAC-Inventory.xml
BACKUP AND REPLACE OPENCOLLECTOR INVENTORY FILE
Backup the existing DNAC-Inventory.xml file. Replace it with the updated version provided. Ensure the new file has the same permissions and ownership as the original.
START THE PLUGIN INSTANCE
From the Portal UI, start the DNAC plugin instance.
EXPECTED: The plugin starts, and the retry delay is applied to the inventory poll, mitigating the excessive API calls.
VERIFY SUCCESS:
Review oc.log and confirm HTTP 429 errors are significantly reduced or eliminated.
Ensure tenant devices generate alarms appropriately