Aria Operations for Networks flow limit increase (active , internet and total flows)

Products

• VCF Operations for Networks

Issue/Introduction

 

• When you run the following GUI query you see similar output:  flows to VM xxxxxx group by Source IP Address

 

Environment

Aria Operations for networks 6.13.x

Aria Operations for Networks 6.14.x

Cause

• 240.240.240.240 is a place holder IP address in VMware Aria Operations for Networks.  This IP address is used if there are very large number of IP addresses (> 5000) hitting some particular IP. All further incoming Internet IPs (5001th onwards) with this placeholder IP 240.240.240.240 can be replaced for that service end point.

• This is to limit the number of flows in the system, as publicly exposed service that log each internet client individually could result in very large number of flows - which would result in increased system load.

• For all the flows that have been replaced with this placeholder IP, all the metrics are aggregated on the corresponding flow with this IP address, so there is no loss of statistics at an aggregate level.

• All the destination IP for the flows reported in the flows view are shown as originating from 240.240.240.240 are actually being hit by large count of internet IP ( > 5000).

Resolution

• You need to increase flows for:
  • Active Flows
  • Internet Flows
  • Total Flows

These values can be increased with Support to address this issue.

You will need to generate a new log bundle for all Platform and Collector nodes and open a Support case 

 

Additional Information

Micro-Segmentation and Flows

Creating and managing Broadcom cases