Management Operations Fail in HA Cluster Environments due to Session Persistence Requirements in VCF Operations for Networks
search cancel

Management Operations Fail in HA Cluster Environments due to Session Persistence Requirements in VCF Operations for Networks

book

Article ID: 432607

calendar_today

Updated On:

Products

VCF Operations for Networks

Issue/Introduction

  • Attempts to add or authenticate a new manager/controller fail during the validation phase.
  • VCF Operations for Networks 6.14.1 is in use.
  • The issue is most prevalent in environments where Cisco ACI operates in a High Availability (HA) cluster.
  • System logs may show intermittent authentication errors or session timeouts:
2026-02-17T11:21:22.350Z ERROR aci.southbound.ACIConnectionEntity collector-process-msg-exec-0 close:129 Exception while trying to logout
java.net.SocketTimeoutException: Read timed out
        at sun.nio.ch.NioSocketImpl.timedRead(NioSocketImpl.java:288) _[_:_]
        at sun.nio.ch.NioSocketImpl.implRead(NioSocketImpl.java:314) _[_:_]
        at sun.nio.ch.NioSocketImpl.read(NioSocketImpl.java:355) _[_:_]
        at sun.nio.ch.NioSocketImpl_1.read(NioSocketImpl.java:808) _[_:_]
        at java.net.Socket_SocketInputStream.read(Socket.java:966) _[_:_]
        at sun.security.ssl.SSLSocketInputRecord.read(SSLSocketInputRecord.java:484) _[_:_]
        at sun.security.ssl.SSLSocketInputRecord.readHeader(SSLSocketInputRecord.java:478) _[_:_]
        at sun.security.ssl.SSLSocketInputRecord.bytesInCompletePacket(SSLSocketInputRecord.java:70) _[_:_]
        at sun.security.ssl.SSLSocketImpl.readApplicationRecord(SSLSocketImpl.java:1465) _[_:_]
        at sun.security.ssl.SSLSocketImpl_AppInputStream.read(SSLSocketImpl.java:1069) _[_:_]
        at org.apache.http.impl.io.SessionInputBufferImpl.streamRead(SessionInputBufferImpl.java:137) _[httpcore-4.4.9.jar:4.4.9]
        at org.apache.http.impl.io.SessionInputBufferImpl.fillBuffer(SessionInputBufferImpl.java:153) _[httpcore-4.4.9.jar:4.4.9]
        at org.apache.http.impl.io.SessionInputBufferImpl.readLine(SessionInputBufferImpl.java:282) _[httpcore-4.4.9.jar:4.4.9]
        at org.apache.http.impl.conn.DefaultHttpResponseParser.parseHead(DefaultHttpResponseParser.java:138) _[httpclient-4.5.9.jar:4.5.9]
        at org.apache.http.impl.conn.DefaultHttpResponseParser.parseHead(DefaultHttpResponseParser.java:56) _[httpclient-4.5.9.jar:4.5.9]
        at org.apache.http.impl.io.AbstractMessageParser.parse(AbstractMessageParser.java:259) _[httpcore-4.4.9.jar:4.4.9]
        at org.apache.http.impl.DefaultBHttpClientConnection.receiveResponseHeader(DefaultBHttpClientConnection.java:163) _[httpcore-4.4.9.jar:4.4.9]
        at org.apache.http.impl.conn.CPoolProxy.receiveResponseHeader(CPoolProxy.java:157) _[httpclient-4.5.9.jar:4.5.9]
        at org.apache.http.protocol.HttpRequestExecutor.doReceiveResponse(HttpRequestExecutor.java:273) _[httpcore-4.4.9.jar:4.4.9]
        at org.apache.http.protocol.HttpRequestExecutor.execute(HttpRequestExecutor.java:125) _[httpcore-4.4.9.jar:4.4.9]
        at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:272) _[httpclient-4.5.9.jar:4.5.9]
        at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:186) _[httpclient-4.5.9.jar:4.5.9]
        at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:89) _[httpclient-4.5.9.jar:4.5.9]
        at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110) _[httpclient-4.5.9.jar:4.5.9]
        at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:185) _[httpclient-4.5.9.jar:4.5.9]
        at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:83) _[httpclient-4.5.9.jar:4.5.9]
        at com.vnera.dataproviders.core.common.impl.dataprovider.southbound.AbstractDPHttpsConnectionEntity_ClosableHttpClientWrapper.httpPost(AbstractDPHttpsConnectionEntity.java:799) _[dataproviders-0.001-SNAPSHOT.jar:_]
        at com.vnera.dataproviders.core.common.impl.dataprovider.southbound.TokenAwareHttpConnectionWrapper.httpPost(TokenAwareHttpConnectionWrapper.java:109) _[dataproviders-0.001-SNAPSHOT.jar:_]
        at com.vnera.dataproviders.core.common.impl.dataprovider.southbound.AbstractDPHttpsConnectionEntity_ClosableHttpClientWrapper.httpPost(AbstractDPHttpsConnectionEntity.java:719) _[dataproviders-0.001-SNAPSHOT.jar:_]
        at com.vnera.dataproviders.core.common.impl.dataprovider.southbound.AbstractDPHttpsConnectionEntity_ClosableHttpClientWrapper.httpPost(AbstractDPHttpsConnectionEntity.java:870) _[dataproviders-0.001-SNAPSHOT.jar:_]
        at com.vnera.dataproviders.core.impl.cisco.aci.southbound.ACIConnectionEntity.close(ACIConnectionEntity.java:126) _[dataproviders-0.001-SNAPSHOT.jar:_]
        at com.vnera.dataproviders.core.common.DataProviderFactory.validateCredentials(DataProviderFactory.java:1033) _[dataproviders-0.001-SNAPSHOT.jar:_]
        at com.vnera.dataproviders.core.common.DataProviderFactory.validateCredentials(DataProviderFactory.java:470) _[dataproviders-0.001-SNAPSHOT.jar:_]
        at com.vnera.collector.core.engine.SaasCommandProcessor.processMessage(SaasCommandProcessor.java:372) _[collector-0.001-SNAPSHOT.jar:_]
        at com.vnera.collector.core.saascommunication.SaasListener.lambda_receiveMessage_0(SaasListener.java:116) _[collector-0.001-SNAPSHOT.jar:_]
        at java.util.concurrent.FutureTask.run(FutureTask.java:264) [_:_]
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136) [_:_]
        at java.util.concurrent.ThreadPoolExecutor_Worker.run(ThreadPoolExecutor.java:635) [_:_]
        at java.lang.Thread.run(Thread.java:840) [_:_]
2026-02-17T11:21:22.351Z WARN core.common.DataProviderFactory collector-process-msg-exec-0 validateCredentials:1042 Total time for validation in millis: 301542 for: CISCOACI
2026-02-17T11:21:22.351Z INFO core.common.DataProviderFactory collector-process-msg-exec-0 validateCredentials:1043 RetErrorCode : SUCCEEDED and errMsg {}
2026-02-17T11:21:22.352Z INFO core.engine.SaasCommandProcessor collector-process-msg-exec-0 processMessage:732 sending response for requestId: XXXXXX-YYYYYY-TTTT-YYYY-XXXXXXXXXXX, type:VALIDATE_DP_CREDENTIAL, resultCode:0, timeTaken:301623

Environment

VCF Operations for Networks 6.14.1

Cause

The application was manually managing cookie headers. In HA environments, certain managers require specific routing cookies to ensure session persistence (stickiness) to a specific cluster node. Manual header management interfered with this process, causing requests to hit nodes without an active session context.

Resolution

This is a known issue impacting VCF Operations for Networks (Formerly Aria Operations for Networks)

Workaround:

If you believe you have encountered this issue, please open a support case with Broadcom Support and refer to this KB article. For more information, see Creating and managing Broadcom support cases.