Aria Operations for Networks showing disconnected status for NSX

Products

• VMware NSX

Issue/Introduction

• In the Aria Operations for Network collector log /var/log/arkin/collector/collector.STDOUT*.log the following log messages are seen:

org.apache.http.conn.ConnectTimeoutException: Connect to 1<NSX-Manager-IP>:443 [/<NSX-Manager-IP>] failed: Connection timed out
java.util.concurrent.ExecutionException: java.lang.RuntimeException: org.apache.http.conn.ConnectTimeoutException: Connect to <NSX-Manager-IP>:443 [/<NSX-Manager-IP>] failed: Connection timed out`

• Most of the time there is no issue and the connection works.
• The NSX data source is configured with Principle Identity and a user with sufficient privileges is configured in NSX and is assigned the certificate from Aria Operations for Networks.
• Connections from the collector to the NSX manager work using port 443, as tested on the collector using: nz -zv <NSX-Manager-IP> 443
• Aria Operations for Networks has the NSX VIP address configured.
• Checking the NSX manager proxy log /var/log/proxy/envoy_access_log.txt only successful connections such as HTTP response code 200 are seen, for example:

<Date/Time><Collector IP> <NSX Manager IP> "GET" "/api/v1/node/services/cm-inventory/status" "HTTP/1.1" 200 - 0 217 785 783 "<Collector IP>" "vAPI/2.14.0 Java/11.0.28 (Linux; 6.1.143-3.ph5; amd64)" "########-7c0e-47c8-a901-############" "<NSX Manager IP>" "127.0.0.1:7441"

Environment

VMware NSX

Cause

Environmental issues are blocking connections between the Aria Operations for Networks collector and the NSX manager.

Resolution

Review any router or security device in between the collector and the NSX manager.