ConnectTimeoutException when using Principle Identity Authentication in VCF Operations for Networks

Products

• VCF Operations for Networks

Issue/Introduction

• VMware NSX is configured as a data source in Aria Operations for Networks, using Principal Identity.
• From time to time, not always, the NSX data source shows 'Data Source not reachable from Collector VM'.
• Data Source may not be reachable from Collector VM when using Principal Identity based Authentication, due to intermittent ConnectTimeoutException being traced in the Collector logs /var/log/arkin/collector:

java.util.concurrent.ExecutionException: org.apache.http.conn.ConnectTimeoutException: Connect to <NSX-MANAGER-IP>:443 [/<NSX-MANAGER-IP>] failed: Connection timed out
Caused by: org.apache.http.conn.ConnectTimeoutException: Connect to <NSX-MANAGER-IP>:443 [/<NSX-MANAGER-IP>] failed: Connection timed out

• If the data source is configured using username and password, there are no connection time outs.

Environment

• VCF Operations for Networks
• VMware NSX

Cause

This issue can arise if there are communications issue between the NSX manager and the collector.

Resolution

Workaround:

When configuring the NSX data source, use username and password, rather than Principal Identify, detail on how to configure this can be found here Add VMware NSX-T Manager.