VIDM Not Accessible via NSX Native Load Balancer IP

Products

• VMware NSX

Issue/Introduction

• The VMware Identity Manager (vIDM) page is accessible using the NSX Native Load Balancer Fully Qualified Domain Name (FQDN).
• However, the page is not accessible when using the Load Balancer IP address, resulting in an "HTTP ERROR 444" error as shown below
• Accessing the VIDM page directly via VIDM IP/FQDN works.

 

Environment

VMware Identity Manager (vIDM)
VMware NSX Load Balancer

 

Cause

• On the VIDM appliance, the file runtime-config.properties located at /usr/local/horizon/conf/ directory, has the parameter gateway.hostname explicitly hardcoded to the FQDN of the NSX Native Load balancer.
• This configuration prevents the Load Balancer from successfully routing traffic when accessed via IP address.

Resolution

To resolve this, update the gateway hostname parameter ofVIDM appliances to the Load Balancer IP address on all affected vIDM appliances:

• Log into the vIDM appliance via SSH or Putty.
• Navigate to the configuration directory: cd /usr/local/horizon/conf/
• Create a backup of the properties file: cp runtime-config.properties old-runtime-config.properties.bak
• Edit runtime-config.properties and locate the following parameter: gateway.hostname=
• Change the value to the Load Balancer IP: gateway.hostname=<NSX Load Balancer IP>
• Repeat these steps on all other vIDM appliances in the cluster.
• Restart the respective vIDM virtual machines.
• Verification: After the restart, confirm the vIDM page is accessible via https://<NSX Load Balancer IP>

Additional Information

For further help, please open a Broadcom support case. Refer to the KB https://knowledge.broadcom.com/external/article/142884