"Avi Load Balancer Controller is not reachable" in NSX UI After Certificate Replacement
Article ID: 442998
Updated On:
Products
Issue/Introduction
Within the VMware Cloud Foundation (VCF) NSX user interface, the AVI Load Balancer cluster displays the following error: "Avi Load Balancer Controller is not reachable. {0}".
- This symptom presents immediately following a recent certificate replacement operation on the AVI appliances.
- SDDC may show certificate error below:
- Secondary symptoms may include password synchronization failures between NSX and SDDC Manager due to endpoint communication instability with error below:
Environment
VMware NSX
VMware SDDC Manager
VMware Avi Load Balancer
Cause
The primary cause for the AVI unreachable state is that the load balancer nodes enter a hung or uninitialized state following a certificate replacement. The services handling internal cluster communication retain stale certificate data in memory, preventing the nodes from forming a healthy quorum and resulting in an UNAVAILABLE status.
Resolution
Workaround:
Initiate a reboot of the affected AVI Load Balancer appliances.
Allow the appliances time to complete the boot cycle, which forces them to reload configurations and bind the newly replaced certificates to the management and cluster communication services.
Verify that the initialization completes successfully and that the AVI cluster forms quorum, transitioning back to a STABLE state in the NSX UI.
Additional Information
For the secondary credential synchronization failure between NSX and SDDC Manager, execute the "Remediate" action within SDDC Manager instead of the "Update" action to sync the SDDC Manager credential database without attempting to push a password change to the endpoint.
If above Resolution does not resolve the issue, below are other similar symptom KB's:
VMware Avi Load Balancer Controller showing as not reachable in NSX-T UI
Feedback
