Impact of Local Network Access (LNA) Restrictions on DevTest Solutions

Products

• Service Virtualization

Issue/Introduction

Organization-wide implementation of Local Network Access (LNA) restrictions in modern browsers (Microsoft Edge, Google Chrome) may impact the functionality of DevTest tools. LNA is a security mechanism designed to prevent web applications from accessing local network resources without explicit permission.

Environment

All supported DevTest versions

Component: Portal, Registry, IAM

Cause

 

• Browser-Based Tools (Portal/Dashboard): If users access the DevTest Portal via a browser, LNA may block the Portal's ability to communicate with the Registry if the connection is configured using localhost or a local IP address.
• Backend Communication: Backend server-to-server communication (e.g., Simulator to Coordinator) typically uses Java HTTP clients. These are not affected by browser-enforced LNA restrictions.
• OS-Level Restrictions: If organizational policies include OS-level firewall changes that block the loopback address (127.0.0.1) or local IP traffic, DevTest will be impacted as components rely on these for internal processing.

Resolution

To ensure continued functionality after LNA enforcement, follow these recommended actions:

1. Use Resolvable Hostnames: Ensure all DevTest components are configured to use Fully Qualified Domain Names (FQDNs) rather than localhost or 127.0.0.1. Specifically, update the registry.host property in the local.properties file.
2. Browser Enterprise Policy: If the DevTest Portal is blocked by the browser, coordinate with your IT or Security team to configure an Enterprise Policy for Chrome or Edge to allow LNA for specific trusted origins.
3. Whitelist Configuration (DevTest 10.8.x and later): Ensure the following property is enabled in local.properties to allow the webserver to handle requests correctly: lisa.webserver.whitelist.hostsandpaths=0-255.0-255.0-255.0-255|...,/

Note: Verify if your organization's "LNA restrictions" apply only to the browser layer or if they include network-layer firewall changes, as the latter requires additional network infrastructure adjustments.