SystemConfiguration updates for controller management access not reflecting in the iptables after upgrade from 22.1.x to 32.1.1

Products

• VMware Avi Load Balancer

Issue/Introduction

• When the controller is upgraded from 22.1.7 to versions <=32.1.1 or 31.2.x and has management access configured, modifications to those access rules started to fail to reflect on iptables on the controller.

Environment

• Avi controller version 31.2.x, 31.1.x, and < 32.1.2

Cause

• Root cause for this issue is determined to be
  • Legacy iptables is used to set kernel in-memory structs to program the iptable rules during configuration
  • Upgrade workflow is however restoring the saved iptable rules from the previous partition to iptables-nft (Newer netfilter format). This is the default in Ubuntu 24.04

Resolution

• This issue is fixed on 32.1.2 & scheduled to be fixed in 31.2.3 release.
  • See Instructions to find Product Downloads & Patches for VMware Avi Load Balancer in Broadcom Support Portal to download the corresponding release.
• For Workaround of this issue on Avi LB version < 32.1.2
  • Contact Broadcom support (https://knowledge.broadcom.com/external/article/206567/contact-broadcom-support.html) or https://knowledge.broadcom.com/external/article/142884/creating-and-managing-broadcom-support-c.html article.