Avi load balancer LDAPS health monitor fails after upgrade to 32.1.2

Products

• VMware Avi Load Balancer

Issue/Introduction

• LDAP pool members are marked down by internal LDAPS health monitor. 
• The LDAPS health monitor marks down the pool members with reason : Payload timed out. 

Environment

Avi LB version  31.x

Avi LB version 32.x

Cause

• The issue is specific to those LDAP servers which sends the entire response for the LDAP query in a single encrypted TLS record.
• The issue stems from update of the ubuntu version, which inturn updated the libcurl libraries.

Resolution

Workaround: 

• Use an external LDAP health monitor for monitoring ldaps servers.
  • Reference techdoc for external health monitor:  External-health-monitor 

Fix: 

• Fix for this issue is targeted to be released in future version release of Avi LB software. 
  
  • Subscribe to this article to be updated on the fix status; see Subscribe to a Broadcom knowledge article by article or product