Application crash occurs when replacing the APH certificate

Products

• VMware NSX

Issue/Introduction

• APH-TN or APH-AR certificate replacement was performed and an application crash alarm is triggered.

• You can confirm that a core file similar to the following is generated under /var/dump on the NSX Manager:
  

  core.nsx.disp:3.0.<timestamp>.<old_pid>.<uid>.6.gz

• Messages similar to the following can be observed in /var/log/syslog on the NSX Manager:
  

  <Timestamp> <NSX_Manager_Hostname> NSX <pid> - [nsx@6876 comp="nsx-manager" subcomp="node-mgmt" username="root" level="INFO"] Core dump generation received by process: 0 [nsx.disp:3.0]
  <Timestamp> <NSX_Manager_Hostname> NSX <pid> - [nsx@6876 comp="nsx-manager" subcomp="node-mgmt" username="root" level="WARNING"] Core file generated: /var/log/core/core.nsx.disp:3.0.<timestamp>.<old_pid>.<uid>.6.gz

• From /var/log/vmware/appl-proxy.log on the NSX Manager, you can confirm that the appl-proxy process restarts, with the process ID changing from <old_pid> to <new_pid>:
  

  <Timestamp> <NSX_Manager_Hostname> NSX <old_pid> - [nsx@6876 comp="nsx-manager" subcomp="appl-proxy" tid="<tid>" level="INFO"] CertListToString: certs:..
  <Timestamp> <NSX_Manager_Hostname> NSX <old_pid> - [nsx@6876 comp="nsx-manager" subcomp="appl-proxy" tid="<tid>" level="INFO"] CertListToString: certs:..
  <Timestamp> <NSX_Manager_Hostname> NSX <new_pid> - [nsx@6876 comp="nsx-manager" subcomp="appl-proxy" tid="<tid>" level="INFO"] Start Appliance Proxy Hub (APH)(Build Number: 22667798)
  <Timestamp> <NSX_Manager_Hostname> NSX <new_pid> - [nsx@6876 comp="nsx-manager" subcomp="appl-proxy" tid="<tid>" level="INFO"] Loading appl-proxy config file /etc/vmware/nsx-appl-proxy/appl-proxy.xml
  <Timestamp> <NSX_Manager_Hostname> NSX <new_pid> - [nsx@6876 comp="nsx-manager" subcomp="appl-proxy" tid="<tid>" level="INFO"] Appl-Proxy public configuration file is: /etc/vmware/nsx-appl-proxy/appl-proxy-public-cfg.xml

Environment

VMware NSX

Cause

The appl-proxy process crashes because a TCP socket bind failure is not handled properly. This issue may occur during an APH certificate update.

Resolution

The appl-proxy service restarts automatically, so there is no impact from the crash.
This issue is resolved in NSX 4.2.1, available in the Broadcom Support Portal.