Intermittent connectivity on NSX Native Load Balancer virtual IPs due to Pool members SSL handshake timeouts.

Products

• VMware NSX

Issue/Introduction

 

• Intermittent connectivity is observed on the NSX Native Load Balancer (LB) virtual IP.

• The load balancer enters a degraded state as pool members become unresponsive to the NSX LB.

• The pool members transition to a down state due to SSL handshake timeouts.

• OpenSSL client connections to backend server IPs on the monitored port result in SSL handshake failures using the below command 

openssl s_client -connect [Poolmember_ip]:Port

Environment

VMware NSX

Cause

The inability of the backend pool members to respond to the configured pool member monitor probe.

Resolution

Please make sure that the application is listening on the configured ports (e.g., 443, 8444) and responding to the health monitor probe.

 

Additional Information

Consult KB / Tech docs :
 troubleshooting  NSX T native load balancer :

• Troubleshooting NSX Native Load Balancer

Please find the tech document for active monitor configuration.

• Tech doc to configure Active Monitor