SSP - Degraded Alarm for multiple services

Products

• VMware vDefend Firewall with Advanced Threat Prevention
• VMware vDefend Firewall
• SSP

Issue/Introduction

Multiple SSP services may report a 'Degraded' alarm or experience continuous restarts due to inter-service communication failures. This occurs when the networking agent (antrea-agent) on an affected node enters a stale routing state, resulting in network connectivity issues for services running on that node.

Environment

SSP (All versions)

Cause

The issue is triggered by a temporary period of CPU exhaustion on the system. During this time, internal networking components experience a brief delay in processing updates.

Due to a known issue, the networking agent (antrea-agent) misinterprets this delay as a permanent failure. This creates a mismatch in the internal network configuration that can impact node network traffic routing. The system remains in this degraded state, causing multiple services to show alarms until the networking agent is manually restarted.

Resolution

Please contact Global Support Team