Intermittent ICMP Packet Loss to Anycast VIP Behind NSX Segments
search cancel

Intermittent ICMP Packet Loss to Anycast VIP Behind NSX Segments

book

Article ID: 452311

calendar_today

Updated On:

Products

VMware NSX

Issue/Introduction

  • DNS VM(Infoblox) located behind NSX overlay segments experience intermittent Ping(ICMP) connectivity issues.
  • Continuous ping tests to the Anycast DNS VIP exhibit 4–5% ICMP packet loss.
  • Infoblox VM has two overlay Nic's one peering BGP with Tier-0 and other is connected to an NSX segment. Ping response is leaving via another nic

Environment

VMware NSX

Cause

Strict Unicast Reverse Path Forwarding (uRPF) active on the VDR port drops asymmetric return packets when traffic arrives on an interface that differs from the originating uplink

Resolution

  • Identify the impacted NSX segment
  • Modify the uRPF mode from Strict to None under "Additional settings" on the segment
  • Validate the resolution by running continuous ping tests to the Anycast DNS VIP to confirm 0% packet loss
Powered by Wolken Software