Third party API Fails to Import NSX Groups in VCF 9.x - VMware Cloud Foundation

Products

• VMware NSX

Issue/Introduction

• Third party products, using NSX API's to import information such as groups are failing with 404 response code, seen in /var/log/proxy/envoy_access.log: 

  192.168.1.1 172.16.1.1 "GET" "/api/2.0/services/securitygroup/securitygroup-########-####-####-####-########" "HTTP/2" 404 UAEX 0 191 2 - "10.154.0.72" "-" "########-####-####-####-############" "172.16.1.1" "-"

• Can also be seen in /var/log/syslog: 

  ERROR NSX 10137 [nsx@4413 comp="nsx-manager" errorCode="MP258" level="ERROR" logger="NsxBaseRestController" msgID="SYSTEM" subcomp="manager" threadName="http-nio-127.0.0.1-7440-exec-32124"] local access violation: URL: /nsxapi/api/v1/ns-groups/########-####-####-####-############/effective-ip-address-members

Environment

VMware VCF NSX 9.x

Cause

In VCF 9.x, Management Plane APIs were intentionally removed to align with updated product architecture. This behavior is working as designed.

Resolution

Review the VCF NSX 9.x API guide and update the third party to use equivalent policy API.

Additional Information

NSX-T Data Center REST API