Virtual Servers
A virtual server is similar to a workload. It can be assigned labels and has IP addresses, but does not report traffic to the Illumio Core. Each virtual server has only one VIP. The local IP addresses are used as source IP addresses for connections to the pool members (backend servers) when the virtual server is operating in SNAT mode or Auto mode. These IP addresses are likely to be shared by multiple virtual servers on the server load balancer.
A discovered virtual server is a server load balancer (SLB) virtual server (IP address and port(s)) that the NEN has discovered when interrogating SLBs managed by the PCE.
For the topic overview and more details, see the Security Policy Guide, Load Balancers, and Virtual Servers.
Virtual Server Methods
There are two groups of methods used to manage virtual servers:
Methods for virtual servers
Methods for discovered virtual servers
Virtual Servers
Virtual Server Methods
Functionality | HTTP | URI |
---|---|---|
Get a list of Virtual Servers. |
|
|
Get a specified Virtual Serve.r |
|
|
Create a Virtual Server objec.t |
|
|
Modify the enforcement mode, labels, and backend/provider labels of a specified Virtual Server. |
|
|
Query Parameters for Virtual Servers
Parameter | Description | Type | Required |
---|---|---|---|
| Organization ID | Integer | Yes |
| Security Policy Version | String | Yes |
| URI of the discovered virtual server to filter by | String | No |
| FQDN of the PCE | String | No |
| A unique identifier within the external data source | String | No |
| The data source from which a resource originates | String | NO |
| 2D array of label URIs encoded as a JSON string. Filter by virtual server labels. | String | No |
| Maximum number of discovered virtual servers to return | Integer | No |
| Mode of the virtual server(s) to return | String | No |
| Name of virtual server(s) to return. Supports partial matches | String | No |
| Hostname of NEN object to filter virtual server(s)v | String | No |
| URI of SLB object to filter virtual server(s) | String | No |
| Frontend (VIP) address of the virtual server(s). Supports suffix-wildcard matches | String | No |
| Port of frontend VIP of the virtual server(s) | Integer | No |
| Protocol of frontend VIP of the virtual server(s) | Integer | No |
Properties for Virtual Servers :
Property | Description | Type | Required |
---|---|---|---|
| href of virtual server | String | Yes |
| The short friendly name of the virtual server | String | Yes |
| 2D array of label URIs, encoded as a JSON string. Filter by virtual server labels. "$ref": "../common/label_optional_key_value.schema.json" | Array | Yes |
| URI of associated service "$ref": "../common/href_object.schema.json" | Yes | |
| minItems: 0, label: "$ref": "../common/label_optional_key_value.schema.json" workload: "$ref": "../common/href_object.schema.json" | Array | Yes |
| Management mode of the virtual server | String | Yes |
| Corresponding discovered virtual server, server URI | String/Null | Yes |
| Reference to | Yes | |
| The time (rfc3339 timestamp) at which this virtual server was created | String | Yes |
| The time (rfc3339 timestamp) at which this virtual server was last updated | String | Yes |
| The time (rfc3339 timestamp) at which this virtual server was deleted | String/Null | Yes |
| The URI of the user who created this virtual server Reference to | Yes | |
| The URI of the user who last updated this virtual server Reference to | Yes | |
| The URI of the user who deleted this virtual server Reference to | Yes |
Discovered Virtual Servers
Discovered Virtual Servers Methods
You can use only three GET methods for discovered virtual servers.
Functionality | HTTP | URI |
---|---|---|
Get a list of Discovered Virtual Servers. |
|
|
Get a specified Discovered Virtual Serve.r |
|
|
Discovery on-demand: list the discovered virtual servers |
|
|
Discovered Virtual Servers Parameters
Parameter | Description | Type | Required |
---|---|---|---|
| Organization ID | Integer | Yes |
| FQDN of the PCE | String | No |
| Filter discovered virtual server(s) by whether they are managed by a virtual server object | Boolean | No |
| Maximum number of discovered virtual servers to return | Integer | No |
| Name of discovered virtual server(s) to return. Supports partial matches | String | No |
| Hostname of NEN object to filter discovered virtual server(s) | String | No |
| URI of SLB object to filter discovered virtual server(s) | String | No |
| Frontend (VIP) address of the discovered virtual server(s). Supports suffix-wildcard matches | String | No |
| Port of frontend VIP of the discovered virtual server(s) | Integer | No |
| Protocol of frontend VIP of the discovered virtual server(s) | Integer | No |
| URI of virtual server to filter discovered virtual server(s) | String | No |
| 2D array of label URIs, encoded as a JSON string. Filter by virtual server labels. Requires usage of has_virtual_server: true | String | No |
| The filter discovered virtual server(s) in virtual server mode. Requires usage of has_virtual_server: true | String | No |
Discovered Virtual Server Properties
Property | Description | Type | Required |
---|---|---|---|
| href of discovered virtual server | String | Yes |
| NFC-generated unique identifier for discovered virtual server | String | Yes |
| Configured name of the virtual server | String | Yes |
| VIP including protocol and port for the discovered virtual server. Reference to | Yes | |
| Local IPs of virtual server Format: ipv4 | Array | Yes |
| Virtual server mode of operation | String | Yes |
| URI of Service Load Balancer (SLB) object to filter discovered virtual server(s) Reference to | Yes | |
| Service checks, which has these properties:
| Object | Yes |
| DEPRECATED AND REPLACED (USE 'network_enforcement_node' INSTEAD) URI of the NFC for this discovered virtual server Reference to | Yes | |
| The time (rfc3339 timestamp) at which this server load balancer was created | date/time | Yes |
| The time (rfc3339 timestamp) at which this server load balancer was last updated | date/time | Yes |
| Reference to | Yes | |
| Reference to | Yes | |
| URI of the Network Enforcement Node for this discovered virtual server Reference to | Yes |