Skip to main content

Illumio Core What's New and Release Notes 24.5

Resolved Issue in NEN 2.5.1

Excessive NEN API GET calls to F5 prevented policy programming (E-96989)

When trying to unmanage F5 Virtual Servers, NEN API GET requests to the F5 encountered slower than expected response times, which lead to the following sequence of events:

  1. Responses from the F5 timed out.

  2. Which in turn caused the NEN to retry its requests repeatedly.

  3. Lacking timely F5 responses, the NEN ran multiple simultaneous unmanage jobs for VSs.

  4. This caused the NEN to DDOS the F5 with GET /mgmt/tm/security/firewall/policy?expandSubcollections=true API calls.

  5. Result: This overloaded the F5 and caused policy programming to fail due to API timeouts.

This issue is resolved. The NEN now serializes unmanage VS jobs for server load balancers.