The purpose of this document is to help with configuration of VMware NSX Advanced Load Balancer (Avi) as an external load balancer for VMware Aria Operations for Logs (formerly vRealize Log Insight).

VMware Aria Operations for Logs provides the ability to configure one or more endpoints known as Virtual IPs (VIPs) as integrated load balancer (ILB) endpoints. Once configured, ILB VIPs can be used with the VMware Aria Operations for Logs cluster for any interaction such as ingestion and UI access.

However, the ILB VIP configuration has several limitations and is incompatible with the following network configurations:

In scenarios when the workarounds described in the KB articles above cannot be applied for various reasons, for example the application of suggested KBs is restricted due to strict policies or network limitations, our recommendation is to use an external load balancer instead.

This article provides detailed steps of configuration an VMware NSX Advanced Load Balancer (Avi) as an external load balancer for VMware Aria Operations for Logs, as well as defines the expected behavior.

Note:

The role of ILB endpoints is to provide L4 or connection load balancing. VMware Aria Operations for Logs cluster performs an additional L7 or application load balancing for the incoming ingestion where all the ingested logs are distributed approximately evenly among the cluster nodes for processing regardless of the ILB VIP configuration.

Terminalogy

ILB

Integrated Load Balancer

The ILB ensures that incoming ingestion traffic is accepted by VMware Aria Operations for Logs even if some VMware Aria Operations for Logs nodes become unavailable. The ILB also balances incoming traffic fairly among available VMware Aria Operations for Logs nodes. VMware Aria Operations for Logs clients, using both the web user interface and ingestion (through syslog or the Ingestion API), connect to VMware Aria Operations for Logs through the ILB address. Working with an Integrated Load Balancer (vmware.com)

ELB

External Load Balancer

The ELB is to do the traffic balancing outside from VMware Aria Operations for Logs.

ALB / ADC

Advanced Load Balancer / Application Delivery Controller

An application delivery controller (ADC) is primarily a load balancer that manages traffic flow to servers. The following techniques are most commonly used by ADCs to enhance application performance: Load Balancing, Caching, Compression, Offloading SSL processing, etc... Application Delivery Controller Definition | Avi Networks

VIP

Virtual IP

This is the IP address where traffic should be sent.

ILB VIP

Virtual IP of Integrated Load Balancer

The Integrated Load Balancer supports one or more virtual IP addresses (vIPs). Each vIP balances incoming ingestion and query traffic among available VMware Aria Operations for Logs nodes. Activate the Integrated Load Balancer (vmware.com)

VS

Virtual Service

A virtual service advertises an IP address and ports to the external world and listens for client traffic. Virtual Services | Avi Vantage Platform | (avinetworks.com)

VS VIP

Virtual IP assigned to the Virtual Service

A single IP address owned and advertised by a Service Engine (SE) that is used by the Virtual Service.

SE

Service Engine

Service Engine manages all the data plane operations within the vantage. To host the virtual services, the service engine requires either direct or routable access to the client and server networks. One or more service engines are grouped to share properties, such as network access and failover.

Service Engine Group (avinetworks.com)

VRF

Virtual Routing and Forwarding

Virtual routing and forwarding (VRF) IP technology allows users to configure multiple routing table instances to simultaneously co-exist within the same router. Virtual Routing and Forwarding (VRF) | Avi Networks

Floating IP

A floating IP will get configured on the active SE and will be taken over by the standby SE (new-active) upon failover. Floating IP Address (avinetworks.com)

Pool

Pools maintain the list of servers assigned to them and perform health monitoring, load balancing, persistence, and functions that involve VMware NSX Advanced Load Balancer-to-server interaction. Pools | Server Pools | (avinetworks.com)