If you are using NSX Advanced Load Balancer in your SDDC resources environment, you can use the proxy routing feature of VMware Cloud Director to configure a backend proxy that is positioned between VMware Cloud Director service and the VMware NSX Advanced Load Balancer in your environment and functions as an access endpoint for this host.

This way, the controller is directly accessible to VMware Cloud Director without being publicly accessible on the internet.

You configure proxy routing by using the VMware Cloud Director OpenAPI.

Prerequisites

Procedure

  1. Run a GET request to retrieve the system-provided proxies that are available to your VMware Cloud Director instance.
    GET  https://{api_host}/cloudapi/1.0.0/proxyConfigurations
  2. Make a note of URN ID of the proxy configuration that matches your proxy client appliance.
    The user name for the proxy configuration must match the network name of the proxy client appliance.
  3. To create a proxy routing rule, run a POST request.
    POST https://{api_host}/cloudapi/1.0.0/proxyRules

    In the body of the request, include the URN for the proxy, as well the FQDN of the NSX Advanced Load Balancer controller.

    {
      "name": "proxy_sample_name",
      "destination": "https://example.AVIController.com",
      "proxy": {
        "name": "proxy_name",
        "id": "URN_1"
      },
      "priority": 0
    }

    Here, the value of the priority parameter indicates the relative preference of the rule in relation to other rules for the same destination, with lower numerical value indicating higher priority.

What to do next

Register the controller instance with your VMware Cloud Director instance. See Managing NSX Advanced Load Balancing in the VMware Cloud Director Service Provider Admin Portal Guide.