Configuration Objects Restricted in the NSX ALB UI for Essentials and Basic License
Note: The Basic Edition of Avi Load Balancer (formerly known as NSX Advanced Load Balancer) has reached its End of Availability (EoA) date on Jan 30th, 2024. The changes only apply to the Basic Edition of Avi Load Balancer. For additional details, please visit https://kb.vmware.com/s/article/96386.
Overview
VMware NSX Advanced Load Balancer supports the followings license types:
- VMware NSX Advanced Load Balancer Enterprise Edition - VMware NSX ALB Enterprise Edition is a fully-featured VMware NSX ALB license, which includes load balancing, GSLB, WAF, and all other features available on Avi Vantage.
- VMware NSX Advanced Load Balancer - Basic Edition
- VMware NSX Advanced Load Balancer Essentials for Tanzu
In VMware NSX ALB essentials for Tanzu, a few configuration options are restricted or not editable in the NSX ALB UI. Some configuration knobs allow the create and edit options using UI in the essentials edition, whereas others only have the view access.
NSX ALB UI Object List for Essentials, Basic, and Enterprise Edition
See the below table for more information on permissions available for various UI objects in VMware NSX ALB essentials for Tanzu, VMware NSX Advanced Load Balancer - Basic Edition, and VMware NSX Advance Load Balancer Enterprise Edition.
| Menu | Sub Menu | Permissions(Essentials)* | Permissions(Basic)* | Permissions(Enterprise) |
|---|---|---|---|---|
| Applications | Dashboard | View | View | View |
| Virtual Service | View | Create/Edit/View | Create/Edit/View | |
| VS VIPs | View | Create/Edit/View | Create/Edit/View | |
| Pools | View | Create/Edit/View | Create/Edit/View | |
| Pool Groups | View | Create/Edit/View | Create/Edit/View | |
| Operations | Alerts - All Alerts | View | Create/Edit/View | Create/Edit/View |
| Alerts - Alert Config | View | Create/Edit/View | Create/Edit/View | |
| Alerts - Alert Actions | View | Create/Edit/View | Create/Edit/View | |
| Events - All Events | View | Create/Edit/View | Create/Edit/View | |
| Events - Config Audit Trail | View | Create/Edit/View | Create/Edit/View | |
| Notifications - Syslog | View | Create/Edit/View | Create/Edit/View | |
| Notifications - Email | View | Create/Edit/View | Create/Edit/View | |
| Notifications - SNMP Trap | View | Create/Edit/View | Create/Edit/View | |
| Traffic Capture - Traffic Capture | Create/Edit/View | Create/Edit/View | Create/Edit/View | |
| Templates | Profile - Application | View | Create/Edit/View | Create/Edit/View |
| Profile - TCP/UDP | View | Create/Edit/View | Create/Edit/View | |
| Profile - Persistence | View | Create/Edit/View | Create/Edit/View | |
| Profile - Health Monitor | View | Create/Edit/View | Create/Edit/View | |
| Profile - Analytics | View | Create/Edit/View | Create/Edit/View | |
| Profile - IPAM/DNS Profiles | Create/Edit/View | Create/Edit/View | Create/Edit/View | |
| Profile - Custom IPAM/DNS | View | Create/Edit/View | Create/Edit/View | |
| Profile - Traffic Clone | View | Create/Edit/View | Create/Edit/View | |
| Profile - ICAP Profile | View | Create/Edit/View | Create/Edit/View | |
| Templates | Policies - NAT Policy | View | Create/Edit/View | Create/Edit/View |
| Policies - L4 Policy Set | View | Create/Edit/View | Create/Edit/View | |
| Templates | Groups - IP Groups | View | Create/Edit/View | Create/Edit/View |
| Groups - String Groups | View | Create/Edit/View | Create/Edit/View | |
| Templates | Security - SSL/TLS Certificates | Create/Edit/View | Create/Edit/View | Create/Edit/View |
| Security - SSL/TLS Profile | View | Create/Edit/View | Create/Edit/View | |
| Security - PKI Profile | View | Create/Edit/View | Create/Edit/View | |
| Security - Auth Profile | View | Create/Edit/View | Create/Edit/View | |
| Security - JWT Server Profile | View | Create/Edit/View | Create/Edit/View | |
| Security - Ping Access Agent | View | Create/Edit/View | Create/Edit/View | |
| Security - Certificate Management | View | Create/Edit/View | Create/Edit/View | |
| Security - IP Reputation | View | Create/Edit/View | Create/Edit/View | |
| Security - Geo DB | View | Create/Edit/View | Create/Edit/View | |
| Security - HSM Group | View | Create/Edit/View | Create/Edit/View | |
| Security - SSO Policy | View | Create/Edit/View | Create/Edit/View | |
| Security - Bot Management Policy | View | Create/Edit/View | Create/Edit/View | |
| Templates | Scripts - DataScripts | View | Create/Edit/View | Create/Edit/View |
| Scripts - ControlScripts | View | Create/Edit/View | Create/Edit/View | |
| Scripts - ProtocolParserScripts | View | Create/Edit/View | Create/Edit/View | |
| Templates | Autoscale - Server Autoscale | View | Create/Edit/View | Create/Edit/View |
| Autoscale - Launch Config | View | Create/Edit/View | Create/Edit/View | |
| Autoscale - WebHook | View | Create/Edit/View | Create/Edit/View | |
| Autoscale - PoolGroup Deployment | View | Create/Edit/View | Create/Edit/View | |
| Templates | WAF - WAF Policy | View | Create/Edit/View | Create/Edit/View |
| WAF - WAF Profile | View | Create/Edit/View | Create/Edit/View | |
| WAF - Application Rules | View | Create/Edit/View | Create/Edit/View | |
| WAF - Positive Security | View | Create/Edit/View | Create/Edit/View | |
| WAF - CRS | View | Create/Edit/View | Create/Edit/View | |
| Templates | Error Page - Error Page Profile | View | Create/Edit/View | Create/Edit/View |
| Error Page - Error Page Body | View | Create/Edit/View | Create/Edit/View | |
| Infrastructure | Dashboard | View | View | View |
| Clouds | Create/Edit/View | Create/Edit/View | Create/Edit/View | |
| Cloud Resources - Service Engine | View | Create/Edit/View | Create/Edit/View | |
| Cloud Resources - Service Engine Group | Create/Edit/View | Create/Edit/View | Create/Edit/View | |
| Cloud Resources - Networks | Edit/View | Create/Edit/View | Create/Edit/View | |
| Cloud Resources - Routing | Create/Edit/View | Create/Edit/View | Create/Edit/View | |
| GSLB - Site Configuration | View | Create/Edit/View | Create/Edit/View | |
| Administration | Accounts - Users | View | Create/Edit/View | Create/Edit/View |
| Accounts - User Profiles | View | Create/Edit/View | Create/Edit/View | |
| Accounts - Roles | View | Create/Edit/View | Create/Edit/View | |
| Accounts - Tenants | View | Create/Edit/View | Create/Edit/View | |
| Administration | Settings – Authentication/Authorization | Edit/View | Edit/View | Edit/View |
| Settings – Access Settings | Edit/View | Edit/View | Edit/View | |
| Settings – DNS/NTP | Edit/View | Edit/View | Edit/View | |
| Settings – Licensing | Edit/View | Edit/View | Edit/View | |
| Settings – Email/SMTP | Edit/View | Edit/View | Edit/View | |
| Settings – Tenancy Mode | Edit/View | Edit/View | Edit/View | |
| Settings – Upload HSM Packages | Edit/View | Edit/View | Edit/View | |
| Settings – DNS Service | View | Edit/View | Edit/View | |
| Settings – Cloud Services | View | Create/Edit/View | Create/Edit/View | |
| Administration | Controller - Nodes | Edit/View | Edit/View | Edit/View |
| Controller - Events | View | Create/Edit/View | Create/Edit/View | |
| Controller - Alerts | View | Create/Edit/View | Create/Edit/View | |
| Controller - Software | View | Create/Edit/View | Create/Edit/View | |
| Controller - System Update | Edit/View | Create/Edit/View | Create/Edit/View | |
| Controller - SEG Update | View | Create/Edit/View | Create/Edit/View | |
| Administration | System - Configuration Backup | Edit/View | Edit/View | Edit/View |
| System - Tech Support | Create/Edit/View | Create/Edit/View | Create/Edit/View | |
| System - Crash Reports | View | Create/Edit/View | Create/Edit/View | |
| Administration | User Credential - User Credentials | View | Create/Edit/View | Create/Edit/View |
| Administration | Support - Cases | View | Create/Edit/View | Create/Edit/View |
*Notes:
This table lists all the UI options, but not all features are supported with the Essentials and Basic editions.
Some of the examples are as follows:
- WAF and GSLB are not supported with the essentials edition and the Basic Edition, but WAF and GSLB are available with the Enterprise edition.
- Layer 7 load balancing is not available with the Essentials edition, limited capability for Layer 7 load balancing is available with the Basic edition, and fully-featured Layer 7 support is available with the Enterprise edition.
- Similarly, only the vCenter cloud and No Orchestrator clouds can be created/edited with the essentials and the Basic editions. Whereas the Enterprise Edition supports all other clouds, like NSX-T, Azure, AWS, etc.
- Only HTTP and Layer 4 profiles can be created/edited in the Basic edition.
- The GSLB Services option is available under the Applications tab only when the GSLB feature is configured on the NSX ALB Controller. GSLB is available with the Enterprise edition only.
In the NSX ALB UI, you might be able to edit/view the options, but to check if a feature is supported for your NSX ALB edition, see VMware NSX Advanced Load Balancer License Editions.