By default, the NSX-T Manager has a protection mechanism in place to prevent the API from being overloaded. This is a good thing, protecting the NSX-T Manager.
But, the increasing integrations into NSX-T, make it so that more and more products are using the NSX-T API to monitor or configure NSX (vRealize Network Insight, vRealize Operations, vRealize Automation, etc.). I’ve hit this limit several times and needed to push that limit up.
The API Guide states that the default maximum API request number is 100 per second. In the guide, there’s a reference to the API call to change the settings, but there’s also an easier way; via the console.
Configuring the API limits
First, the documentation says that it’s not officially recommended to increase the API limits. Make sure the NSX-T Manager(s) can handle the extra load and that you don’t push them into resource contention. Monitor them after you’ve increased the limit and prepare for a rollback if needed.
With that out of the way, there are three options under the HTTP service that control the API limits:
See the defaults by running this:
nsx-south> get service http<br />Fri Jan 15 2021 UTC 12:47:02.608<br />Service name: http<br />Service state: running<br />Logging level: info<br />Session timeout: 1800<br />Connection timeout: 30<br />Client API rate limit: 100 requests/sec<br />Client API concurrency limit: 40 connections<br />Global API concurrency limit: 199 connections<br />Redirect host: (not configured)<br />Basic authentication: enabled<br />Cookie-based authentication: enabled
And, here’s how to set them:
nsx-south> set service http client-api-rate-limit [new-limit]
nsx-south> set service http client-api-concurrency-limit [new-limit]
nsx-south> set service http global-api-concurrency-limit [new-limit]