VCF Load Balancer Insight: Overview

Version: 2026.1.2.1

This page is the technical reference for VCF Load Balancer Insight. Everything described here appears in Aria Operations once an adapter instance has been configured and a collection has completed. The supported F5 models are BIG-IP LTM and BIG-IP SSL; the object model is shared across vendors and models and carries no vendor names.

Dashboards

All dashboards are shipped inside the Management Pack, are placed in a dedicated folder named after the product, and are installed automatically with the adapter content. They are vendor-neutral: the same dashboards serve every supported load-balancer vendor, because they are built on the shared object model, not on vendor-specific keys.

Load Balancer Health

The Load Balancer Health dashboard is the entry point for the load balancing estate:

  • Load Balancer Clusters: a resource list of the clusters with their member count and standby members.
  • Load Balancer Devices: a resource list of the member devices, coloured by the health badge and showing availability.
  • Load Balancer - Active Alert List: the active alert list scoped to the objects produced by VCF Load Balancer Insight.

Load Balancer Device Status

The Load Balancer Device Status dashboard shows the base layer of each polled device:

  • Device Identity and State: a table of failover_state, hostname, software_version and device_type.
  • Device Resource Usage: cpu_usage, memory_usage and disk_usage per device over time.
  • Load Balancer Devices - Active Alert List: the alerts raised against the devices.

Load Balancer Pools

The Load Balancer Pools dashboard covers the traffic distribution layer:

  • Load Balancer Pools: a table of pools with active_count, total_count, load balancing mode and availability_state.
  • Load Balancer Virtual Servers: a table of virtual servers with pool, availability_state and current connections.
  • Load Balancer Pools - Active Alert List: the alerts raised against pools and virtual servers.

Load Balancer Members and Nodes

The Load Balancer Members and Nodes dashboard shows the backend endpoints:

  • Load Balancer Pool Members: a table of members with node_name, pool_name, port and availability_state.
  • Load Balancer Nodes: a table of nodes with ip_address, state and availability_state.
  • Load Balancer Members and Nodes - Active Alert List: the alerts raised against members and nodes.

Load Balancer Certificates

The Load Balancer Certificates dashboard is the certificate renewal view:

  • SSL Certificates: a table of days_until_expiration, issuer, subject and expiration_string per certificate.
  • Certificate Expiry: certificates sorted by days to expiry, ascending, so the nearest expiry is first.
  • SSL Profiles (Certificate and Cipher Group): a table of LB Profiles showing the ssl group fields — ssl|certificate, ssl|cipher_group, ssl|min_tls_version and ssl|sni_default — populated on the F5 SSL model.
  • Load Balancer Certificates - Active Alert List: the certificate-expiry alerts.

Custom Groups

Custom Group NameDescription
LB WorldA single container group that aggregates every object produced by VCF Load Balancer Insight, across all vendors and all ten object kinds. Shared network category convention with the other Indevops network Management Packs.
LB ClustersLB Device objects grouped by their parent LB Cluster. A backstop for the read-only case where /cm/device-group cannot be read and the cluster is synthesized.
LB Devices by TypeLB Devices filtered on the top-level device_type property: standalone or cluster member.
LB Devices by VendorLB Devices filtered on the top-level vendor property: F5 or Citrix.
LB Devices by ModelLB Devices filtered on the top-level model property: LTM or SSL. Used to separate the LTM and SSL F5 estates in one adapter kind.

Alerts

ObjectAlertMetricConditionRecommendation IDSeverity
LB DeviceDevice is unreachableavailability<= 0Recommendation-df-lb-device-unreachableCritical
LB ClusterCluster failover occurredstatus|failover_statechange active -> standbyRecommendation-df-lb-cluster-failoverWarning
LB ClusterStandby member offlinecluster|standby_members== member_countRecommendation-df-lb-cluster-standby-offlineCritical
LB Virtual ServerVirtual Server is downavailability<= 0Recommendation-df-lb-virtualserver-downCritical
LB Virtual ServerHigh concurrent connectionsconnections|currentwarning > 80%, critical > 95% of the limitRecommendation-ud-lb-virtualserver-connectionsWarning / Critical
LB PoolPool is down / no active membersavailability, members|active_countactive_count == 0; availability <= 0Recommendation-df-lb-pool-downCritical
LB Pool MemberPool Member is downstatus|availability_state= offlineRecommendation-df-lb-poolmember-downWarning
LB NodeNode is downstatus|availability_state= offlineRecommendation-df-lb-node-downWarning
LB DeviceResource utilization is highsystem|cpu_usage, system|memory_usage, system|disk_usagewarning > 80, critical > 90Recommendation-ud-lb-device-resourceWarning / Critical
SSL CertificateCertificate expires soonvalidity|days_until_expirationwarning < 30, critical < 14Recommendation-df-lb-cert-expiryWarning / Critical

Every alert is symptom-based, attaches to the object's health badge and embeds its recommendation. The Recommendation IDs are the fixed ER #77666 values; a different prefix fails the import into VCF Operations 9.1. Thresholds 80/90 % and 30/14 days are proposals pending customer approval.

Collected objects

Relationships

Object relationships

The topology is rebuilt on every collection cycle. The hierarchy is:

  • The adapter instance is the root of the hierarchy and the single API entry point. It parents the cluster.
  • LB Cluster is the HA group or device group. It parents every LB Device.
  • LB Device is one BIG-IP member. It parents the network ports, the virtual servers, the monitors and the SSL certificates.
  • LB Virtual Server terminates client traffic. It parents the default LB Pool it forwards to.
  • LB Pool is the backend group. It parents its LB Pool Members.
  • LB Pool Member is a node plus port in a pool. It parents the LB Node it points at.
  • A VMware VirtualMachine is an external parent of LB Device, joined on the management address.
  • A phpIPAM IP Address is an external parent of LB Cluster, LB Device, LB Port and LB Virtual Server, matched on the bare management_ip and vip_address properties.

Relationships are never declared in the adapter schema; they are added at collection time and cleared and rebuilt each cycle, so a relationship removed at the source disappears downstream.

Top-level attributes (all kinds)

Every object kind carries these ungrouped attributes. They are the only keys external relations and cross-vendor filters may rely on.

Data NameTypeDescription
availabilitymetric1 when the object was collected, 0 when it was expected but unreachable or down.
management_ippropertyManagement address; present on LB Cluster, LB Device and LB Port. The phpIPAM adapter matches the bare key ^management_ip$, so it must stay ungrouped.
vendorpropertyProducer, for example F5.
modelpropertyProduct family: LTM or SSL for F5.
device_typepropertystandalone or cluster member; present on LB Device.
vip_addresspropertyBare VIP IP; present on LB Virtual Server. The phpIPAM adapter matches the bare key ^vip_address$, so it must stay ungrouped.

LB Cluster

The HA group or device group. When the read-only account cannot read the F5 Device Group, the cluster is synthesized from the device member list, so the object always exists.

Identifiers: adapter_host, cluster_key.

Data NameTypeDescription
availabilitymetric1 when the cluster was collected, 0 when it was expected but unreachable.
management_ippropertyManagement address of the cluster (active member).
vendor / modelpropertyF5 / LTM.
identity|namepropertyCluster name.
identity|cluster_typepropertyDevice-group type, or synthesized / standalone.
cluster|ha_modepropertystandalone, active/standby or active/active, derived from member failover states.
cluster|member_countmetricNumber of members in the group.
cluster|standby_membersmetricNumber of members in standby.
status|failover_statepropertyAggregate member state: active, standby, mixed or offline.

LB Device

One BIG-IP in the HA group. The polled member carries the full system metrics; peer members carry properties and availability only, because their system is never read.

Identifiers: adapter_host, device_key.

Data NameTypeDescription
availabilitymetric1 when the device is present and reachable, 0 when it is offline.
management_ippropertyDevice management address.
vendor / modelpropertyF5 / LTM.
device_typepropertystandalone or cluster member.
identity|namepropertyDevice name, the HA identity.
identity|hostnamepropertyConfigured hostname.
identity|software_versionpropertyTMOS version.
identity|software_buildpropertyTMOS build.
identity|editionpropertySoftware edition.
identity|productpropertyProduct name.
identity|hardware_modelpropertyHardware model.
identity|platformpropertyHardware platform.
identity|serial_numberpropertyChassis serial number.
identity|active_modulespropertyProvisioned modules.
identity|self_devicepropertySelf-device flag.
status|failover_statepropertyactive, standby or offline.
system|cpu_usagemetricCPU utilization, percent. Requires administrator rights on some instances.
system|memory_usagemetricMemory utilization, percent.
system|disk_usagemetricDisk utilization, percent.

LB Port

One network interface of the polled device.

Identifiers: adapter_host, device_key, port_key.

Data NameTypeDescription
availabilitymetric1 when the interface is present and operational, 0 when it is down.
management_ippropertyPort IPv4 address, or the device management address when the port has no layer-3 address.
vendor / modelpropertyF5 / LTM.
identity|namepropertyInterface name.
identity|mac_addresspropertyMAC address.
identity|if_indexpropertyInterface index.
status|enabledpropertyAdministrative enabled flag: true or false.
config|mediapropertyNegotiated media / speed.
config|mtupropertyInterface MTU.
config|vlanpropertyVLAN membership, read from /net/vlan.

LB Virtual Server

The traffic entry point — the virtual server (VIP). This is the heart of the load balancer.

Identifiers: adapter_host, device_key, vs_key.

Data NameTypeDescription
availabilitymetric1 when the virtual server is available, 0 when down.
vip_addresspropertyBare VIP IP (top-level, for the phpIPAM relation).
vendor / modelpropertyF5 / LTM.
identity|namepropertyVirtual server name.
identity|full_pathpropertyFull path of the resource.
identity|kindpropertyResource kind.
identity|destinationpropertyVIP address and port (address:port).
config|poolpropertyDefault pool the virtual server forwards to.
config|application_servicepropertyBound application service, when present.
status|enabled_statepropertyenabled or disabled.
status|availability_statepropertyAvailability state from statistics.
status|enabled_state_statspropertyEnabled state from statistics.
status|status_reasonpropertyReason for the current status.
connections|currentmetricCurrent client-side connections.
connections|maximummetricMaximum client-side connections.
traffic|requestsmetricTotal requests.
traffic|bits_inmetricBits received.
traffic|bits_outmetricBits sent.
traffic|packets_inmetricPackets received.
traffic|packets_outmetricPackets sent.
traffic|throughput_totalmetricThroughput, derived from bits in plus bits out.

LB Pool

The backend group that a virtual server forwards to.

Identifiers: adapter_host, device_key, pool_key.

Data NameTypeDescription
availabilitymetric1 when the pool is available, 0 when down.
vendor / modelpropertyF5 / LTM.
identity|namepropertyPool name.
identity|full_pathpropertyFull path of the resource.
identity|kindpropertyResource kind.
config|descriptionpropertyPool description.
config|lb_modepropertyLoad balancing mode.
config|monitor_rulepropertyHealth monitor rule.
status|enabled_statepropertyEnabled state.
status|availability_statepropertyAvailability state from statistics.
status|status_reasonpropertyReason for the current status.
members|active_countmetricNumber of active members.
members|total_countmetricNumber of members in the pool.
connections|currentmetricCurrent server-side connections.
connections|maximummetricMaximum server-side connections.
traffic|requestsmetricTotal requests.
traffic|bits_inmetricBits received.
traffic|bits_outmetricBits sent.
traffic|packets_inmetricPackets received.
traffic|packets_outmetricPackets sent.

LB Pool Member

A node plus port inside a pool. This is the most performance-heavy object, because member statistics are read per pool.

Identifiers: adapter_host, device_key, member_key.

Data NameTypeDescription
availabilitymetric1 when the member is available, 0 when down.
vendor / modelpropertyF5 / LTM.
identity|namepropertyMember name (/partition/node:port).
identity|full_pathpropertyFull path of the resource.
identity|kindpropertyResource kind.
identity|node_namepropertyName of the node the member points to.
identity|pool_namepropertyName of the pool the member belongs to.
identity|addresspropertyMember address.
config|portpropertyMember port.
config|monitor_rulepropertyHealth monitor rule.
status|session_statepropertySession state: user-enabled or user-disabled.
status|availability_statepropertyAvailability state from statistics.
status|enabled_statepropertyEnabled state.
status|monitor_statuspropertyMonitor status.
status|session_statuspropertySession status.
status|status_reasonpropertyReason for the current status.
connections|currentmetricCurrent connections.
connections|maximummetricMaximum connections.
sessions|currentmetricCurrent sessions.
traffic|requestsmetricTotal requests.
traffic|bits_inmetricBits received.
traffic|bits_outmetricBits sent.
traffic|packets_inmetricPackets received.
traffic|packets_outmetricPackets sent.

LB Node

A backend server.

Identifiers: adapter_host, device_key, node_key.

Data NameTypeDescription
availabilitymetric1 when the node is available, 0 when down.
vendor / modelpropertyF5 / LTM.
identity|namepropertyNode name.
identity|full_pathpropertyFull path of the resource.
identity|kindpropertyResource kind.
identity|addresspropertyNode IP address.
config|monitor_rulepropertyHealth monitor rule.
status|session_statepropertySession state: user-enabled or user-disabled.
status|statepropertyNode state: user-up or user-down.
status|availability_statepropertyAvailability state from statistics.
status|enabled_statepropertyEnabled state.
status|monitor_statuspropertyMonitor status.
status|session_statuspropertySession status.
status|status_reasonpropertyReason for the current status.
connections|currentmetricCurrent server-side connections.
connections|maximummetricMaximum server-side connections.
sessions|currentmetricCurrent sessions.
traffic|requestsmetricTotal requests.
traffic|bits_inmetricBits received.
traffic|bits_outmetricBits sent.
traffic|packets_inmetricPackets received.
traffic|packets_outmetricPackets sent.

LB Monitor

A health-check template. The instance of a monitor is attached to a pool, node or member through the monitor rule string; no per-object monitor instances are created.

Identifiers: adapter_host, device_key, monitor_key.

Data NameTypeDescription
availabilitymetric1 when the monitor was collected.
vendor / modelpropertyF5 / LTM.
identity|namepropertyMonitor name.
identity|typepropertyMonitor type from the namespace (http, tcp, https, ...).
config|intervalpropertyCheck interval, seconds.
config|timeoutpropertyCheck timeout, seconds.
config|sendpropertySent string, for HTTP/HTTPS/TCP monitors.
config|receivepropertyExpected response, for HTTP/HTTPS/TCP monitors.

LB Profile

A traffic profile (tcp, http, client-ssl, server-ssl). On the SSL model the client-ssl and server-ssl profiles additionally carry the ssl group below.

Identifiers: adapter_host, device_key, profile_key.

Data NameTypeDescription
availabilitymetric1 when the profile was collected.
vendor / modelpropertyF5 / LTM or F5 / SSL.
identity|namepropertyProfile name.
identity|typepropertyProfile type from the namespace (tcp, http, clientssl, ...).

LB Profile ssl group (F5 SSL model)

The ssl group carries the SSL-offload configuration of a client-ssl / server-ssl profile. Every attribute is optional: it is emitted only when the endpoint returned a value for that profile, so the group is empty on a plain LTM / TCP / HTTP profile — never a zero. The two namespaces differ in what they expose: a server-side profile has no client certificate and no SNI flags, so those attributes are simply absent from it.

Data NameTypeDescription
ssl|certificatepropertyCertificate reference (cert) the profile terminates, e.g. /Common/wildcard-pern-pl.crt. Not present on a server-side profile.
ssl|cipher_grouppropertyNamed cipher group the profile uses, resolved to its full path when /ltm/cipher/group is readable (e.g. /Common/f5-default).
ssl|cipherspropertyInline cipher string (ciphers), e.g. DEFAULT.
ssl|ssl_protocolspropertyProtocol set returned by the endpoint.
ssl|min_tls_versionpropertyLowest TLS version derived from the profile options, e.g. tls1.2.
ssl|max_tls_versionpropertyHighest TLS version derived from the profile options, e.g. tls1.3.
ssl|sni_defaultpropertySNI default flag, true / false. Not present on a server-side profile.
ssl|sni_requirepropertySNI require flag, true / false. Not present on a server-side profile.
ssl|renegotiationpropertyRenegotiation state, enabled / disabled.
ssl|forward_proxypropertySSL forward proxy state.
ssl|peer_cert_modepropertyPeer certificate mode.
ssl|default_profilepropertyProfile this one inherits from (defaultsFrom).

SSL Certificate

A certificate used by the virtual servers.

Identifiers: adapter_host, device_key, cert_key.

Data NameTypeDescription
availabilitymetric1 when the certificate was collected.
vendor / modelpropertyF5 / LTM.
identity|namepropertyCertificate name.
certificate|issuerpropertyIssuer distinguished name.
certificate|subjectpropertySubject distinguished name.
certificate|key_typepropertyKey type.
certificate|key_sizepropertyKey size.
certificate|serial_numberpropertySerial number.
certificate|expiration_stringpropertyExpiration date as a string.
certificate|is_bundlepropertyWhether the certificate is a bundle.
validity|days_until_expirationmetricDays until the certificate expires.