VCF Load Balancer Insight: Overview
Version: 2026.1.2.1
This page is the technical reference for VCF Load Balancer Insight. Everything described here appears in Aria Operations once an adapter instance has been configured and a collection has completed. The supported F5 models are BIG-IP LTM and BIG-IP SSL; the object model is shared across vendors and models and carries no vendor names.
Dashboards
All dashboards are shipped inside the Management Pack, are placed in a dedicated folder named after the product, and are installed automatically with the adapter content. They are vendor-neutral: the same dashboards serve every supported load-balancer vendor, because they are built on the shared object model, not on vendor-specific keys.
Load Balancer Health
The Load Balancer Health dashboard is the entry point for the load balancing estate:
- Load Balancer Clusters: a resource list of the clusters with their member count and standby members.
- Load Balancer Devices: a resource list of the member devices, coloured by the health badge and showing
availability. - Load Balancer - Active Alert List: the active alert list scoped to the objects produced by VCF Load Balancer Insight.
Load Balancer Device Status
The Load Balancer Device Status dashboard shows the base layer of each polled device:
- Device Identity and State: a table of
failover_state,hostname,software_versionanddevice_type. - Device Resource Usage:
cpu_usage,memory_usageanddisk_usageper device over time. - Load Balancer Devices - Active Alert List: the alerts raised against the devices.
Load Balancer Pools
The Load Balancer Pools dashboard covers the traffic distribution layer:
- Load Balancer Pools: a table of pools with
active_count,total_count,load balancing modeandavailability_state. - Load Balancer Virtual Servers: a table of virtual servers with
pool,availability_stateand current connections. - Load Balancer Pools - Active Alert List: the alerts raised against pools and virtual servers.
Load Balancer Members and Nodes
The Load Balancer Members and Nodes dashboard shows the backend endpoints:
- Load Balancer Pool Members: a table of members with
node_name,pool_name,portandavailability_state. - Load Balancer Nodes: a table of nodes with
ip_address,stateandavailability_state. - Load Balancer Members and Nodes - Active Alert List: the alerts raised against members and nodes.
Load Balancer Certificates
The Load Balancer Certificates dashboard is the certificate renewal view:
- SSL Certificates: a table of
days_until_expiration,issuer,subjectandexpiration_stringper certificate. - Certificate Expiry: certificates sorted by days to expiry, ascending, so the nearest expiry is first.
- SSL Profiles (Certificate and Cipher Group): a table of LB Profiles showing the
sslgroup fields —ssl|certificate,ssl|cipher_group,ssl|min_tls_versionandssl|sni_default— populated on the F5 SSL model. - Load Balancer Certificates - Active Alert List: the certificate-expiry alerts.
Custom Groups
| Custom Group Name | Description |
|---|---|
| LB World | A single container group that aggregates every object produced by VCF Load Balancer Insight, across all vendors and all ten object kinds. Shared network category convention with the other Indevops network Management Packs. |
| LB Clusters | LB Device objects grouped by their parent LB Cluster. A backstop for the read-only case where /cm/device-group cannot be read and the cluster is synthesized. |
| LB Devices by Type | LB Devices filtered on the top-level device_type property: standalone or cluster member. |
| LB Devices by Vendor | LB Devices filtered on the top-level vendor property: F5 or Citrix. |
| LB Devices by Model | LB Devices filtered on the top-level model property: LTM or SSL. Used to separate the LTM and SSL F5 estates in one adapter kind. |
Alerts
| Object | Alert | Metric | Condition | Recommendation ID | Severity |
|---|---|---|---|---|---|
| LB Device | Device is unreachable | availability | <= 0 | Recommendation-df-lb-device-unreachable | Critical |
| LB Cluster | Cluster failover occurred | status|failover_state | change active -> standby | Recommendation-df-lb-cluster-failover | Warning |
| LB Cluster | Standby member offline | cluster|standby_members | == member_count | Recommendation-df-lb-cluster-standby-offline | Critical |
| LB Virtual Server | Virtual Server is down | availability | <= 0 | Recommendation-df-lb-virtualserver-down | Critical |
| LB Virtual Server | High concurrent connections | connections|current | warning > 80%, critical > 95% of the limit | Recommendation-ud-lb-virtualserver-connections | Warning / Critical |
| LB Pool | Pool is down / no active members | availability, members|active_count | active_count == 0; availability <= 0 | Recommendation-df-lb-pool-down | Critical |
| LB Pool Member | Pool Member is down | status|availability_state | = offline | Recommendation-df-lb-poolmember-down | Warning |
| LB Node | Node is down | status|availability_state | = offline | Recommendation-df-lb-node-down | Warning |
| LB Device | Resource utilization is high | system|cpu_usage, system|memory_usage, system|disk_usage | warning > 80, critical > 90 | Recommendation-ud-lb-device-resource | Warning / Critical |
| SSL Certificate | Certificate expires soon | validity|days_until_expiration | warning < 30, critical < 14 | Recommendation-df-lb-cert-expiry | Warning / Critical |
Every alert is symptom-based, attaches to the object's health badge and embeds its recommendation. The Recommendation IDs are the fixed ER #77666 values; a different prefix fails the import into VCF Operations 9.1. Thresholds 80/90 % and 30/14 days are proposals pending customer approval.
Collected objects
Relationships
The topology is rebuilt on every collection cycle. The hierarchy is:
- The adapter instance is the root of the hierarchy and the single API entry point. It parents the cluster.
- LB Cluster is the HA group or device group. It parents every LB Device.
- LB Device is one BIG-IP member. It parents the network ports, the virtual servers, the monitors and the SSL certificates.
- LB Virtual Server terminates client traffic. It parents the default LB Pool it forwards to.
- LB Pool is the backend group. It parents its LB Pool Members.
- LB Pool Member is a node plus port in a pool. It parents the LB Node it points at.
- A VMware VirtualMachine is an external parent of LB Device, joined on the management address.
- A phpIPAM IP Address is an external parent of LB Cluster, LB Device, LB Port and LB Virtual Server, matched on the bare
management_ipandvip_addressproperties.
Relationships are never declared in the adapter schema; they are added at collection time and cleared and rebuilt each cycle, so a relationship removed at the source disappears downstream.
Top-level attributes (all kinds)
Every object kind carries these ungrouped attributes. They are the only keys external relations and cross-vendor filters may rely on.
| Data Name | Type | Description |
|---|---|---|
availability | metric | 1 when the object was collected, 0 when it was expected but unreachable or down. |
management_ip | property | Management address; present on LB Cluster, LB Device and LB Port. The phpIPAM adapter matches the bare key ^management_ip$, so it must stay ungrouped. |
vendor | property | Producer, for example F5. |
model | property | Product family: LTM or SSL for F5. |
device_type | property | standalone or cluster member; present on LB Device. |
vip_address | property | Bare VIP IP; present on LB Virtual Server. The phpIPAM adapter matches the bare key ^vip_address$, so it must stay ungrouped. |
LB Cluster
The HA group or device group. When the read-only account cannot read the F5 Device Group, the cluster is synthesized from the device member list, so the object always exists.
Identifiers: adapter_host, cluster_key.
| Data Name | Type | Description |
|---|---|---|
availability | metric | 1 when the cluster was collected, 0 when it was expected but unreachable. |
management_ip | property | Management address of the cluster (active member). |
vendor / model | property | F5 / LTM. |
identity|name | property | Cluster name. |
identity|cluster_type | property | Device-group type, or synthesized / standalone. |
cluster|ha_mode | property | standalone, active/standby or active/active, derived from member failover states. |
cluster|member_count | metric | Number of members in the group. |
cluster|standby_members | metric | Number of members in standby. |
status|failover_state | property | Aggregate member state: active, standby, mixed or offline. |
LB Device
One BIG-IP in the HA group. The polled member carries the full system metrics; peer members carry properties and availability only, because their system is never read.
Identifiers: adapter_host, device_key.
| Data Name | Type | Description |
|---|---|---|
availability | metric | 1 when the device is present and reachable, 0 when it is offline. |
management_ip | property | Device management address. |
vendor / model | property | F5 / LTM. |
device_type | property | standalone or cluster member. |
identity|name | property | Device name, the HA identity. |
identity|hostname | property | Configured hostname. |
identity|software_version | property | TMOS version. |
identity|software_build | property | TMOS build. |
identity|edition | property | Software edition. |
identity|product | property | Product name. |
identity|hardware_model | property | Hardware model. |
identity|platform | property | Hardware platform. |
identity|serial_number | property | Chassis serial number. |
identity|active_modules | property | Provisioned modules. |
identity|self_device | property | Self-device flag. |
status|failover_state | property | active, standby or offline. |
system|cpu_usage | metric | CPU utilization, percent. Requires administrator rights on some instances. |
system|memory_usage | metric | Memory utilization, percent. |
system|disk_usage | metric | Disk utilization, percent. |
LB Port
One network interface of the polled device.
Identifiers: adapter_host, device_key, port_key.
| Data Name | Type | Description |
|---|---|---|
availability | metric | 1 when the interface is present and operational, 0 when it is down. |
management_ip | property | Port IPv4 address, or the device management address when the port has no layer-3 address. |
vendor / model | property | F5 / LTM. |
identity|name | property | Interface name. |
identity|mac_address | property | MAC address. |
identity|if_index | property | Interface index. |
status|enabled | property | Administrative enabled flag: true or false. |
config|media | property | Negotiated media / speed. |
config|mtu | property | Interface MTU. |
config|vlan | property | VLAN membership, read from /net/vlan. |
LB Virtual Server
The traffic entry point — the virtual server (VIP). This is the heart of the load balancer.
Identifiers: adapter_host, device_key, vs_key.
| Data Name | Type | Description |
|---|---|---|
availability | metric | 1 when the virtual server is available, 0 when down. |
vip_address | property | Bare VIP IP (top-level, for the phpIPAM relation). |
vendor / model | property | F5 / LTM. |
identity|name | property | Virtual server name. |
identity|full_path | property | Full path of the resource. |
identity|kind | property | Resource kind. |
identity|destination | property | VIP address and port (address:port). |
config|pool | property | Default pool the virtual server forwards to. |
config|application_service | property | Bound application service, when present. |
status|enabled_state | property | enabled or disabled. |
status|availability_state | property | Availability state from statistics. |
status|enabled_state_stats | property | Enabled state from statistics. |
status|status_reason | property | Reason for the current status. |
connections|current | metric | Current client-side connections. |
connections|maximum | metric | Maximum client-side connections. |
traffic|requests | metric | Total requests. |
traffic|bits_in | metric | Bits received. |
traffic|bits_out | metric | Bits sent. |
traffic|packets_in | metric | Packets received. |
traffic|packets_out | metric | Packets sent. |
traffic|throughput_total | metric | Throughput, derived from bits in plus bits out. |
LB Pool
The backend group that a virtual server forwards to.
Identifiers: adapter_host, device_key, pool_key.
| Data Name | Type | Description |
|---|---|---|
availability | metric | 1 when the pool is available, 0 when down. |
vendor / model | property | F5 / LTM. |
identity|name | property | Pool name. |
identity|full_path | property | Full path of the resource. |
identity|kind | property | Resource kind. |
config|description | property | Pool description. |
config|lb_mode | property | Load balancing mode. |
config|monitor_rule | property | Health monitor rule. |
status|enabled_state | property | Enabled state. |
status|availability_state | property | Availability state from statistics. |
status|status_reason | property | Reason for the current status. |
members|active_count | metric | Number of active members. |
members|total_count | metric | Number of members in the pool. |
connections|current | metric | Current server-side connections. |
connections|maximum | metric | Maximum server-side connections. |
traffic|requests | metric | Total requests. |
traffic|bits_in | metric | Bits received. |
traffic|bits_out | metric | Bits sent. |
traffic|packets_in | metric | Packets received. |
traffic|packets_out | metric | Packets sent. |
LB Pool Member
A node plus port inside a pool. This is the most performance-heavy object, because member statistics are read per pool.
Identifiers: adapter_host, device_key, member_key.
| Data Name | Type | Description |
|---|---|---|
availability | metric | 1 when the member is available, 0 when down. |
vendor / model | property | F5 / LTM. |
identity|name | property | Member name (/partition/node:port). |
identity|full_path | property | Full path of the resource. |
identity|kind | property | Resource kind. |
identity|node_name | property | Name of the node the member points to. |
identity|pool_name | property | Name of the pool the member belongs to. |
identity|address | property | Member address. |
config|port | property | Member port. |
config|monitor_rule | property | Health monitor rule. |
status|session_state | property | Session state: user-enabled or user-disabled. |
status|availability_state | property | Availability state from statistics. |
status|enabled_state | property | Enabled state. |
status|monitor_status | property | Monitor status. |
status|session_status | property | Session status. |
status|status_reason | property | Reason for the current status. |
connections|current | metric | Current connections. |
connections|maximum | metric | Maximum connections. |
sessions|current | metric | Current sessions. |
traffic|requests | metric | Total requests. |
traffic|bits_in | metric | Bits received. |
traffic|bits_out | metric | Bits sent. |
traffic|packets_in | metric | Packets received. |
traffic|packets_out | metric | Packets sent. |
LB Node
A backend server.
Identifiers: adapter_host, device_key, node_key.
| Data Name | Type | Description |
|---|---|---|
availability | metric | 1 when the node is available, 0 when down. |
vendor / model | property | F5 / LTM. |
identity|name | property | Node name. |
identity|full_path | property | Full path of the resource. |
identity|kind | property | Resource kind. |
identity|address | property | Node IP address. |
config|monitor_rule | property | Health monitor rule. |
status|session_state | property | Session state: user-enabled or user-disabled. |
status|state | property | Node state: user-up or user-down. |
status|availability_state | property | Availability state from statistics. |
status|enabled_state | property | Enabled state. |
status|monitor_status | property | Monitor status. |
status|session_status | property | Session status. |
status|status_reason | property | Reason for the current status. |
connections|current | metric | Current server-side connections. |
connections|maximum | metric | Maximum server-side connections. |
sessions|current | metric | Current sessions. |
traffic|requests | metric | Total requests. |
traffic|bits_in | metric | Bits received. |
traffic|bits_out | metric | Bits sent. |
traffic|packets_in | metric | Packets received. |
traffic|packets_out | metric | Packets sent. |
LB Monitor
A health-check template. The instance of a monitor is attached to a pool, node or member through the monitor rule string; no per-object monitor instances are created.
Identifiers: adapter_host, device_key, monitor_key.
| Data Name | Type | Description |
|---|---|---|
availability | metric | 1 when the monitor was collected. |
vendor / model | property | F5 / LTM. |
identity|name | property | Monitor name. |
identity|type | property | Monitor type from the namespace (http, tcp, https, ...). |
config|interval | property | Check interval, seconds. |
config|timeout | property | Check timeout, seconds. |
config|send | property | Sent string, for HTTP/HTTPS/TCP monitors. |
config|receive | property | Expected response, for HTTP/HTTPS/TCP monitors. |
LB Profile
A traffic profile (tcp, http, client-ssl, server-ssl). On the SSL model the client-ssl and server-ssl profiles additionally carry the ssl group below.
Identifiers: adapter_host, device_key, profile_key.
| Data Name | Type | Description |
|---|---|---|
availability | metric | 1 when the profile was collected. |
vendor / model | property | F5 / LTM or F5 / SSL. |
identity|name | property | Profile name. |
identity|type | property | Profile type from the namespace (tcp, http, clientssl, ...). |
LB Profile ssl group (F5 SSL model)
The ssl group carries the SSL-offload configuration of a client-ssl / server-ssl profile. Every attribute is optional: it is emitted only when the endpoint returned a value for that profile, so the group is empty on a plain LTM / TCP / HTTP profile — never a zero. The two namespaces differ in what they expose: a server-side profile has no client certificate and no SNI flags, so those attributes are simply absent from it.
| Data Name | Type | Description |
|---|---|---|
ssl|certificate | property | Certificate reference (cert) the profile terminates, e.g. /Common/wildcard-pern-pl.crt. Not present on a server-side profile. |
ssl|cipher_group | property | Named cipher group the profile uses, resolved to its full path when /ltm/cipher/group is readable (e.g. /Common/f5-default). |
ssl|ciphers | property | Inline cipher string (ciphers), e.g. DEFAULT. |
ssl|ssl_protocols | property | Protocol set returned by the endpoint. |
ssl|min_tls_version | property | Lowest TLS version derived from the profile options, e.g. tls1.2. |
ssl|max_tls_version | property | Highest TLS version derived from the profile options, e.g. tls1.3. |
ssl|sni_default | property | SNI default flag, true / false. Not present on a server-side profile. |
ssl|sni_require | property | SNI require flag, true / false. Not present on a server-side profile. |
ssl|renegotiation | property | Renegotiation state, enabled / disabled. |
ssl|forward_proxy | property | SSL forward proxy state. |
ssl|peer_cert_mode | property | Peer certificate mode. |
ssl|default_profile | property | Profile this one inherits from (defaultsFrom). |
SSL Certificate
A certificate used by the virtual servers.
Identifiers: adapter_host, device_key, cert_key.
| Data Name | Type | Description |
|---|---|---|
availability | metric | 1 when the certificate was collected. |
vendor / model | property | F5 / LTM. |
identity|name | property | Certificate name. |
certificate|issuer | property | Issuer distinguished name. |
certificate|subject | property | Subject distinguished name. |
certificate|key_type | property | Key type. |
certificate|key_size | property | Key size. |
certificate|serial_number | property | Serial number. |
certificate|expiration_string | property | Expiration date as a string. |
certificate|is_bundle | property | Whether the certificate is a bundle. |
validity|days_until_expiration | metric | Days until the certificate expires. |
