vcf_nsx_node_services

State module for NSX Manager node services.

Currently ships one verb, http_configured(), which enforces service_properties fields on /api/v1/node/services/http. This is the surface used to satisfy STIG 912 DoS-mitigation controls:

nsx-http-rate-limits:
  vcf_nsx_node_services.http_configured:
    - client_api_rate_limit: 100
    - client_api_concurrency_limit: 40
    - global_api_concurrency_limit: 199

The endpoint is a singleton with total-replacement PUT semantics; the state reads the current config, diffs only the caller-supplied fields, and PUTs the merged document so unrelated fields (redirect_host, connection_timeout, cipher config, …) are preserved.

saltext.vcf.states.vcf_nsx_node_services.http_configured(name, client_api_rate_limit=None, client_api_concurrency_limit=None, global_api_concurrency_limit=None, connection_timeout=None, redirect_host=None, profile=None, **extra)[source]

Ensure the NSX HTTP service service_properties match the supplied fields.

Only the fields the caller passes are considered; None means “don’t touch”. Fields already at the desired value are a no-op. If any field differs, the state reads the full current config, overlays the desired fields, and PUTs the merged document (the endpoint is total-replacement).