DPOD integration with API-C can be applied only to a single API Connect domain per DataPower device for firmware level lower than 7.6
This limitation is derived from a limitation of the monitored device.
Known workarounds:
Upgrade to firmware 7.6 or 7.5.2.8.
Changes to gateway objects
DPOD requires some configuration changes to both device and domain levels. Theses changes include, but are not limited to, creating Syslog log targets.
At the service level - only the optional feature of Deprecated Extended Transaction requires instrumentation.
To see the full list of changes please see Gateway changes performed by DPOD.
No support for DHCP
DPOD does not support DHCP network configuration. Please refer to Change Appliance Network Address.
Known workarounds:
None.
Operational maintenance plan limitations
DPOD v1.0.5.0 and above offers several operational maintenance features that assist scheduling and completing day to day tasks such as backups, configuration sync and firmware upgrade.
This feature has system wide influence and might affect the availability of Gateway devices and service. Please consult the following limitations to this tasks:
Operating System supported locale
The only supported operating system locale definition for DPOD is en_US.UTF-8 as described in the installation prerequisites.
Object names in non-English languages may be partially supported.
Known workarounds:
None.
Limited functionality is provided when DataPower has language different than English
Choosing language in DataPower will impact your syslog records . This will cause DPOD to provide limited analysis on records that are not in English.
Known workarounds:
Change language of your monitored device to English (en).
No Support for Tenant feature
Lately in Firmware 7.6 the tenant module was introduced only to physical appliance type 8436. Currently DPOD is not supporting this feature.
Known workarounds:
None. Resolution of this issue is part of the short term product Roadmap.
WS-M does not capture Multi Protocol Gateway services payloads for firmware pre 7.5.2
This limitation is derived from a limitation of the monitored device.
Known workarounds:
DPOD version 1.0.2 and IDG Firmware 7.5.2.1 (especially with iFix IT17479: JSON PAYLOAD NOT CAPTURED BY WSM AGENT) should provide this functionality out of the box!
Transactions under the Default domain are not monitored
This limitation is derived from a limitation of the monitored device.
Log targets defined at the Default domain collect all logs from all domains, and currently there is way to apply a filter to the log targets in order to filter out logs from other application domains.
Known workarounds:
There is a workaround, but it only applies if the customer is willing to duplicate all network traffic, or alternatively run transactions only on the Default domain. Please contact support for more details.
Payload size does not include response size (only request size)
At present, monitored devices do not report the front end response payload size, nor do they report on the backend request and response.
Known workarounds:
None. Resolution of this issue is part of the product Roadmap.
Limitation on the number of domains that DPOD can monitor on a single IDG
When you define no custom log targets on the IDG, the IDG supports a maximum of 125 domains that DPOD can monitor when the IDG defines no custom log targets.
Before firmware 7.5.2.4 , the IDG supported 500 log targets. Because the default domain requires 3 log targets and each application domain requires 2 log targets, The IDG without custom log targets supports a maximum of 248 domains.
After firmware 7.5.2.4 this number were doubled.
When you enable DPOD monitoring, one new log target is added to the default domain and 2 new log targets to each application domain.
Before you can enable DPOD monitoring:
- View the list of defined domain, to ensure that no more than 125 domains are already defined.
- Run the show log-targets command in Diagnostics mode to determine the number of log targets that are defined.
Known workarounds:
Unless the following calculation results in a positive integer, do not enable DPOD monitoring until you move domains to another IDG.
Max Log targets per device - ((domains x 2) - 1) - number_log_targets
B2B support is limited
At present, the most important B2B features (e.g transaction aggregation) are supported. Configuration sampling and specific filtering in dashboards are part of the current version.
Known workarounds:
Upgrade to v1.0.3 - Configuration sampling is implemented.
Callable rule invocation appears as a separate transaction
At present, monitored devices do not report the front end response payload size nor do they report on the back-end request and response.
Known workarounds:
Upgrade to v1.0.4.0 - a fix was provided.
Error is not displayed in "Extended transactions"
The extended transaction is the only feature of DPOD that involves instrumentation of an XSLT transformation to the Web Service Proxy policy (request / response and error rules).
The instrumentation is integrated by the system only when initiated by the system administrator and not by default.
The behaviour when an error is raised by the service (WS-Proxy) depends on the applicable scenario:
No error rule in the service where the error is raised. Previous services are configured with "Process HTTP errors = on"
As there is no error rule, an extended transaction log record will not be generated for the error, and it will not be displayed on the "Extended Transactions" screen.
The extended transaction display will resemble the following (note: one record is missing)
No error rule in the service where the error is raised. Previous services do have error rule configured
As there is no error rule, an extended transaction log record will not be generated for the error, and it will not be displayed on the "Extended Transactions" screen.
However, as previous services do have an error rule, the "Extended Transactions" display will resemble the following:
Known workarounds:
None.
The Extended Transaction facility does not support API-Connect
You must NOT run it in API-C / API-M DomainsNote: In some cases, the Extended Transaction is not deployed on MPG services. This is due to the diversity of configuration in these services.
Customers are encouraged to open a PMR and provide the service configuration - so these cases can be addressed and resolved.
Known workarounds:
None.
Compatibility with APIC 2018
The Application Domain, on which the APIC 2018 "IDG service" is configured, must begin with the prefix "APIMgmt".