Here's the bash script I use to upload the JSON to NSX-T. It's just a quick and dirty script to test with. I store the actual JSON in a separate file. JSON does not allow comments but I added comments to my JSON so I could easily find the parameters to tweak. My script removed the comments before sending the JSON to NSX-T.
#!/bin/bash
USERNAME="username"
PASSWORD="password"
COOKIEFILE="cookies.txt"
HOST="nsx-hostname.com"
# Your JSON needs to be stored in this separate file
FILE="sample-nsx-app-profile.json"
# Remove the comments from the json file and store in temp file
# JSON does not allow comments but I added them anyway so have
# to remove them before processing.
TEMP_FILE="temporaryfile.json"
cp $FILE $TEMP_FILE
sed -i '/^\s*[#]/ d' $TEMP_FILE
# Get the application profile's display name from the temporary json file. Need it for the URI.
DISPLAY_NAME=`grep display_name $TEMP_FILE | cut -d"\"" -f4`
URI="/policy/api/v1/infra/alb-application-profiles/$DISPLAY_NAME"
/usr/bin/curl -v\
--dump-header $COOKIEFILE \
--insecure \
-u "$USERNAME:$PASSWORD" \
-H "Content-Type: application/json" \
-X PUT https://$HOST$URI \
-d @$TEMP_FILE
exit
Here is the sample JSON file I use:
{
"http_profile": {
"allow_dots_in_header_name": false,
"client_body_timeout": 30000,
"client_header_timeout": 10000,
"client_max_body_size": 0,
"client_max_header_size": 12,
"client_max_request_size": 48,
"connection_multiplexing_enabled": true,
"disable_keepalive_posts_msie6": true,
"disable_sni_hostname_check": false,
"enable_chunk_merge": true,
"enable_fire_and_forget": false,
"enable_request_body_buffering": false,
"enable_request_body_metrics": false,
"fwd_close_hdr_for_bound_connections": true,
"hsts_enabled": false,
"hsts_max_age": 365,
"hsts_subdomains_enabled": false,
"http_to_https": false,
"http_upstream_buffer_size": 0,
"httponly_enabled": false,
"keepalive_header": false,
"keepalive_timeout": 30000,
"max_bad_rps_cip": 0,
"max_bad_rps_cip_uri": 0,
"max_bad_rps_uri": 0,
"max_keepalive_requests": 100,
"max_response_headers_size": 48,
"max_rps_cip": 0,
"max_rps_cip_uri": 0,
"max_rps_unknown_cip": 0,
"max_rps_unknown_uri": 0,
"max_rps_uri": 0,
"post_accept_timeout": 30000,
"reset_conn_http_on_ssl_port": false,
"respond_with_100_continue": true,
"secure_cookie_enabled": false,
"server_side_redirect_to_https": false,
"ssl_client_certificate_mode": "SSL_CLIENT_CERTIFICATE_NONE",
"use_app_keepalive_timeout": false,
"websockets_enabled": true,
"x_forwarded_proto_enabled": false,
# For X-Forwarded-For to work set below two commands
"xff_alternate_name": "X-Forwarded-For",
"xff_enabled": true
},
"preserve_client_ip": false,
"preserve_client_port": false,
"preserve_dest_ip_port": false,
"type": "APPLICATION_PROFILE_TYPE_HTTP",
"resource_type" : "ALBApplicationProfile",
# Use display_name below to name the new application profile
"display_name": "my-nsx-created-profile2"
}
You can see I added comments so have to remove them before processing.
