Dear VMware Avi Load Balancer customer,

       We are pleased to announce the General Availability of VMware Avi Load Balancer 32.1.3 as of September 3, 2026. This release delivers significant advancements focused on VMware Cloud Foundation (VCF) integration, WAF enhancements, advanced security, and performance.

Key Highlights of this Release:

• Plug-n-Play with VMware Cloud Foundation (VCF) Integration (VCF 9.1.1 / Avi 32.1.3)
• Distributed Transit Gateway (DTGW) Mode Connectivity:
• EVPN-VXLAN Connectivity: Allows workloads connected through DTGW to utilize EVPN (Ethernet VPN) VXLAN-based Layer 2 extension across the data center for external VIP connectivity. Active/Active Service Engine Groups are supported using L2 scaleout.
• TEP-less VLAN Connectivity: Supports deploying workloads on TEP-less (pure VLAN-backed) topologies. Avi Service Engines can now operate in workload domains with no overlay (Geneve) tunnel endpoints configured, removing the need to provision an overlay network before onboarding workloads.
• Secure Channel Certificate Expiry Alerting: VCF Operations now monitors the Avi Load Balancer secure channel certificate and issues proactive alerts as it nears expiration, giving administrators advance visibility to rotate certificates and prevent outages.
• Break-glass Account Password Lifecycle Enhancements: Lifecycle management of the emergency local admin (break-glass) account password in VCF Operations includes password expiry tracking, proactive alerts, distinct actionable error types, and configurable expiry policies.
• Expanded Compliance and Configuration Management: Extended governance in VCF Operations to detect and remediate drift for DNS, NTP, Syslog, and password age configurations, alongside compliance reporting for FIPS mode, SSH, and RBAC.
• Avi Management Network as a VPC Subnet: Simplifies networking requirements by allowing the management network to be selected as an NSX VPC subnet directly, standardizing VPC-based deployments.
• Web Application Firewall (WAF) support for All Apps: Enables attaching WAF protection to Layer 7 virtual services. Reference WAF profiles and policies from the Avi Controller directly inside Gateway API HTTPRoutes as L7 Rules.
• Advanced Load Balancing, Security, and WAF
• Enhanced Virtual Patching: Offers a streamlined, simplified workflow in the WAF to deploy CVE-specific signatures.
• Flexible Certificate Chaining: Provides support to bypass automatic certificate chaining, allowing administrators to manually define custom trust paths for leaf SSL/TLS certificates.
• DNS TXT Records via DataScripts: Support for dynamically adding custom TXT records to DNS responses.
• Operability and Performance Enhancements
• Log Agent Memory Capping: Capping memory consumption for the Service Engine log agent process optimizes resource allocation and prevents connection drops or Out-of-Memory failures under high traffic.

Important Changes & Deprecation

• SHA-1 Algorithms Deprecation: Weak algorithms using SHA-1 (including SIGNATURE_ALGORITHM_MD5, SIGNATURE_ALGORITHM_SHA1, and OCSP_HASH_SHA1) are deprecated. New deployments in version 32.1.3 block these weak algorithms by default.
• Application Rules Removal: With the introduction of Virtual Patching changes, the legacy application rules feature is fully removed and replaced by CVE-specific signatures.
• Unauthenticated Nodes Removal: The allow_unauthenticated_nodes option has been removed. All newly deployed Service Engines must connect to the Controller using a valid, unique authentication token.
• Account Lockout Policy: Account lockout policy now applies to the user password endpoints (/api/user-password/*), protecting against repeated incorrect inputs.
• Cookie SameSite Attribute: Support for modifying the SameSite attribute on HTTP persistence cookies via CLI to maintain client persistence.

For complete technical documentation, refer to the Release Notes for Avi Load Balancer 32.1.3 and VMware Avi Load Balancer for VCF 9.1.1 Release Notes.

Discover more about the new release via our Download Software or engage with the community.

Resource Links:

• Release Notes for Avi Load Balancer 32.1.3
• VMware Avi Load Balancer for VCF 9.1.1 Release Notes
• Download Software (Avi 32.1.3 Build 9105)
• Avi Youtube Video Channel 
• Avi Community Discussions

We appreciate your continued partnership. If you have additional questions or require further clarification, please contact your Broadcom sales representative. 

Thank you,
Avi Product Team.