XenDesktop故障分析和排查演示文稿

XenDesktop故障分析和排查演示文稿当前1页，总共37页。优选XenDesktop故障分析和排查当前2页，总共37页。Introductionandobjectives当前3页，总共37页。Tweetaboutthissessionwithhashtag#SUM301and#CitrixSummit当前4页，总共37页。FocusingonthemajorcomponentsofXenDesktop5WIControllersVDAsADVMHost(XenServer,Hyper-V,VMware)LicensingUserSQLDatabase当前5页，总共37页。DeployingControllerServers6AllControllersloadbalancesessionlaunchandVDAregistrationsConfiguringControllersinanN+1configurationallowsforresiliencyincaseofafailureAllControllerstalktotheSQLdatabaseandshoulddeployedascloseaspossibleControllers当前6页，总共37页。ControllerServerScalability7XD4.x:XD5.x:BrokerBroker(ZDC)BrokerHypervisorPoolControllerController

Controller(failed)WIWIHypervisorPoolHypervisorPoolHypervisorPoolHypervisorPoolHypervisorPool当前7页，总共37页。Controllers–ScalabilityandBestPractices8Canoverwhelmthehostinginfrastructurewithpowerstaterequestsduringpeaktimeswhenmanyuserslogonandoff.YoucanthrottletheamountofpowercommandssentperControllerwith“MaximumTransitionRate”–defaultis20,doNOTincreaseitwon’tspeeduppoweruptimes当前8页，总共37页。DeployingSQLforXDDatabases9XD5usesasingledatabasewithmultipleschemasthatmaptoXDservicesStoredproceduresareleveragedtoreduceloadondatabaseDatabaseiscriticaltoXD5–allControllershaveheartbeattodatabaseSQLDatabases当前9页，总共37页。SQL–DatabaseMirroring10Databasefailure=ControllerFailureOnlyimpactsnewconnections–existingordisconnectedsessionsnotaffectedCitrixrecommendsleveragingSQLMirroringforfaulttolerancePrincipaldatabaseMirrordatabaseTransactionlogMirroringsendstransactionlogfromPrincipaldatabasetotheredundantdatabaseIftheprincipaldatabasefails,userinterventionisrequiredtofailoverthedatabaseCitrixrecommendsusingsynchronousdatabasemirroringwithwitnessWitnessServer当前10页，总共37页。SQL–BestPractices11SQLtransactionlogiscriticaltomonitorConnectionlaunchesandidledesktopsconsumetransactionlogspaceUseafixed-sizetransactionlog–auto-growthfeaturecouldimpactresponsetimesLeverageSQLAlertswhenlogreachesthresholds(recommend50%)Databasefailovertuning–adjustControllerheartbeatintervalDefaultheartbeatis30secsandrequiresaSQLoperationControllersunregisterworkersthatdonotheartbeatforoveroneminuteControlledbyRegkey:HKLM\Software\Citrix\DesktopServer\HeartbeatPeriodMs当前11页，总共37页。DeployingVirtualDesktopAgents12VDAnowuses“registrybased”registrationbydefaultVerifyportsareopenandfirewallconfiguredForwardandReverseDNSisrequiredVirtualDesktopAgents当前12页，总共37页。VDA–Scalabilityandbestpractice13IncreasetheServicetimeoutsifyouexpectperiodswithlargeamountofVMsrebooting–increaseto3minsrecommendedOptimizethelogonprocess–improvesdesktopperformancePlanstageddeploymentsandconsiderleveragingtoolssuchlikeLoginVSItoperformscaleandloadtestingbeforeaddinglargegroupsofuserstoenvironment当前13页，总共37页。Keypointstoremember14Controllersareresilientandscalewell–keepdeploymentssimpleSQLserverplayspivotalroleininfrastructure–protectit!Makeyourendusershappy–tuneyourVDAsforperformance当前14页，总共37页。Troubleshootingasessionlaunchfailure15UserswerereportingtheygotanerrorwhentryingtolaunchtheirdesktopsAdminnoticedthatintermittentlyVDAswouldde-registeratsessionlaunchCaseStudyWalkthrough当前15页，总共37页。Environmentoverview16XenDesktopdeploymentwith:WebInterface5.4XD5.6SQL2008VMWare5.0Windows2008R2ActiveDirectoryVirtualDesktopAgentOS–Win732-bitCitrixReceiver3.1Web

Interface

5.4XD

5.6SQL

2008VMWare5.0ActiveDirectoryVDAsReceiver当前16页，总共37页。Whatdidfailurelooklike?17当前17页，总共37页。18Userattemptstostartthesession1011011010SSL1011011010SSL1011011010SSL101101110110111011当前18页，总共37页。InitialTroubleshooting19Howoftendoesithappen?Anyparticulartimeframeithappens?Anyspecificusersorimagesithappensmorefrequentlywith?Whatchanged?Anyeventviewermessages?当前19页，总共37页。Whatchanged?

20WIController#1VDAsController#2VDAsregisteronController#1CustomerhadsingleserverdeploymentCustomeraddedsecondControllerforredundancy当前20页，总共37页。Wheredowestartlooking?21Wefound4interestingmessagesinEventViewer:Warning–EventID2103:AnunexpectedexceptionoccurredwhiletheCitrixBrokerServiceprocessedanXMLtransaction.

AnincompatibleclientmightbetryingtoaccesstheXMLservice.Verifythecompatibilityofclientsaccessingtheservice.Ifthisproblempersists,reinstalltheCitrixXenDesktopController.Errordetails:Transaction:'RequestAddress'ExceptionType:'System.ServiceModel.Security.SecurityAccessDeniedException'ApplicationWarning–EventID1060:TheCitrixBrokerServicefailedtoapplysettingsonthevirtualmachine'KB-WIN7-01.'.

CheckthatthevirtualmachinecanbecontactedfromtheControllerandthatanyfirewallonthevirtualmachineallowsconnectionsfromtheController.SeeCitrixKnowledgeBasearticleCTX126992.

Errordetails:Exception'Accessisdenied.'oftype'System.ServiceModel.Security.SecurityAccessDeniedException'.Warning–EventID1039:TheCitrixBrokerServicefailedtocontactvirtualmachine'KB-WIN7-01.'(IPaddress).

CheckthatthevirtualmachinecanbecontactedfromtheControllerandthatanyfirewallonthevirtualmachineallowsconnectionsfromtheController.SeeCitrixKnowledgeBasearticleCTX126992.

Errordetails:Exception'Accessisdenied.'oftype'System.ServiceModel.Security.SecurityAccessDeniedException'.Warning–EventID1101:TheCitrixBrokerServicefailedtobrokeraconnectionforuser'GET\atladmin'toresource'KB-Win7-PW'.TheCitrixBrokerServicecannotfindanyavailablevirtualmachines.Pleaseaddmorevirtualmachinestothesite.Iftheproblemisduetoexistingvirtualmachinesnotbecomingavailable,seeCitrixKnowledgeBasearticleCTX126992.当前21页，总共37页。TroubleshootingMethodology–verifyenvironment22CheckFirewallconfigurationActiveDirectorymis-configurationForwardDNSandReverseDNSEnvironmentalchecks:CheckfortimeskewDefaultportsPortconflicts当前22页，总共37页。TroubleshootingMethodology–gatheringdata23RunCitrixScoutTaaSbetaEnableloggingonbothControllersRunaCDFTrace当前23页，总共37页。CitrixScout/XDCollector(CTX130147)24PushbuttoneasydatacollectionsystemMakesdatacollectionanduploadpushbuttoneasyIntegratesdatacollectedbyScoutwiththeCitrixToolsasaService(TaaS)backendSimplifiesdatacollection&analysis当前24页，总共37页。ToolsasaServicehttp://Taas.C/BetaAutoanalysishealthcheck2325DataCollectionRecommendationstailoredtoYOU1Quicklycollectanduploadyourdata当前25页，总共37页。EnablingloggingEnablingControllerServiceLogging-CTX127492CDFControl-CTX11196126Controller当前26页，总共37页。Diggingdeeper–Controllerloganalysis27CdsBroker:1:1:UpdateWorkerSettingsconfigurationService.Setfailed:System.ServiceModel.Security.SecurityAccessDeniedException:Accessisdenied.Serverstacktrace:atSystem.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessagemessage)Exceptionrethrownat[0]:atSystem.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessagereqMsg,IMessageretMsg)atSystem.Runtime.Remoting.Proxies.RealProx"CdsBroker:1:1:UpdateWorkerSettingsrejecttheworker(S-1-5-21-1123877020-465626563-3648135752-3586)"BrokerDAL:8:5:DAL>>>DeregisterWorker(S-1-5-21-1123877020-465626563-3648135752-3586,CommunicationFailure)"BrokerDAL:8:5:DAL>>>DeleteBrokeredSessionOnPrepareFailure(LaunchToken=54711b77-4fce-4edc-b31e-937bc7dca341,SinBin=True)当前27页，总共37页。UsingCDFControl28WithCDFControlyoucandownloadthepublicTMFfileswhichwillallowyoutoparsetheCDFtraceandtroubleshootyourissueParsingtheCDFtraceandenablingtheexpertshaderfeatureallowsustoquicklyfindexceptionswhicharetypicallyhighlightedinorangeHighlevelfailureis:“CdsWorkerAgent:8:5:UserAllowed:foundnomatchingControllers,accessnotallowedforuser”当前28页，总共37页。Diggingdeeper–CDFtraceloganalysis29Initialtrustfailure:CdsWorkerAgent:8:5:CheckAccessCore:CallingdelegatetoprovideSIDlistCdsWorkerAgent:8:5:CheckAccessCore:entered,have1trustedDDCsCdsWorkerAgent:8:5:UserAllowed:foundnomatchingControllers,accessnotallowedforuserGET\KB-XD5-SP1-2$S-1-5-21-1123877020-465626563-3648135752-3604AfterworkerSin-Bintimeout:CdsWorkerAgent:1:1:Heartbeattohttp://KB-XD5-03.:80/Citrix/CdsController/IRegistrarrejectedCdsWorkerAgent:2:1:EventLogManagerdecidedtologeventCDS_EVENT_WORKER_AGENT_HEARTBEAT_REJECTEDoftypeWarningRe-Registered(aftertimeoutexpires):CdsWorkerAgent:2:1:Succesfullyregisteredwithhttp://KB-XD5-03.:80/Citrix/CdsController/IRegistrar;startingheartbeats当前29页，总共37页。Underthehood-VDASessionLaunchexplained30VDAVDAController#1DesktopServiceController#2SQLUserWIVDAregisterstoController#1WorkerflaggedinDBasReadyUserlaunchessessionWISendslaunchrequesttoXMLBrokerXMLbrokerqueriesDBforareadyworkerXMLsendsPrepareSessiontickettoVDAXMLBrokerunregistersworkerListOfDDCs=Controller#1VDAchecksListOfDDCstoauthorizePrepareSessionController#2isnotinListOfDDCs,VDAinvalidatessessionlaunchrequestXMLReturnsErrortoWIWIErrorreturnedtouserBrokerServiceXMLBrokerWorkerisplacedinSinBin当前30页，总共37页。RootCauseanalysis31ThecustomeraddedasecondControllertohandleXMLrequestsforredundancyAssoonasthenewControllerwasaddedtotheWIXMLfailoverlistitwasavailabletobrokersessionlaunchesbydesignSincethenewControllerwasnotaddedasanauthorizedtrustedagentXenDesktoprejectsthesessionlogonsWorkstationagentde-registerstemporarilyandthenattemptstore-register当前31页，总共37页。Resolution32DDCsthathandleauthenticationmustbeauthorizedagentsandaddedto“ListOfDDCs”registryvalueCTX132536outlinestheregistrykeyandhowtodefinebrokergroupsAddingDDCstoWIXMLfailoverlistenablestheabilityforDDCstohandlesessionlogons