XenDesktop故障分析和排查演示文稿

XenDesktop故障分析和排查演示文稿目前一页\总数三十七页\编于十七点优选XenDesktop故障分析和排查目前二页\总数三十七页\编于十七点Introductionandobjectives目前三页\总数三十七页\编于十七点Tweetaboutthissessionwithhashtag#SUM301and#CitrixSummit目前四页\总数三十七页\编于十七点FocusingonthemajorcomponentsofXenDesktop5WIControllersVDAsADVMHost(XenServer,Hyper-V,VMware)LicensingUserSQLDatabase目前五页\总数三十七页\编于十七点DeployingControllerServers6AllControllersloadbalancesessionlaunchandVDAregistrationsConfiguringControllersinanN+1configurationallowsforresiliencyincaseofafailureAllControllerstalktotheSQLdatabaseandshoulddeployedascloseaspossibleControllers目前六页\总数三十七页\编于十七点ControllerServerScalability7XD4.x:XD5.x:BrokerBroker(ZDC)BrokerHypervisorPoolControllerController

Controller(failed)WIWIHypervisorPoolHypervisorPoolHypervisorPoolHypervisorPoolHypervisorPool目前七页\总数三十七页\编于十七点Controllers–ScalabilityandBestPractices8Canoverwhelmthehostinginfrastructurewithpowerstaterequestsduringpeaktimeswhenmanyuserslogonandoff.YoucanthrottletheamountofpowercommandssentperControllerwith“MaximumTransitionRate”–defaultis20,doNOTincreaseitwon’tspeeduppoweruptimes目前八页\总数三十七页\编于十七点DeployingSQLforXDDatabases9XD5usesasingledatabasewithmultipleschemasthatmaptoXDservicesStoredproceduresareleveragedtoreduceloadondatabaseDatabaseiscriticaltoXD5–allControllershaveheartbeattodatabaseSQLDatabases目前九页\总数三十七页\编于十七点SQL–DatabaseMirroring10Databasefailure=ControllerFailureOnlyimpactsnewconnections–existingordisconnectedsessionsnotaffectedCitrixrecommendsleveragingSQLMirroringforfaulttolerancePrincipaldatabaseMirrordatabaseTransactionlogMirroringsendstransactionlogfromPrincipaldatabasetotheredundantdatabaseIftheprincipaldatabasefails,userinterventionisrequiredtofailoverthedatabaseCitrixrecommendsusingsynchronousdatabasemirroringwithwitnessWitnessServer目前十页\总数三十七页\编于十七点SQL–BestPractices11SQLtransactionlogiscriticaltomonitorConnectionlaunchesandidledesktopsconsumetransactionlogspaceUseafixed-sizetransactionlog–auto-growthfeaturecouldimpactresponsetimesLeverageSQLAlertswhenlogreachesthresholds(recommend50%)Databasefailovertuning–adjustControllerheartbeatintervalDefaultheartbeatis30secsandrequiresaSQLoperationControllersunregisterworkersthatdonotheartbeatforoveroneminuteControlledbyRegkey:HKLM\Software\Citrix\DesktopServer\HeartbeatPeriodMs目前十一页\总数三十七页\编于十七点DeployingVirtualDesktopAgents12VDAnowuses“registrybased”registrationbydefaultVerifyportsareopenandfirewallconfiguredForwardandReverseDNSisrequiredVirtualDesktopAgents目前十二页\总数三十七页\编于十七点VDA–Scalabilityandbestpractice13IncreasetheServicetimeoutsifyouexpectperiodswithlargeamountofVMsrebooting–increaseto3minsrecommendedOptimizethelogonprocess–improvesdesktopperformancePlanstageddeploymentsandconsiderleveragingtoolssuchlikeLoginVSItoperformscaleandloadtestingbeforeaddinglargegroupsofuserstoenvironment目前十三页\总数三十七页\编于十七点Keypointstoremember14Controllersareresilientandscalewell–keepdeploymentssimpleSQLserverplayspivotalroleininfrastructure–protectit!Makeyourendusershappy–tuneyourVDAsforperformance目前十四页\总数三十七页\编于十七点Troubleshootingasessionlaunchfailure15UserswerereportingtheygotanerrorwhentryingtolaunchtheirdesktopsAdminnoticedthatintermittentlyVDAswouldde-registeratsessionlaunchCaseStudyWalkthrough目前十五页\总数三十七页\编于十七点Environmentoverview16XenDesktopdeploymentwith:WebInterface5.4XD5.6SQL2008VMWare5.0Windows2008R2ActiveDirectoryVirtualDesktopAgentOS–Win732-bitCitrixReceiver3.1Web

Interface

5.4XD

5.6SQL

2008VMWare5.0ActiveDirectoryVDAsReceiver目前十六页\总数三十七页\编于十七点Whatdidfailurelooklike?17目前十七页\总数三十七页\编于十七点18Userattemptstostartthesession1011011010SSL1011011010SSL1011011010SSL101101110110111011目前十八页\总数三十七页\编于十七点InitialTroubleshooting19Howoftendoesithappen?Anyparticulartimeframeithappens?Anyspecificusersorimagesithappensmorefrequentlywith?Whatchanged?Anyeventviewermessages?目前十九页\总数三十七页\编于十七点Whatchanged?

20WIController#1VDAsController#2VDAsregisteronController#1CustomerhadsingleserverdeploymentCustomeraddedsecondControllerforredundancy目前二十页\总数三十七页\编于十七点Wheredowestartlooking?21Wefound4interestingmessagesinEventViewer:Warning–EventID2103:AnunexpectedexceptionoccurredwhiletheCitrixBrokerServiceprocessedanXMLtransaction.

AnincompatibleclientmightbetryingtoaccesstheXMLservice.Verifythecompatibilityofclientsaccessingtheservice.Ifthisproblempersists,reinstalltheCitrixXenDesktopController.Errordetails:Transaction:'RequestAddress'ExceptionType:'System.ServiceModel.Security.SecurityAccessDeniedException'ApplicationWarning–EventID1060:TheCitrixBrokerServicefailedtoapplysettingsonthevirtualmachine'KB-WIN7-01.'.

CheckthatthevirtualmachinecanbecontactedfromtheControllerandthatanyfirewallonthevirtualmachineallowsconnectionsfromtheController.SeeCitrixKnowledgeBasearticleCTX126992.

Errordetails:Exception'Accessisdenied.'oftype'System.ServiceModel.Security.SecurityAccessDeniedException'.Warning–EventID1039:TheCitrixBrokerServicefailedtocontactvirtualmachine'KB-WIN7-01.'(IPaddress).

CheckthatthevirtualmachinecanbecontactedfromtheControllerandthatanyfirewallonthevirtualmachineallowsconnectionsfromtheController.SeeCitrixKnowledgeBasearticleCTX126992.

Errordetails:Exception'Accessisdenied.'oftype'System.ServiceModel.Security.SecurityAccessDeniedException'.Warning–EventID1101:TheCitrixBrokerServicefailedtobrokeraconnectionforuser'GET\atladmin'toresource'KB-Win7-PW'.TheCitrixBrokerServicecannotfindanyavailablevirtualmachines.Pleaseaddmorevirtualmachinestothesite.Iftheproblemisduetoexistingvirtualmachinesnotbecomingavailable,seeCitrixKnowledgeBasearticleCTX126992.目前二十一页\总数三十七页\编于十七点TroubleshootingMethodology–verifyenvironment22CheckFirewallconfigurationActiveDirectorymis-configurationForwardDNSandReverseDNSEnvironmentalchecks:CheckfortimeskewDefaultportsPortconflicts目前二十二页\总数三十七页\编于十七点TroubleshootingMethodology–gatheringdata23RunCitrixScoutTaaSbetaEnableloggingonbothControllersRunaCDFTrace目前二十三页\总数三十七页\编于十七点CitrixScout/XDCollector(CTX130147)24PushbuttoneasydatacollectionsystemMakesdatacollectionanduploadpushbuttoneasyIntegratesdatacollectedbyScoutwiththeCitrixToolsasaService(TaaS)backendSimplifiesdatacollection&analysis目前二十四页\总数三十七页\编于十七点ToolsasaServicehttp://Taas.C/BetaAutoanalysishealthcheck2325DataCollectionRecommendationstailoredtoYOU1Quicklycollectanduploadyourdata目前二十五页\总数三十七页\编于十七点EnablingloggingEnablingControllerServiceLogging-CTX127492CDFControl-CTX11196126Controller目前二十六页\总数三十七页\编于十七点Diggingdeeper–Controllerloganalysis27CdsBroker:1:1:UpdateWorkerSettingsconfigurationService.Setfailed:System.ServiceModel.Security.SecurityAccessDeniedException:Accessisdenied.Serverstacktrace:atSystem.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessagemessage)Exceptionrethrownat[0]:atSystem.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessagereqMsg,IMessageretMsg)atSystem.Runtime.Remoting.Proxies.RealProx"CdsBroker:1:1:UpdateWorkerSettingsrejecttheworker(S-1-5-21-1123877020-465626563-3648135752-3586)"BrokerDAL:8:5:DAL>>>DeregisterWorker(S-1-5-21-1123877020-465626563-3648135752-3586,CommunicationFailure)"BrokerDAL:8:5:DAL>>>DeleteBrokeredSessionOnPrepareFailure(LaunchToken=54711b77-4fce-4edc-b31e-937bc7dca341,SinBin=True)目前二十七页\总数三十七页\编于十七点UsingCDFControl28WithCDFControlyoucandownloadthepublicTMFfileswhichwillallowyoutoparsetheCDFtraceandtroubleshootyourissueParsingtheCDFtraceandenablingtheexpertshaderfeatureallowsustoquicklyfindexceptionswhicharetypicallyhighlightedinorangeHighlevelfailureis:“CdsWorkerAgent:8:5:UserAllowed:foundnomatchingControllers,accessnotallowedforuser”目前二十八页\总数三十七页\编于十七点Diggingdeeper–CDFtraceloganalysis29Initialtrustfailure:CdsWorkerAgent:8:5:CheckAccessCore:CallingdelegatetoprovideSIDlistCdsWorkerAgent:8:5:CheckAccessCore:entered,have1trustedDDCsCdsWorkerAgent:8:5:UserAllowed:foundnomatchingControllers,accessnotallowedforuserGET\KB-XD5-SP1-2$S-1-5-21-1123877020-465626563-3648135752-3604AfterworkerSin-Bintimeout:CdsWorkerAgent:1:1:Heartbeattohttp://KB-XD5-03.:80/Citrix/CdsController/IRegistrarrejectedCdsWorkerAgent:2:1:EventLogManagerdecidedtologeventCDS_EVENT_WORKER_AGENT_HEARTBEAT_REJECTEDoftypeWarningRe-Registered(aftertimeoutexpires):CdsWorkerAgent:2:1:Succesfullyregisteredwithhttp://KB-XD5-03.:80/Citrix/CdsController/IRegistrar;startingheartbeats目前二十九页\总数三十七页\编于十七点Underthehood-VDASessionLaunchexplained30VDAVDAController#1DesktopServiceController#2SQLUserWIVDAregisterstoController#1WorkerflaggedinDBasReadyUserlaunchessessionWISendslaunchrequesttoXMLBrokerXMLbrokerqueriesDBforareadyworkerXMLsendsPrepareSessiontickettoVDAXMLBrokerunregistersworkerListOfDDCs=Controller#1VDAchecksListOfDDCstoauthorizePrepareSessionController#2isnotinListOfDDCs,VDAinvalidatessessionlaunchrequestXMLReturnsErrortoWIWIErrorreturnedtouserBrokerServiceXMLBrokerWorkerisplacedinSinBin目前三十页\总数三十七页\编于十七点RootCauseanalysis31ThecustomeraddedasecondControllertohandleXMLrequestsforredundancyAssoonasthenewControllerwasaddedtotheWIXMLfailoverlistitwasavailabletobrokersessionlaunchesbydesignSincethenewControllerwasnotaddedasanauthorizedtrustedagentXenDesktoprejectsthesessionlogonsWorkstationagentde-registerstemporarilyandthenattemptstore-register目前三十一页\总数三十七页\编于十七点Resolution32DDCsthathandleauthenticationmustbeauthorizedagentsandaddedto“ListOfDDCs”registryvalueCTX132536outlinestheregistrykeyandhowtodefinebrokergroupsAddingDDCstoWIXMLfailoverlistenablestheabilityforDDCstohandlesessionlogons目前三十二页\总数三十七页\编于十