XenDesktop故障分析和排查演示文稿

XenDesktop故障分析和排查演示文稿现在是1页\一共有37页\编辑于星期一优选XenDesktop故障分析和排查现在是2页\一共有37页\编辑于星期一Introductionandobjectives现在是3页\一共有37页\编辑于星期一Tweetaboutthissessionwithhashtag#SUM301and#CitrixSummit现在是4页\一共有37页\编辑于星期一FocusingonthemajorcomponentsofXenDesktop5WIControllersVDAsADVMHost(XenServer,Hyper-V,VMware)LicensingUserSQLDatabase现在是5页\一共有37页\编辑于星期一DeployingControllerServers6AllControllersloadbalancesessionlaunchandVDAregistrationsConfiguringControllersinanN+1configurationallowsforresiliencyincaseofafailureAllControllerstalktotheSQLdatabaseandshoulddeployedascloseaspossibleControllers现在是6页\一共有37页\编辑于星期一ControllerServerScalability7XD4.x:XD5.x:BrokerBroker(ZDC)BrokerHypervisorPoolControllerController

Controller(failed)WIWIHypervisorPoolHypervisorPoolHypervisorPoolHypervisorPoolHypervisorPool现在是7页\一共有37页\编辑于星期一Controllers–ScalabilityandBestPractices8Canoverwhelmthehostinginfrastructurewithpowerstaterequestsduringpeaktimeswhenmanyuserslogonandoff.YoucanthrottletheamountofpowercommandssentperControllerwith“MaximumTransitionRate”–defaultis20,doNOTincreaseitwon’tspeeduppoweruptimes现在是8页\一共有37页\编辑于星期一DeployingSQLforXDDatabases9XD5usesasingledatabasewithmultipleschemasthatmaptoXDservicesStoredproceduresareleveragedtoreduceloadondatabaseDatabaseiscriticaltoXD5–allControllershaveheartbeattodatabaseSQLDatabases现在是9页\一共有37页\编辑于星期一SQL–DatabaseMirroring10Databasefailure=ControllerFailureOnlyimpactsnewconnections–existingordisconnectedsessionsnotaffectedCitrixrecommendsleveragingSQLMirroringforfaulttolerancePrincipaldatabaseMirrordatabaseTransactionlogMirroringsendstransactionlogfromPrincipaldatabasetotheredundantdatabaseIftheprincipaldatabasefails,userinterventionisrequiredtofailoverthedatabaseCitrixrecommendsusingsynchronousdatabasemirroringwithwitnessWitnessServer现在是10页\一共有37页\编辑于星期一SQL–BestPractices11SQLtransactionlogiscriticaltomonitorConnectionlaunchesandidledesktopsconsumetransactionlogspaceUseafixed-sizetransactionlog–auto-growthfeaturecouldimpactresponsetimesLeverageSQLAlertswhenlogreachesthresholds(recommend50%)Databasefailovertuning–adjustControllerheartbeatintervalDefaultheartbeatis30secsandrequiresaSQLoperationControllersunregisterworkersthatdonotheartbeatforoveroneminuteControlledbyRegkey:HKLM\Software\Citrix\DesktopServer\HeartbeatPeriodMs现在是11页\一共有37页\编辑于星期一DeployingVirtualDesktopAgents12VDAnowuses“registrybased”registrationbydefaultVerifyportsareopenandfirewallconfiguredForwardandReverseDNSisrequiredVirtualDesktopAgents现在是12页\一共有37页\编辑于星期一VDA–Scalabilityandbestpractice13IncreasetheServicetimeoutsifyouexpectperiodswithlargeamountofVMsrebooting–increaseto3minsrecommendedOptimizethelogonprocess–improvesdesktopperformancePlanstageddeploymentsandconsiderleveragingtoolssuchlikeLoginVSItoperformscaleandloadtestingbeforeaddinglargegroupsofuserstoenvironment现在是13页\一共有37页\编辑于星期一Keypointstoremember14Controllersareresilientandscalewell–keepdeploymentssimpleSQLserverplayspivotalroleininfrastructure–protectit!Makeyourendusershappy–tuneyourVDAsforperformance现在是14页\一共有37页\编辑于星期一Troubleshootingasessionlaunchfailure15UserswerereportingtheygotanerrorwhentryingtolaunchtheirdesktopsAdminnoticedthatintermittentlyVDAswouldde-registeratsessionlaunchCaseStudyWalkthrough现在是15页\一共有37页\编辑于星期一Environmentoverview16XenDesktopdeploymentwith:WebInterface5.4XD5.6SQL2008VMWare5.0Windows2008R2ActiveDirectoryVirtualDesktopAgentOS–Win732-bitCitrixReceiver3.1Web

Interface

5.4XD

5.6SQL

2008VMWare5.0ActiveDirectoryVDAsReceiver现在是16页\一共有37页\编辑于星期一Whatdidfailurelooklike?17现在是17页\一共有37页\编辑于星期一18Userattemptstostartthesession1011011010SSL1011011010SSL1011011010SSL101101110110111011现在是18页\一共有37页\编辑于星期一InitialTroubleshooting19Howoftendoesithappen?Anyparticulartimeframeithappens?Anyspecificusersorimagesithappensmorefrequentlywith?Whatchanged?Anyeventviewermessages?现在是19页\一共有37页\编辑于星期一Whatchanged?

20WIController#1VDAsController#2VDAsregisteronController#1CustomerhadsingleserverdeploymentCustomeraddedsecondControllerforredundancy现在是20页\一共有37页\编辑于星期一Wheredowestartlooking?21Wefound4interestingmessagesinEventViewer:Warning–EventID2103:AnunexpectedexceptionoccurredwhiletheCitrixBrokerServiceprocessedanXMLtransaction.

AnincompatibleclientmightbetryingtoaccesstheXMLservice.Verifythecompatibilityofclientsaccessingtheservice.Ifthisproblempersists,reinstalltheCitrixXenDesktopController.Errordetails:Transaction:'RequestAddress'ExceptionType:'System.ServiceModel.Security.SecurityAccessDeniedException'ApplicationWarning–EventID1060:TheCitrixBrokerServicefailedtoapplysettingsonthevirtualmachine'KB-WIN7-01.'.

CheckthatthevirtualmachinecanbecontactedfromtheControllerandthatanyfirewallonthevirtualmachineallowsconnectionsfromtheController.SeeCitrixKnowledgeBasearticleCTX126992.

Errordetails:Exception'Accessisdenied.'oftype'System.ServiceModel.Security.SecurityAccessDeniedException'.Warning–EventID1039:TheCitrixBrokerServicefailedtocontactvirtualmachine'KB-WIN7-01.'(IPaddress).

CheckthatthevirtualmachinecanbecontactedfromtheControllerandthatanyfirewallonthevirtualmachineallowsconnectionsfromtheController.SeeCitrixKnowledgeBasearticleCTX126992.

Errordetails:Exception'Accessisdenied.'oftype'System.ServiceModel.Security.SecurityAccessDeniedException'.Warning–EventID1101:TheCitrixBrokerServicefailedtobrokeraconnectionforuser'GET\atladmin'toresource'KB-Win7-PW'.TheCitrixBrokerServicecannotfindanyavailablevirtualmachines.Pleaseaddmorevirtualmachinestothesite.Iftheproblemisduetoexistingvirtualmachinesnotbecomingavailable,seeCitrixKnowledgeBasearticleCTX126992.现在是21页\一共有37页\编辑于星期一TroubleshootingMethodology–verifyenvironment22CheckFirewallconfigurationActiveDirectorymis-configurationForwardDNSandReverseDNSEnvironmentalchecks:CheckfortimeskewDefaultportsPortconflicts现在是22页\一共有37页\编辑于星期一TroubleshootingMethodology–gatheringdata23RunCitrixScoutTaaSbetaEnableloggingonbothControllersRunaCDFTrace现在是23页\一共有37页\编辑于星期一CitrixScout/XDCollector(CTX130147)24PushbuttoneasydatacollectionsystemMakesdatacollectionanduploadpushbuttoneasyIntegratesdatacollectedbyScoutwiththeCitrixToolsasaService(TaaS)backendSimplifiesdatacollection&analysis现在是24页\一共有37页\编辑于星期一ToolsasaServicehttp://Taas.C/BetaAutoanalysishealthcheck2325DataCollectionRecommendationstailoredtoYOU1Quicklycollectanduploadyourdata现在是25页\一共有37页\编辑于星期一EnablingloggingEnablingControllerServiceLogging-CTX127492CDFControl-CTX11196126Controller现在是26页\一共有37页\编辑于星期一Diggingdeeper–Controllerloganalysis27CdsBroker:1:1:UpdateWorkerSettingsconfigurationService.Setfailed:System.ServiceModel.Security.SecurityAccessDeniedException:Accessisdenied.Serverstacktrace:atSystem.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessagemessage)Exceptionrethrownat[0]:atSystem.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessagereqMsg,IMessageretMsg)atSystem.Runtime.Remoting.Proxies.RealProx"CdsBroker:1:1:UpdateWorkerSettingsrejecttheworker(S-1-5-21-1123877020-465626563-3648135752-3586)"BrokerDAL:8:5:DAL>>>DeregisterWorker(S-1-5-21-1123877020-465626563-3648135752-3586,CommunicationFailure)"BrokerDAL:8:5:DAL>>>DeleteBrokeredSessionOnPrepareFailure(LaunchToken=54711b77-4fce-4edc-b31e-937bc7dca341,SinBin=True)现在是27页\一共有37页\编辑于星期一UsingCDFControl28WithCDFControlyoucandownloadthepublicTMFfileswhichwillallowyoutoparsetheCDFtraceandtroubleshootyourissueParsingtheCDFtraceandenablingtheexpertshaderfeatureallowsustoquicklyfindexceptionswhicharetypicallyhighlightedinorangeHighlevelfailureis:“CdsWorkerAgent:8:5:UserAllowed:foundnomatchingControllers,accessnotallowedforuser”现在是28页\一共有37页\编辑于星期一Diggingdeeper–CDFtraceloganalysis29Initialtrustfailure:CdsWorkerAgent:8:5:CheckAccessCore:CallingdelegatetoprovideSIDlistCdsWorkerAgent:8:5:CheckAccessCore:entered,have1trustedDDCsCdsWorkerAgent:8:5:UserAllowed:foundnomatchingControllers,accessnotallowedforuserGET\KB-XD5-SP1-2$S-1-5-21-1123877020-465626563-3648135752-3604AfterworkerSin-Bintimeout:CdsWorkerAgent:1:1:Heartbeattohttp://KB-XD5-03.:80/Citrix/CdsController/IRegistrarrejectedCdsWorkerAgent:2:1:EventLogManagerdecidedtologeventCDS_EVENT_WORKER_AGENT_HEARTBEAT_REJECTEDoftypeWarningRe-Registered(aftertimeoutexpires):CdsWorkerAgent:2:1:Succesfullyregisteredwithhttp://KB-XD5-03.:80/Citrix/CdsController/IRegistrar;startingheartbeats现在是29页\一共有37页\编辑于星期一Underthehood-VDASessionLaunchexplained30VDAVDAController#1DesktopServiceController#2SQLUserWIVDAregisterstoController#1WorkerflaggedinDBasReadyUserlaunchessessionWISendslaunchrequesttoXMLBrokerXMLbrokerqueriesDBforareadyworkerXMLsendsPrepareSessiontickettoVDAXMLBrokerunregistersworkerListOfDDCs=Controller#1VDAchecksListOfDDCstoauthorizePrepareSessionController#2isnotinListOfDDCs,VDAinvalidatessessionlaunchrequestXMLReturnsErrortoWIWIErrorreturnedtouserBrokerServiceXMLBrokerWorkerisplacedinSinBin现在是30页\一共有37页\编辑于星期一RootCauseanalysis31ThecustomeraddedasecondControllertohandleXMLrequestsforredundancyAssoonasthenewControllerwasaddedtotheWIXMLfailoverlistitwasavailabletobrokersessionlaunchesbydesignSincethenewControllerwasnotaddedasanauthorizedtrustedagentXenDesktoprejectsthesessionlogonsWorkstationagentde-registerstemporarilyandthenattemptstore-register现在是31页\一共有37页\编辑于星期一Resolution32DDCsthathandleauthenticationmustbeauthorizedagentsandaddedto“ListOfDDCs”registryvalueCTX132536outlinestheregistrykeyandhowtodefinebrokergroupsAddingDDCstoWIXMLfailoverlistenablestheabilityforDDCstohandlesessionlogons现在是32页\一共有37页\编辑于