XenDesktop故障分析和排查演示文稿

XenDesktop故障分析和排查演示文稿現(xiàn)在是1頁(yè)\一共有37頁(yè)\編輯于星期一優(yōu)選XenDesktop故障分析和排查現(xiàn)在是2頁(yè)\一共有37頁(yè)\編輯于星期一Introductionandobjectives現(xiàn)在是3頁(yè)\一共有37頁(yè)\編輯于星期一Tweetaboutthissessionwithhashtag#SUM301and#CitrixSummit現(xiàn)在是4頁(yè)\一共有37頁(yè)\編輯于星期一FocusingonthemajorcomponentsofXenDesktop5WIControllersVDAsADVMHost(XenServer,Hyper-V,VMware)LicensingUserSQLDatabase現(xiàn)在是5頁(yè)\一共有37頁(yè)\編輯于星期一DeployingControllerServers6AllControllersloadbalancesessionlaunchandVDAregistrationsConfiguringControllersinanN+1configurationallowsforresiliencyincaseofafailureAllControllerstalktotheSQLdatabaseandshoulddeployedascloseaspossibleControllers現(xiàn)在是6頁(yè)\一共有37頁(yè)\編輯于星期一ControllerServerScalability7XD4.x:XD5.x:BrokerBroker(ZDC)BrokerHypervisorPoolControllerController

Controller(failed)WIWIHypervisorPoolHypervisorPoolHypervisorPoolHypervisorPoolHypervisorPool現(xiàn)在是7頁(yè)\一共有37頁(yè)\編輯于星期一Controllers–ScalabilityandBestPractices8Canoverwhelmthehostinginfrastructurewithpowerstaterequestsduringpeaktimeswhenmanyuserslogonandoff.YoucanthrottletheamountofpowercommandssentperControllerwith“MaximumTransitionRate”–defaultis20,doNOTincreaseitwon’tspeeduppoweruptimes現(xiàn)在是8頁(yè)\一共有37頁(yè)\編輯于星期一DeployingSQLforXDDatabases9XD5usesasingledatabasewithmultipleschemasthatmaptoXDservicesStoredproceduresareleveragedtoreduceloadondatabaseDatabaseiscriticaltoXD5–allControllershaveheartbeattodatabaseSQLDatabases現(xiàn)在是9頁(yè)\一共有37頁(yè)\編輯于星期一SQL–DatabaseMirroring10Databasefailure=ControllerFailureOnlyimpactsnewconnections–existingordisconnectedsessionsnotaffectedCitrixrecommendsleveragingSQLMirroringforfaulttolerancePrincipaldatabaseMirrordatabaseTransactionlogMirroringsendstransactionlogfromPrincipaldatabasetotheredundantdatabaseIftheprincipaldatabasefails,userinterventionisrequiredtofailoverthedatabaseCitrixrecommendsusingsynchronousdatabasemirroringwithwitnessWitnessServer現(xiàn)在是10頁(yè)\一共有37頁(yè)\編輯于星期一SQL–BestPractices11SQLtransactionlogiscriticaltomonitorConnectionlaunchesandidledesktopsconsumetransactionlogspaceUseafixed-sizetransactionlog–auto-growthfeaturecouldimpactresponsetimesLeverageSQLAlertswhenlogreachesthresholds(recommend50%)Databasefailovertuning–adjustControllerheartbeatintervalDefaultheartbeatis30secsandrequiresaSQLoperationControllersunregisterworkersthatdonotheartbeatforoveroneminuteControlledbyRegkey:HKLM\Software\Citrix\DesktopServer\HeartbeatPeriodMs現(xiàn)在是11頁(yè)\一共有37頁(yè)\編輯于星期一DeployingVirtualDesktopAgents12VDAnowuses“registrybased”registrationbydefaultVerifyportsareopenandfirewallconfiguredForwardandReverseDNSisrequiredVirtualDesktopAgents現(xiàn)在是12頁(yè)\一共有37頁(yè)\編輯于星期一VDA–Scalabilityandbestpractice13IncreasetheServicetimeoutsifyouexpectperiodswithlargeamountofVMsrebooting–increaseto3minsrecommendedOptimizethelogonprocess–improvesdesktopperformancePlanstageddeploymentsandconsiderleveragingtoolssuchlikeLoginVSItoperformscaleandloadtestingbeforeaddinglargegroupsofuserstoenvironment現(xiàn)在是13頁(yè)\一共有37頁(yè)\編輯于星期一Keypointstoremember14Controllersareresilientandscalewell–keepdeploymentssimpleSQLserverplayspivotalroleininfrastructure–protectit!Makeyourendusershappy–tuneyourVDAsforperformance現(xiàn)在是14頁(yè)\一共有37頁(yè)\編輯于星期一Troubleshootingasessionlaunchfailure15UserswerereportingtheygotanerrorwhentryingtolaunchtheirdesktopsAdminnoticedthatintermittentlyVDAswouldde-registeratsessionlaunchCaseStudyWalkthrough現(xiàn)在是15頁(yè)\一共有37頁(yè)\編輯于星期一Environmentoverview16XenDesktopdeploymentwith:WebInterface5.4XD5.6SQL2008VMWare5.0Windows2008R2ActiveDirectoryVirtualDesktopAgentOS–Win732-bitCitrixReceiver3.1Web

Interface

5.4XD

5.6SQL

2008VMWare5.0ActiveDirectoryVDAsReceiver現(xiàn)在是16頁(yè)\一共有37頁(yè)\編輯于星期一Whatdidfailurelooklike?17現(xiàn)在是17頁(yè)\一共有37頁(yè)\編輯于星期一18Userattemptstostartthesession1011011010SSL1011011010SSL1011011010SSL101101110110111011現(xiàn)在是18頁(yè)\一共有37頁(yè)\編輯于星期一InitialTroubleshooting19Howoftendoesithappen?Anyparticulartimeframeithappens?Anyspecificusersorimagesithappensmorefrequentlywith?Whatchanged?Anyeventviewermessages?現(xiàn)在是19頁(yè)\一共有37頁(yè)\編輯于星期一Whatchanged?

20WIController#1VDAsController#2VDAsregisteronController#1CustomerhadsingleserverdeploymentCustomeraddedsecondControllerforredundancy現(xiàn)在是20頁(yè)\一共有37頁(yè)\編輯于星期一Wheredowestartlooking?21Wefound4interestingmessagesinEventViewer:Warning–EventID2103:AnunexpectedexceptionoccurredwhiletheCitrixBrokerServiceprocessedanXMLtransaction.

AnincompatibleclientmightbetryingtoaccesstheXMLservice.Verifythecompatibilityofclientsaccessingtheservice.Ifthisproblempersists,reinstalltheCitrixXenDesktopController.Errordetails:Transaction:'RequestAddress'ExceptionType:'System.ServiceModel.Security.SecurityAccessDeniedException'ApplicationWarning–EventID1060:TheCitrixBrokerServicefailedtoapplysettingsonthevirtualmachine'KB-WIN7-01.'.

CheckthatthevirtualmachinecanbecontactedfromtheControllerandthatanyfirewallonthevirtualmachineallowsconnectionsfromtheController.SeeCitrixKnowledgeBasearticleCTX126992.

Errordetails:Exception'Accessisdenied.'oftype'System.ServiceModel.Security.SecurityAccessDeniedException'.Warning–EventID1039:TheCitrixBrokerServicefailedtocontactvirtualmachine'KB-WIN7-01.'(IPaddress).

CheckthatthevirtualmachinecanbecontactedfromtheControllerandthatanyfirewallonthevirtualmachineallowsconnectionsfromtheController.SeeCitrixKnowledgeBasearticleCTX126992.

Errordetails:Exception'Accessisdenied.'oftype'System.ServiceModel.Security.SecurityAccessDeniedException'.Warning–EventID1101:TheCitrixBrokerServicefailedtobrokeraconnectionforuser'GET\atladmin'toresource'KB-Win7-PW'.TheCitrixBrokerServicecannotfindanyavailablevirtualmachines.Pleaseaddmorevirtualmachinestothesite.Iftheproblemisduetoexistingvirtualmachinesnotbecomingavailable,seeCitrixKnowledgeBasearticleCTX126992.現(xiàn)在是21頁(yè)\一共有37頁(yè)\編輯于星期一TroubleshootingMethodology–verifyenvironment22CheckFirewallconfigurationActiveDirectorymis-configurationForwardDNSandReverseDNSEnvironmentalchecks:CheckfortimeskewDefaultportsPortconflicts現(xiàn)在是22頁(yè)\一共有37頁(yè)\編輯于星期一TroubleshootingMethodology–gatheringdata23RunCitrixScoutTaaSbetaEnableloggingonbothControllersRunaCDFTrace現(xiàn)在是23頁(yè)\一共有37頁(yè)\編輯于星期一CitrixScout/XDCollector(CTX130147)24PushbuttoneasydatacollectionsystemMakesdatacollectionanduploadpushbuttoneasyIntegratesdatacollectedbyScoutwiththeCitrixToolsasaService(TaaS)backendSimplifiesdatacollection&analysis現(xiàn)在是24頁(yè)\一共有37頁(yè)\編輯于星期一ToolsasaServicehttp://Taas.C/BetaAutoanalysishealthcheck2325DataCollectionRecommendationstailoredtoYOU1Quicklycollectanduploadyourdata現(xiàn)在是25頁(yè)\一共有37頁(yè)\編輯于星期一EnablingloggingEnablingControllerServiceLogging-CTX127492CDFControl-CTX11196126Controller現(xiàn)在是26頁(yè)\一共有37頁(yè)\編輯于星期一Diggingdeeper–Controllerloganalysis27CdsBroker:1:1:UpdateWorkerSettingsconfigurationService.Setfailed:System.ServiceModel.Security.SecurityAccessDeniedException:Accessisdenied.Serverstacktrace:atSystem.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessagemessage)Exceptionrethrownat[0]:atSystem.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessagereqMsg,IMessageretMsg)atSystem.Runtime.Remoting.Proxies.RealProx"CdsBroker:1:1:UpdateWorkerSettingsrejecttheworker(S-1-5-21-1123877020-465626563-3648135752-3586)"BrokerDAL:8:5:DAL>>>DeregisterWorker(S-1-5-21-1123877020-465626563-3648135752-3586,CommunicationFailure)"BrokerDAL:8:5:DAL>>>DeleteBrokeredSessionOnPrepareFailure(LaunchToken=54711b77-4fce-4edc-b31e-937bc7dca341,SinBin=True)現(xiàn)在是27頁(yè)\一共有37頁(yè)\編輯于星期一UsingCDFControl28WithCDFControlyoucandownloadthepublicTMFfileswhichwillallowyoutoparsetheCDFtraceandtroubleshootyourissueParsingtheCDFtraceandenablingtheexpertshaderfeatureallowsustoquicklyfindexceptionswhicharetypicallyhighlightedinorangeHighlevelfailureis:“CdsWorkerAgent:8:5:UserAllowed:foundnomatchingControllers,accessnotallowedforuser”現(xiàn)在是28頁(yè)\一共有37頁(yè)\編輯于星期一Diggingdeeper–CDFtraceloganalysis29Initialtrustfailure:CdsWorkerAgent:8:5:CheckAccessCore:CallingdelegatetoprovideSIDlistCdsWorkerAgent:8:5:CheckAccessCore:entered,have1trustedDDCsCdsWorkerAgent:8:5:UserAllowed:foundnomatchingControllers,accessnotallowedforuserGET\KB-XD5-SP1-2$S-1-5-21-1123877020-465626563-3648135752-3604AfterworkerSin-Bintimeout:CdsWorkerAgent:1:1:Heartbeattohttp://KB-XD5-03.:80/Citrix/CdsController/IRegistrarrejectedCdsWorkerAgent:2:1:EventLogManagerdecidedtologeventCDS_EVENT_WORKER_AGENT_HEARTBEAT_REJECTEDoftypeWarningRe-Registered(aftertimeoutexpires):CdsWorkerAgent:2:1:Succesfullyregisteredwithhttp://KB-XD5-03.:80/Citrix/CdsController/IRegistrar;startingheartbeats現(xiàn)在是29頁(yè)\一共有37頁(yè)\編輯于星期一Underthehood-VDASessionLaunchexplained30VDAVDAController#1DesktopServiceController#2SQLUserWIVDAregisterstoController#1WorkerflaggedinDBasReadyUserlaunchessessionWISendslaunchrequesttoXMLBrokerXMLbrokerqueriesDBforareadyworkerXMLsendsPrepareSessiontickettoVDAXMLBrokerunregistersworkerListOfDDCs=Controller#1VDAchecksListOfDDCstoauthorizePrepareSessionController#2isnotinListOfDDCs,VDAinvalidatessessionlaunchrequestXMLReturnsErrortoWIWIErrorreturnedtouserBrokerServiceXMLBrokerWorkerisplacedinSinBin現(xiàn)在是30頁(yè)\一共有37頁(yè)\編輯于星期一RootCauseanalysis31ThecustomeraddedasecondControllertohandleXMLrequestsforredundancyAssoonasthenewControllerwasaddedtotheWIXMLfailoverlistitwasavailabletobrokersessionlaunchesbydesignSincethenewControllerwasnotaddedasanauthorizedtrustedagentXenDesktoprejectsthesessionlogonsWorkstationagentde-registerstemporarilyandthenattemptstore-register現(xiàn)在是31頁(yè)\一共有37頁(yè)\編輯于星期一Resolution32DDCsthathandleauthenticationmustbeauthorizedagentsandaddedto“ListOfDDCs”registryvalueCTX132536outlinestheregistrykeyandhowtodefinebrokergroupsAddingDDCstoWIXMLfailoverlistenablestheabilityforDDCstohandlesessionlogons現(xiàn)在是32頁(yè)\一共有37頁(yè)\編輯于