Loading

×Sorry to interrupt
CSS Error

Refresh

Cookie Preference Center

General Information on cookies

When you visit our website, we use cookies to ensure that we give you the best experience. This information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies by clicking on the different category headings to find out more and change your settings. However, blocking some types of cookies may impact your experience on the site and the services we are able to offer. Further information can be found in our

Cookie Policy.

Strictly Necessary

Strictly Necessary

Always Active

Strictly Necessary

Strictly necessary cookies are always enabled since they are essential for our website to function. They enable core functionality such as security, network management, and website accessibility. You can set your browser to block or alert you about these cookies, but this may affect how the website functions. For more information please visit www.aboutcookies.org or www.allaboutcookies.org.

Cookie Details‎

Performance

Performance

Performance

Performance cookies are used to analyze the user experience to improve our website by collecting and reporting information on how you use it. They allow us to know which pages are the most and least popular, see how visitors move around the site, optimize our website and make it easier to navigate.

Cookie Details‎

Please confirm your settings by refreshing the page.

Functional

Functional

Functional

Functional cookies help us keep track of your past browsing choices so we can improve usability and customize your experience. These cookies enable the website to remember your preferred settings, language preferences, location and other customizable elements such as font or text size. If you do not allow these cookies, then some or all of these services may not function properly.

Cookie Details‎

Advertising

Advertising

Advertising

Advertising cookies are used to send you relevant advertising and promotional information. They may be set through our site by third parties to build a profile of your interests and show you relevant advertisements on other sites. These cookies do not directly store personal information, but their function is based on uniquely identifying your browser and internet device.

Cookie Details‎

Advertising Cookies

Consent Leg.Interest

Select All Vendors

Select All Vendors

Select All Hosts

Select All

Clear Filters

Information storage and access

Apply

Confirm My Choices Reject All Allow All

My Subscriptions

Loading

Knowledge Base

Alarms about the host connection state changing from green to red frequently occur (1020210)

Last Updated: 3/21/2024Categories: TroubleshootingTotal Views: 123284Language:
English

5 like this article

Subscribe to get an email
newsletter with new updates

5 people found this helpful Please provide article feedback:

Symptoms

Host connection state alarms change from green to red frequently (for example, daily).

ESXi/ESX hosts go into a state of Not Responding in vCenter Server then respond again after a few seconds.

This issue recurs after alarms are reset.

The vCenter Server vpxd log files contain entries similar to:

[YYYY-MM-DD 02:26:02.314 58326B90 error 'App'] SSLStreamImpl::BIORead (590AE458) timed out
YYYY-MM-DD 02:26:02.315 17B2DB90 error 'App'] SSLStreamImpl::BIORead (591EF770) timed out
YYYY-MM-DD 02:26:02.315 58326B90 info 'TCP'] close(68)
YYYY-MM-DD 02:26:02.315 17B2DB90 info 'TCP'] close(66)
[YYYY-MM-DD 02:26:02.315 58326B90 error 'App'] SSLStreamImpl::DoServerHandshake (590AE458) SSL_accept failed with BIO Error
[YYYY-MM-DD 02:26:02.316 17B2DB90 error 'App'] SSLStreamImpl::DoServerHandshake (591EF770) SSL_accept failed with BIO Error
[YYYY-MM-DD 02:26:02.316 58326B90 warning 'Proxysvc'] SSL Handshake timedout for stream 129.172.161.137, blacklisting it for 3000 ms

Note: The vpxd logs are located at %ALLUSERSPROFILE%\Application Data\VMware\VMware VirtualCenter\Logs, which translates to:

C:\Documents and Settings\All Users\Application Data\VMware\VirtualCenter\logs in Windows 2003
C:\ProgramData\VMware\VMware VirtualCenter\Logs in Windows 2008

The hostd.log file (located at /var/log/vmware/ in ESX/ESXi 4.x and /var/log in ESXi 5.x) contain entries similar to:

[YYYY-MM-DD 18:26:45.580 00948 error 'App'] SSLStreamImpl::DoClientHandshake (1B2AB0D8) SSL_connect failed with Unexpected EOF

Cause

This issue occurs on a busy network when the Secure Socket Layer (SSL) timeout value is too short or if the handshakeTimeoutMs value in the /etc/vmware/hostd/config.xml file is set too low.

Resolution

These alarms occur even if the host is working correctly.

To work around this issue, increase the value of handshakeTimeoutMs:

Connect to your ESXi/ESX host via a remote Kernel-based Virtual Machine (KVM) or Secure Shell (SSH) session or directly as root.

Open the /etc/vmware/hostd/config.xml file in a text editor.

Note: For ESXi 5.x and ESXi 6.x open the /etc/vmware/rhttpproxy/config.xml

Enter <handshakeTimeoutMs> 120000 </handshakeTimeoutMs> between the <ssl> tags in the vmacore section. This parameter is in milliseconds. For example, 120000 millseconds = 2 minutes.

ESXi 5.x

<vmacore>
...
<handshakeTimeoutMs> 120000 </handshakeTimeoutMs>
<useCompression>true</useCompression>
</ssl>
<vmdb>
<maxConnectionCount>8</maxConnectionCount>
</vmdb>
<loadPlugins> true </loadPlugins>
</vmacore>

<threadPool>
<MaxFdsPerThread>2048</MaxFdsPerThread>
</threadPool>
<ssl>

ESXi 6.x:　Add <handshakeTimeoutMs> entity

<vmacore>
...
<ssl>
<doVersionCheck> false </doVersionCheck>
<useCompression>true</useCompression>
<libraryPath>/lib/</libraryPath>
<handshakeTimeoutMs>120000</handshakeTimeoutMs>
</ssl>
...
</vmacore>

Save and close the file.

Restart the Management agents. For more information, see Restarting the Management agents on an ESXi or ESX host (1003490).

To confirm that the tags have taken effect, check the /var/log/vmware/hostd.log file for this message

[-03-15 09:49:32.788 F66D76D0 info 'App'] Vmacore::InitSSL: doVersionCheck = false, handshakeTimeoutUs = 120000000

Note: For ESXi 5.x and 6.x, check the /var/log/vmware/rhttpproxy.log

SSL Async Handshake Timeout : Read timeout after approximately 120000 ms. Closing stream <SSL(<io_obj p:0x35516694, h:16, <TCP 'XXX.XXX.XXX.XXX:443'>, <TCP 'XXX.XXX.XXX.XXX:51373'>>)>..

Note: The handshakeTimeoutUs value is shown in microseconds

Related Information

For translated versions of this article, see:

• Español: Activación frecuente de alarmas que indican que el estado de conexión del host cambia de verde a rojo (2046864)
• Português: Os alarmes de estado da conexão do host mudam de verde para vermelho com frequência (2046462)

Restarting the Management agents in ESXi
Os alarmes de estado da conexão do host mudam de verde para vermelho com frequência
Activación frecuente de alarmas que indican que el estado de conexión del host cambia de verde a rojo
ホストと vCenter Server の接続が、次のエラーで切断される：Got vmacore exception: SSL Exception: Unexpected EOF
主机连接状态警报频繁地从绿色变为红色
ホストの接続状態が緑から赤に変化したことを示すアラームが頻繁に発生する

Detectable by VMware SkylineTM

Actions

Copy

link to clipboard
copied!

Print

Language:
English

Attachments

Additional Resources

KB
•
End Of General Availability of the Free vSphere Hypervisor (ESXi 7.x and 8.x) (2107518)

Result 1 of 1

Ask The Community

Get answers quickly from VMware experts in the community

Post Subject

CONTINUE IN COMMUNITIES

Related Products:

VMware vSphere ESXi

VMware vCenter Server

VMware ESX Server

Related Versions:

VMware vSphere ESXi 6.0

VMware vSphere ESXi 5.5

VMware vSphere ESXi 5.1

VMware vSphere ESXi 5.0

VMware vCenter Server 6.0.x

VMware vCenter Server 5.5.x

VMware vCenter Server 5.1.x

VMware vCenter Server 5.0.x

VMware vCenter Server 4.1.x

VMware vCenter Server 4.0.x

VMware ESXi 4.1.x Installable

VMware ESXi 4.1.x Embedded

VMware ESXi 4.0.x Installable

VMware ESXi 4.0.x Embedded

VMware ESXi 3.5.x Installable

VMware ESXi 3.5.x Embedded

VMware ESX Server 3.5.x

VMware ESX Server 3.0.x

VMware ESX 4.0.x

view all

Take Our Survey

Support Assistant