Unable to SSH into a Diego Application Container; getsockopt: Connection Refused

Products

• VMware Tanzu Application Service for VMs

Issue/Introduction

Symptoms:

When trying to run cf ssh, you get the following error message:

Error opening SSH connection: dial tcp <load balancer ip>:2222: getsockopt: connection refused

 

Environment

Cause

This error message is caused when the load balancer is not listening on port 2222.

 

Resolution

The Load Balancer needs to be configured to redirect TCP traffic on port 2222 to the Diego brain VM on port 2222.

Details

You need at least version 6.13 of the cf CLI to use the cf ssh related features. Please follow the article How to ssh login application container in verbose mode  for troubleshooting purposes. Also, please check that the following conditions are true:

• The user has been given the SpaceDeveloper for the space that contains the application that is being accessed. This can be confirmed with the command cf space-users <org> <space>
• Single SHell (SSH) access has been enabled for the application. This can be confirmed with the command cf ssh-enabled <app-name>.
• The space that is being accessed has SSH enabled. This can be confirmed with the command cf space-ssh-allowed <space-name>.