HCX - Fleet Appliances OVF Upload fails with: "Remote host terminated the handshake"

Products

• VMware HCX

Issue/Introduction

The following error is observed in /common/logs/admin/app.log:

2024-07-17 09:31:11.360 UTC [InterconnectService_SvcThread-123597, IX:########-####-####-####-############, J:9d892490, , TxId: ########-####-####-####-############] INFO  c.v.v.h.s.i.DeployAppliance- DeployAppliance Running in state: CHECK_UPLOAD_OVF for appliance : Service-Mesh-IX-I1

2024-07-17 09:31:11.364 UTC [InterconnectService_SvcThread-123597, IX:########-####-####-####-############, J:9d892490, , TxId: ########-####-####-####-############] ERROR c.v.v.h.s.i.DeployAppliance- OvfUpload failed, errorCode:null. stacktrace:null, errorMessage:Remote host terminated the handshake. Cause: SSL peer shut down incorrectly

2024-07-17 09:31:11.364 UTC [InterconnectService_SvcThread-123597, IX:########-####-####-####-############, J:9d892490, , TxId: ########-####-####-####-############] ERROR c.v.v.h.s.i.DeployAppliance- DeployAppliance failed in state CHECK_UPLOAD_OVF. Error: Interconnect Service Workflow OvfUpload failed. Error: Remote host terminated the handshake. Cause: SSL peer shut down incorrectly

java.lang.RuntimeException: Interconnect Service Workflow OvfUpload failed. Error: Remote host terminated the handshake. Cause: SSL peer shut down incorrectly

 

or

 

2024-07-18 10:02:00.073 UTC [OvfUploadService_SvcThread-3, Ent: HybridityAdmin, , TxId: ########-####-####-####-############] ERROR c.v.v.h.s.ovfupload.OvfUploadJob- Error in uploading Ovf
java.net.SocketException: Unexpected end of file from server
        at sun.net.www.http.HttpClient.parseHTTPHeader(HttpClient.java:855)
        at sun.net.www.http.HttpClient.parseHTTP(HttpClient.java:678)

2024-07-18 10:02:00.076 UTC [OvfUploadService_SvcThread-3, Ent: HybridityAdmin, , TxId: ########-####-####-####-############] WARN  c.v.v.h.s.ovfupload.OvfUploadJob- Error of unknown type : java.net.SocketException

There is a proxy configured on the HCX, and there are no exclusions for the internal network (e.g: vCenter, ESXi).

Environment

HCX

Cause

When a proxy is configured in the HCX Manager, all traffic is redirected to the proxy if no proxy exclusions are configured for ESXi and vCenter. This can cause the error described in this article.

Resolution

1. Log in to the management interface: https://hcx-ip-or-fqdn:9443.
2. Navigate to the Administration tab, and select Proxy > Proxy Exclusions
   Note: Using a comma-separated list to define all related proxy server exclusions, enter any IP, subnet, host, and domain names. Use * for wildcard values and do not include complete URLs (no https://).
3. Restart the HCX Manager services. Navigate to Appliance Summary -> HCX Services.
   
   Note:
   Restarting HCX Manager services is required for the proxy exclusions to take effect.

Additional Information

For more information on the required ports, refer to the VMware Ports and Protocols and Network Diagrams for VMware HCX.

For more details on proxy configuration, access the Configure a Proxy Server documentation.