NSX upgrade process fails with Edge node : Failed to connect to XX.XX.X.XX port 8080: Connection timed out

Products

• VMware NSX

Issue/Introduction

The following error is observed  during the upgrade , when Upgrade bundle was being fetched from NSX repository

Prepare edge upgrade bundle http://XX.XX.X.XX:8080/repository/4.1.2.3.0.23382408/Edge/nub/VMware-NSX-edge-4.1.2.3.0.23382424.nub failed on edge TransportNode ###-###-###-###-####: clientType EDGE , target edge fabric node id ###-###-###-###-####, return status Download and verify bundle failed with msg: * Trying XX.XX.X.XX... * TCP_NODELAY set * connect to XX.XX.X.XX port 8080 failed: Connection timed out * Failed to connect to XX.XX.X.XX port 8080: Connection timed out * Closing connection 0 .

Connectivity testing from the NSX Edge node to the NSX Manager on TCP port 8080 also fails:

nc -zv <NSX-Manager-IP> 8080 connection timed out

As a result, the Edge node is unable to download and verify the required upgrade bundle.

Environment

Vmware NSX

Cause

TCP port 8080 is blocked between the NSX Edge and the NSX Manager.

Although the NSX Manager is actively listening on port 8080, network connectivity from the Edge node to the Manager over this port is not permitted due to a physical firewall or network security rule.

Resolution

1. Verify connectivity from NSX Edge to NSX Manager

From the NSX Edge node, test connectivity to the NSX Manager on port 8080:

 

nc -zv <NSX-Manager-IP> 8080

If the connection times out, proceed with the steps below.

2. Confirm NSX Manager is listening on port 8080

On the NSX Manager appliance, verify that port 8080 is open and listening:

 

netstat -pano | grep 8080

Expected output:

root@nsx-mngr-01:~# netstat -pano | grep 8080
tcp        0      0 0.0.0.0:8080            0.0.0.0:*               LISTEN      3516/lighttpd
tcp6       0      0 :::8080                 :::*                    LISTEN      3516/lighttpd

 

 

3.If Port is not allowed, Allow TCP port 8080 in the physical network

Ensure that TCP port 8080 is explicitly allowed in the physical firewall or network path between the NSX Edge nodes and the NSX Manager.

4. Revalidate connectivity

After updating firewall rules, re-run the connectivity test from the Edge node:

 

nc -zv <NSX-Manager-IP> 8080

A successful connection confirms that the issue is resolved.

Once TCP port 8080 connectivity is restored, retry the NSX Edge upgrade bundle preparation and continue with the VCF upgrade workflow.