VMware Live Cyber Recovery Connector Flapping and SSH Timeouts Due to Deep Packet Inspection

Products

• VMware Live Recovery

Issue/Introduction

VMware Live Cyber Recovery (VLCR) connectors repeatedly transition between "connected" and "not connected" states. The VLCR UI exhibits severe performance degradation, and SSH connections to the connector appliances frequently time out. Analysis of the irrServer.log demonstrates RPC connection timeouts, explicitly indicating delays during vCenter communication attempts. Protection Group (PG) snapshots fail to transition from critical status.

Environment

VMware Live Cyber Recovery (VLCR) all versions.

Cause

Deep Packet Inspection (DPI) and network throttling configured on the upstream routing infrastructure severely restrict traffic throughput between the on-premises subnet and the VLCR cloud endpoints, causing performance to fall below the minimum supported requirement of 20 MBps.

Resolution

 

• Access the upstream routing and security infrastructure (e.g., edge firewall or router).

• Configure network exceptions to bypass Deep Packet Inspection (DPI), application layer inspection, and content inspection for the VLCR cloud endpoints.

• Apply explicit whitelisting for the Orchestrator IP

• Apply explicit whitelisting for the SCFS IP

• Whitelist the telemetry hostnames  resolving to the Public IP

• Validate the applied network exceptions by executing an iperf3 throughput test from the connector appliance to verify speeds consistently exceed the minimum 20 MBps requirement.

 

Additional Information

Refer to the VMware Live Cyber Recovery documentation for comprehensive network port and IP whitelisting requirements.