HCX Bulk migration fails with error "initial sync Failed java.net.ssl SSL handshake expectation remote host terminated the handshake"

Products

• VMware HCX

Issue/Introduction

• Bulk Migration fails with error below
  
  "Initial sync Failed java.net.ssl SSL handshake expectation remote host terminated the handshake".

Environment

VMware HCX

Cause

• Network disconnect between the vCenter and HCX manager
• Login to the vCenter via ssh as root and navigate to the log file /var/log/vmware/envoy/envoy.log. It shows the connectivity issue

 warning envoy[40146] [Originator@6876 sub=filter] [C15632615] remote https connections exceed max allowed: 2048
 warning envoy[40146] [Originator@6876 sub=filter] [C15632615] closing connection TCP <HCX Manager IP address: 38984, HCX Manager IP address:443>

Resolution

Validate the vCenter shows connected in HCX Manager:

1. Log into the HCX Manager Admin UI : https://<HCX-Manager-IP-or-FQDN>:9443 
2. Under the Dashboard, check if the vCenter shows with green status.
3. If vCenter shows disconnected, then click on Manage --> vCenter Server --> Click edit. Ensure the correct vCenter username and password are entered.
4. Go to the second tab "Application Summary" and ensure the HCX Application Service and Web Service are restarted.
5. This will reconnect the vCenter to the HCX Manager

Ensure the HCX is able to connect to the vCenter on port 443

• Login to the HCX manager as user admin via putty.
• Run the command below to test the port 443 connectivity with the vCenter
  
  curl -v telnet://<vCenter-IP-or-FQDN>:443

Additional Information

Refer to the KB to test the vCenter port connectivity status. Using Curl to test port connectivity in VMware vCenter Server Appliance

If there are too many https exhaustion found in the vCenter, then refer to the KB here --> HTTPS Connection Exhaustion in envoy logs of the vCenter server