vLSR Error: 'No connection to VR Server for virtual machine on host in cluster : Unknown'
search cancel

vLSR Error: 'No connection to VR Server for virtual machine on host in cluster : Unknown'

book

Article ID: 451538

calendar_today

Updated On:

Products

VMware Live Recovery

Issue/Introduction

Symptoms:

  • This article addresses replication connectivity errors where a source ESXi host fails to connect to the target ESXi host/VR appliance, specifically resulting in "SSL handshake failed" and "Broken pipe" errors quite frequently. 

    WARNING: Hbr: 788: Failed to receive from 127.0.0.1 (groupID=GID-######-####-####-####-###########): Broken pipe
    WARNING: Hbr: 788: Failed to receive from 127.0.0.1 (groupID=GID-######-####-####-####-###########): Connection reset by peer

  • This is often caused by a certificate trust mismatch following a target host certificate rotation. The following specific error message is observed.

No connection to VR Server for virtual machine on host in cluster : Unknown

The source ESXi host's /var/run/log/hbr-agent.log records SSL handshake rejections when connecting to the target ESXi host on port 32032.

hbr-agent-bin[2104599]: [0x00000065ff149700] error: [Proxy [Group: GID-######-####-####-####-###########] -> [ESXi_Host_IP:32032]] SSL handshake failed: certificate verify failed (SSL routines)

Target VR Appliance (hbrsrv.log) shows the target server blocking the incoming stream due to an untrusted peer.

error hbrsrv[716413] [Originator@6876 sub=Broker groupID=GID-######-####-####-####-########### opID=###] Lookup request for group 'GID-######-####-####-####-###########' on SSL could not verify peer. Rejecting.

error hbrsrv[716413] [Originator@6876 sub=Main groupID=GID-######-####-####-####-########### opID=###] Thumbprint and certificate is not allowed to send replication data

error hbrsrv[716413] [Originator@6876 sub=Main groupID=GID-######-####-####-####-########### opID=###] Converting error to wire failure

Environment

  • vSphere Live Site Recovery (vLSR) 9.0.2

  • VMware ESXi 8.0 U3

  • VMware vCenter Server 8.0 U3

 

 

Cause

An SSL certificate trust mismatch occurred between the source ESXi host and target ESXi host/VR appliance during the TLS handshake on port 32032.

The vSphere Replication Management Server (hms) failed to automatically synchronize the updated certificate thumbprint from vCenter to the source host after a possible target host certificate rotation.

Resolution

  1. Reboot the vSphere Replication (VR) appliances to clear the stale state and force service initialization.

  2. Alternatively, SSH into the VR Appliance and restart the management and replication services directly via CLI.

    systemctl restart hms
    systemctl restart hbrsrv

  3. Verify that virtual machine replication status for the affected virtual machines returns to "OK" or "Active" in the vSphere Client.

 

Additional Information

Powered by Wolken Software