XenDesktop故障分析和排查演示文稿第1頁，共37頁。Introductionandobjectives第2頁，共37頁。Tweetaboutthissessionwithhashtag#SUM301and#CitrixSummit第3頁，共37頁。FocusingonthemajorcomponentsofXenDesktopWIControllersVDAsADVMHost(XenServer,Hyper-V,VMware)LicensingUserSQLDatabase4第4頁，共37頁。DeployingControllerServersAllControllersloadbalancesessionlaunchandVDAregistrationsConfiguringControllersinanN+1configurationallowsforresiliencyincaseofafailureAllControllerstalktotheSQLdatabaseandshoulddeployedascloseaspossibleControllers5第5頁，共37頁。ControllerServerScalabilityXD4.x:XD5.x:BrokerBroker(ZDC)BrokerHypervisorPoolControllerController

Controller(failed)WIWIHypervisorPoolHypervisorPoolHypervisorPoolHypervisorPoolHypervisorPool6第6頁，共37頁。Controllers–ScalabilityandBestPracticesCanoverwhelmthehostinginfrastructurewithpowerstaterequestsduringpeaktimeswhenmanyuserslogonandoff.YoucanthrottletheamountofpowercommandssentperControllerwith“MaximumTransitionRate”–defaultis20,doNOTincreaseitwon’tspeeduppoweruptimes7第7頁，共37頁。DeployingSQLforXDDatabasesXD5usesasingledatabasewithmultipleschemasthatmaptoXDservicesStoredproceduresareleveragedtoreduceloadondatabaseDatabaseiscriticaltoXD5–allControllershaveheartbeattodatabaseSQLDatabases8第8頁，共37頁。SQL–DatabaseMirroringDatabasefailure=ControllerFailureOnlyimpactsnewconnections–existingordisconnectedsessionsnotaffectedCitrixrecommendsleveragingSQLMirroringforfaulttolerancePrincipaldatabaseMirrordatabaseTransactionlogMirroringsendstransactionlogfromPrincipaldatabasetotheredundantdatabaseIftheprincipaldatabasefails,userinterventionisrequiredtofailoverthedatabaseCitrixrecommendsusingsynchronousdatabasemirroringwithwitnessWitnessServer9第9頁，共37頁。SQL–BestPracticesSQLtransactionlogiscriticaltomonitorConnectionlaunchesandidledesktopsconsumetransactionlogspaceUseafixed-sizetransactionlog–auto-growthfeaturecouldimpactresponsetimesLeverageSQLAlertswhenlogreachesthresholds(recommend50%)Databasefailovertuning–adjustControllerheartbeatintervalDefaultheartbeatis30secsandrequiresaSQLoperationControllersunregisterworkersthatdonotheartbeatforoveroneminuteControlledbyRegkey:HKLM\Software\Citrix\DesktopServer\HeartbeatPeriodMs10第10頁，共37頁。DeployingVirtualDesktopAgentsVDAnowuses“registrybased”registrationbydefaultVerifyportsareopenandfirewallconfiguredForwardandReverseDNSisrequiredVirtualDesktopAgents11第11頁，共37頁。VDA–ScalabilityandbestpracticeIncreasetheServicetimeoutsifyouexpectperiodswithlargeamountofVMsrebooting–increaseto3minsrecommendedOptimizethelogonprocess–improvesdesktopperformancePlanstageddeploymentsandconsiderleveragingtoolssuchlikeLoginVSItoperformscaleandloadtestingbeforeaddinglargegroupsofuserstoenvironment12第12頁，共37頁。KeypointstorememberControllersareresilientandscalewell–keepdeploymentssimpleSQLserverplayspivotalroleininfrastructure–protectit!Makeyourendusershappy–tuneyourVDAsforperformance13第13頁，共37頁。TroubleshootingasessionlaunchfailureUserswerereportingtheygotanerrorwhentryingtolaunchtheirdesktopsAdminnoticedthatintermittentlyVDAswouldde-registeratsessionlaunchCaseStudyWalkthrough14第14頁，共37頁。EnvironmentoverviewXenDesktopdeploymentwith:WebInterface5.4XD5.6SQL2008VMWare5.0Windows2008R2ActiveDirectoryVirtualDesktopAgentOS–Win732-bitCitrixReceiver3.1WebInterface5.4XD5.6SQL2008VMWare5.0ActiveDirectoryVDAsReceiver15第15頁，共37頁。Whatdidfailurelooklike?16第16頁，共37頁。Userattemptstostartthesession1011011010SSL1011011010SSL1011011010SSL10110111011011101117第17頁，共37頁。InitialTroubleshootingHowoftendoesithappen?Anyparticulartimeframeithappens?Anyspecificusersorimagesithappensmorefrequentlywith?Whatchanged?Anyeventviewermessages?18第18頁，共37頁。Whatchanged?

WIController#1VDAsController#2VDAsregisteronController#1CustomerhadsingleserverdeploymentCustomeraddedsecondControllerforredundancy19第19頁，共37頁。Wheredowestartlooking?Wefound4interestingmessagesinEventViewer:Warning–EventID2103:AnunexpectedexceptionoccurredwhiletheCitrixBrokerServiceprocessedanXMLtransaction.

AnincompatibleclientmightbetryingtoaccesstheXMLservice.Verifythecompatibilityofclientsaccessingtheservice.Ifthisproblempersists,reinstalltheCitrixXenDesktopController.Errordetails:Transaction:'RequestAddress'ExceptionType:'System.ServiceModel.Security.SecurityAccessDeniedException'ApplicationWarning–EventID1060:TheCitrixBrokerServicefailedtoapplysettingsonthevirtualmachine'KB-WIN7-01.'.

CheckthatthevirtualmachinecanbecontactedfromtheControllerandthatanyfirewallonthevirtualmachineallowsconnectionsfromtheController.SeeCitrixKnowledgeBasearticleCTX126992.

Errordetails:Exception'Accessisdenied.'oftype'System.ServiceModel.Security.SecurityAccessDeniedException'.Warning–EventID1039:TheCitrixBrokerServicefailedtocontactvirtualmachine'KB-WIN7-01.'(IPaddress).

CheckthatthevirtualmachinecanbecontactedfromtheControllerandthatanyfirewallonthevirtualmachineallowsconnectionsfromtheController.SeeCitrixKnowledgeBasearticleCTX126992.

Errordetails:Exception'Accessisdenied.'oftype'System.ServiceModel.Security.SecurityAccessDeniedException'.Warning–EventID1101:TheCitrixBrokerServicefailedtobrokeraconnectionforuser'GET\atladmin'toresource'KB-Win7-PW'.TheCitrixBrokerServicecannotfindanyavailablevirtualmachines.Pleaseaddmorevirtualmachinestothesite.Iftheproblemisduetoexistingvirtualmachinesnotbecomingavailable,seeCitrixKnowledgeBasearticleCTX126992.20第20頁，共37頁。TroubleshootingMethodology–verifyenvironmentCheckFirewallconfigurationActiveDirectorymis-configurationForwardDNSandReverseDNSEnvironmentalchecks:CheckfortimeskewDefaultportsPortconflicts21第21頁，共37頁。TroubleshootingMethodology–gatheringdataRunCitrixScoutTaaSbetaEnableloggingonbothControllersRunaCDFTrace22第22頁，共37頁。CitrixScout/XDCollector(CTX130147)PushbuttoneasydatacollectionsystemMakesdatacollectionanduploadpushbuttoneasyIntegratesdatacollectedbyScoutwiththeCitrixToolsasaService(TaaS)backendSimplifiesdatacollection&analysis23第23頁，共37頁。ToolsasaServicehttp://Taas.C/BetaAutoanalysishealthcheck23DataCollectionRecommendationstailoredtoYOU1Quicklycollectanduploadyourdata24第24頁，共37頁。EnablingloggingEnablingControllerServiceLogging-CTX127492CDFControl-CTX111961Controller25第25頁，共37頁。Diggingdeeper–ControllerloganalysisCdsBroker:1:1:UpdateWorkerSettingsconfigurationService.Setfailed:System.ServiceModel.Security.SecurityAccessDeniedException:Accessisdenied.Serverstacktrace:atSystem.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessagemessage)Exceptionrethrownat[0]:atSystem.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessagereqMsg,IMessageretMsg)atSystem.Runtime.Remoting.Proxies.RealProx"CdsBroker:1:1:UpdateWorkerSettingsrejecttheworker(S-1-5-21-1123877020-465626563-3648135752-3586)"BrokerDAL:8:5:DAL>>>DeregisterWorker(S-1-5-21-1123877020-465626563-3648135752-3586,CommunicationFailure)"BrokerDAL:8:5:DAL>>>DeleteBrokeredSessionOnPrepareFailure(LaunchToken=54711b77-4fce-4edc-b31e-937bc7dca341,SinBin=True)26第26頁，共37頁。UsingCDFControlWithCDFControlyoucandownloadthepublicTMFfileswhichwillallowyoutoparsetheCDFtraceandtroubleshootyourissueParsingtheCDFtraceandenablingtheexpertshaderfeatureallowsustoquicklyfindexceptionswhicharetypicallyhighlightedinorangeHighlevelfailureis:“CdsWorkerAgent:8:5:UserAllowed:foundnomatchingControllers,accessnotallowedforuser”27第27頁，共37頁。Diggingdeeper–CDFtraceloganalysisInitialtrustfailure:CdsWorkerAgent:8:5:CheckAccessCore:CallingdelegatetoprovideSIDlistCdsWorkerAgent:8:5:CheckAccessCore:entered,have1trustedDDCsCdsWorkerAgent:8:5:UserAllowed:foundnomatchingControllers,accessnotallowedforuserGET\KB-XD5-SP1-2$S-1-5-21-1123877020-465626563-3648135752-3604AfterworkerSin-Bintimeout:CdsWorkerAgent:1:1:Heartbeattohttp://KB-XD5-03.:80/Citrix/CdsController/IRegistrarrejectedCdsWorkerAgent:2:1:EventLogManagerdecidedtologeventCDS_EVENT_WORKER_AGENT_HEARTBEAT_REJECTEDoftypeWarningRe-Registered(aftertimeoutexpires):CdsWorkerAgent:2:1:Succesfullyregisteredwithhttp://KB-XD5-03.:80/Citrix/CdsController/IRegistrar;startingheartbeats28第28頁，共37頁。Underthehood-VDASessionLaunchexplainedVDAVDAController#1DesktopServiceController#2SQLUserWIVDAregisterstoController#1WorkerflaggedinDBasReadyUserlaunchessessionWISendslaunchrequesttoXMLBrokerXMLbrokerqueriesDBforareadyworkerXMLsendsPrepareSessiontickettoVDAXMLBrokerunregistersworkerListOfDDCs=Controller#1VDAchecksListOfDDCstoauthorizePrepareSessionController#2isnotinListOfDDCs,VDAinvalidatessessionlaunchrequestXMLReturnsErrortoWIWIErrorreturnedtouserBrokerServiceXMLBrokerWorkerisplacedinSinBin29第29頁，共37頁。RootCauseanalysisThecustomeraddedasecondControllertohandleXMLrequestsforredundancyAssoonasthenewControllerwasaddedtotheWIXMLfailoverlistitwasavailabletobrokersessionlaunchesbydesignSincethenewControllerwasnotaddedasanauthorizedtrustedagentXenDesktoprejectsthesessionlogonsWorkstationagentde-registerstemporarilyandthenattemptstore-register30第30頁，共37頁。ResolutionDDCsthathandleauthenticationmustbeauthorizedagentsandaddedto“ListOfDDCs”registryvalueCTX132536outlinestheregistrykeyandhowtodefinebrokergroupsAddingDDCstoWIXMLfailoverlistenablestheabilityforDDCstohandlesessionlogons31第31頁，共37頁。Re