...
protocol connectivity issues connecting to a virtual desktop via a unified access gateway, typically seen as a black / grey screen from the client perspective.
This article describes the common server side errors we logged on the VMware Unified Access Gateway Appliance
Error NameDescriptionValidationbsg.log ExampleECONNRESETWhen the VDI Agent Subnet TCP/UDP Connection from UAG is abruptly closedIf the connection reset is occurring on the VDI agent IP address, review the VDI agent subnet network health from UAG and also review the absg-worker messages [YYYY-MM-DD HH:MM:SS.ms] [ERROR] 1561 [absg-worker] - [console] error on reverseProxy.incoming: Error: read ECONNRESET [YYYY-MM-DD HH:MM:SS.ms] [INFO] 1563 [absg-worker] - [console] (req:17133) Response of GET request '.../?vauth=NLxF7a***&session=OxjCnT***...' ended on connection 17092 (port=65160, name=<agentmachineip>|22443|) Client Side Perspective: Horizon Client Blast Error Troubleshooting: VDPCONNECT_CONN_RESET (91179) ETIMEDOUTWhen VDI Agent Subnet TCP/UDP Connection from UAG is not respondedValidate if the route network path is available between UAG and VDI Subnet [ route -n ] [YYYY-MM-DD HH:MM:ss.ms] [ERROR] XXXX [absg-worker] - [console] (req:x) Error on connecting (<agentmachineip>|22443|127.0.0.1|?3): Error: connect ETIMEDOUT <agentmachineip>:22443 Client Perspective: Horizon Client Blast Error Troubleshooting: VDPCONNECT_CONN_TIMEDOUT (91019) For adding routes:UAG Admin Console --> Advanced Settings > Network Settings > NIC 2 Interface > Settings Gear Icon --> IPv4 Configuration > IPv4 Static Routes. Add the route: 10.X.XX.0/24 10.x.x.xECONNREFUSEDWhen UAG request connection to Horizon Agent Endpoint but connection could not be established because the specified address (eg: agentip:22443 ) was not reachableWe need to validate the firewall configuration or any 3rd party software involved between UAG and VDI Subnet. [YYYY-MM-DD HH:MM:SS.ms] [ERROR] XXXX [absg-worker] - [console] (req:XXXX) Error on connecting (<agentmachineip>|22443|): Error: connect ECONNREFUSED <agentmachineip>:22443 [YYYY-MM-DD HH:MM:SS.ms] [ERROR] XXXX [absg-worker] - [console] (req:XXXX) Response of GET request '.../?vauth=4Cfdpa***&session=DBSzZw***...' not completed on connection (<agentmachineip>|22443|) [YYYY-MM-DD HH:MM:SS.ms] [INFO] XXXX [absg-master] - Controller required removing route 13A6DF5C-*** to target <agentmachineip>|22443, registered for 132.199 seconds Client Side Perspective: Horizon Client Blast Error Troubleshooting: VDPCONNECT_CONN_REFUSED(91020) ERRADDRINUSE / EADDRNOTAVAILIndicates that the server is attempting to listen for connections at a port that is already occupied by some other application.Example: When UAG is using same port for per App Tunneling and also for BSG, we get this error [YYYY-MM-DD HH:MM:SS.ms] [ERROR] xxxx [absg-worker] - uncaughtException:Error: bind EADDRINUSE 0.0.0.0:8443 Error: bind EADDRINUSE 0.0.0.0:8443 EHOSTUNREACHThis indicates that a TCP connection failed because the underlying BSG or PSG protocol software found no route to the network or hostValidate if the route network path is available between UAG and VDI Subnet. Make sure the backend gateway on UAG is able to reach the VDI subnet gateway address. {"errno":"EHOSTUNREACH","code":"EHOSTUNREACH","syscall":"connect","address":"<agentmachineip>","port":22443} [YYYY-MM-DD HH:MM:SS.ms] [INFO] 15222 [absg-worker] - [console] http-proxy: failed to connect to upstream with error EHOSTUNREACH, sending HTTP 504 to downstream Client Perspective Horizon Client Blast Error Troubleshooting: VDPCONNECT_HOST_UNREACHABLE (91015)
Additional Resources: Troubleshooting Intermittent Blast Connection Issues (83088) Enhanced Horizon Blast Error Codes with Horizon Client 2303 and Later (91013) Horizon Blast Disconnect Codes (87457)