VxRail：配置 HTTPS 代理时无法部署 OVF

Summary: 配置 HTTPS 代理时无法部署 OVF。

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

在 /var/log/vmware/vpxd.log 中会看到类似于以下内容的错误： 
Unrecognized SSL message, plaintext connection?, note that HTTP/s proxy is configured for the transfer
2020-09-16T14:41:59.004+02:00 info vpxd[14866] [Originator@6876 sub=Default opID=2b691553-01] [VpxLRO] -- ERROR task-1978410 -- UPSA913s-x64-VM01-noV
APP -- ResourcePool.ImportVAppLRO: vim.fault.OvfImportFailed:
--> Result:
--> (vim.fault.OvfImportFailed) {
-->  faultCause = (vmodl.fault.SystemError) {
-->   faultCause = (vmodl.MethodFault) null,
-->   faultMessage = (vmodl.LocalizableMessage) [
-->     (vmodl.LocalizableMessage) {
-->      key = "com.vmware.ovfs.ovfs-main.ovfs.transfer_failed",
-->      arg = (vmodl.KeyAnyValue) [
-->        (vmodl.KeyAnyValue) {
-->         key = "0",
-->         value = "Invalid response code: 403, note that HTTP/s proxy is configured for the transfer"
-->      message = "Transfer failed: Invalid response code: 403, note that HTTP/s proxy is configured for the transfer."
-->   reason = ""
-->   msg = "Transfer failed: Invalid response code: 403, note that HTTP/s proxy is configured for the transfer."
-->  faultMessage =

Cause

OVF 部署过程无法连接到代理服务器，并显示错误：  
Transfer failed: Invalid response code: 403, note that HTTP/s proxy is configured for the transfer.
此“Invalid response code：403“ 是来自 PROXY 服务器的响应，指示不允许访问目标资源。

使用代理时，OVF 传输需要支持 HTTPS 的代理。确保代理支持 HTTPS，或使用下面的解决方法绕过代理。

Resolution

  1. 使用以下两种方法之一解决此问题。以下内容 区分大小写：
  • 修改 HTTPS PROXY 配置以使用 HTTP：
  1. 修改 /etc/sysconfig/proxy 文件。更改HTTPS_PROXY行以将值从 https 更新为 http：
From:
HTTPS_PROXY="https://proxy.domain.tld:3128/"

To:
HTTPS_PROXY="http://proxy.domain.tld:3128/"
  1. 如果代理服务器的 FQDN 不起作用，或者使用其 IP 地址。
  2. 如果您使用的是 7.0 U1 之前的版本，请重新启动 VCSA。否则，使用 以下命令 重新启动 服务：
# service-control --stop --all && service-control --start --all
  • 将主机添加到NO_PROXY配置以绕过代理：
  1. 使用 SSH 会话 连接 到 vCenter Server。
  2. 修改 /etc/sysconfig/proxy 文件。将 ESXi 主机 FQDN 或 IP 添加到以下行，用逗号和空格字符分隔。例如：
NO_PROXY="localhost, 127.0.0.1, ESXi-01.test.com"
  1. 尝试从内容库和 vSphere Client 部署 OVF。

Affected Products

VMWare Cloud on Dell EMC VxRail E560F, VMWare Cloud on Dell EMC VxRail E560N, VxRail Appliance Family, VxRail Appliance Series, VxRail G Series Nodes, VxRail D Series Nodes, VxRail E Series Nodes, VxRail P Series Nodes, VxRail S Series Nodes , VxRail Software ...

Products

XC Core Systems, XC Series Appliances, VxRail V Series Nodes, VxRail VD Series Nodes
Article Properties
Article Number: 000216499
Article Type: Solution
Last Modified: 19 Aug 2023
Version:  2
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.