NVP-vProxy: FLR failing - Unable to retrieve contents from VM "connection timed out"
Summary: The NetWorker VMware Protection (NVP) integration is configured with the vProxy appliance. While attempting to perform a file-level restore (FLR) with the vProxy, the mount operation fails and NetWorker cannot determine if the VM has the vProxy FLR agent installed. The vProxy is unable to communicate with the VM's ESXi host over port 443 and times out. Correct firewall configuration to allow the vProxy to communicate with the ESXi host over port 443. ...
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Symptoms
The NetWorker VMware Protection (NVP) integration is configured with the vProxy appliance. While attempting to perform a file-level restore (FLR) with the vProxy, the mount operation fails and NetWorker cannot determine if the VM has the vProxy FLR agent installed.
The vProxy /opt/emc/vproxy/runtime/logs/vflrd mount session log shows:
The vProxy /opt/emc/vproxy/runtime/logs/vflrd mount session log shows:
YYYY/MM/DD HH:MM:SS ERROR: [@(#) Build number: 204] Unable to retrieve contents of file '/tmp/vmware-root/vpvmware89.out' from VM 'testvm01' (vm-6720): Get https://ESXi_IP_ADDRESS:443/guestFile?id=14&token=52d7347a-58ec-4040-f346-ece69132bef414: dial tcp ESXi_IP_ADDRESS:443: getsockopt: connection timed out .......... YYYY/MM/DD HH:MM:SS ERROR: [@(#) Build number: 204] Cannot determine presence of FLR agent on VM 'testvm01' (vm-6720): Failed to determine if vProxy Agent is installed on "testvm01": Cannot identify vProxy Agent version on VM 'testvm01' (vm-6720) in ''
Cause
The vProxy is unable to communicate with the target VM's ESXi host over port 443 and times out.
vproxy01:~ # curl -v 10.1.1.5:443
* Rebuilt URL to: 10.1.1.5:443/
* Hostname was NOT found in DNS cache
* Trying 10.1.1.5...
* connect to 10.1.1.5 port 443 failed: Connection timed out
* Failed to connect to 10.1.1.5 port 443: Connection timed out
* Closing connection 0
curl: (7) Failed to connect to 10.1.1.5 port 443: Connection timed out
Resolution
As a temporary workaround, test the curl port 443 connection to another ESXi host, and if the connection is successful perform the FLR to a VM of the same operating system type which resides on this ESXi host. The vProxy appliance must have VMware datastore access to the datastores connected to this ESXi host.
To perform an FLR to the existing ESXi host, correct the firewall configuration to allow the vProxy to communicate with the target VM's ESXi host over port 443.
NVP vProxy: Troubleshooting Network Connectivity For Backup and Restore Operations
To perform an FLR to the existing ESXi host, correct the firewall configuration to allow the vProxy to communicate with the target VM's ESXi host over port 443.
vproxy01:~ # curl -v 10.1.1.5:443
* Rebuilt URL to: 10.1.1.5:443/
* Hostname was NOT found in DNS cache
* Trying 10.1.1.5...
* Connected to 10.1.1.5 (10.1.1.5) port 443 (#0)
* Empty reply from server
* Connection #0 to host 10.1.1.5 left intact
curl: (52) Empty reply from server
Additional Information
Affected Products
NetWorkerProducts
NetWorkerArticle Properties
Article Number: 000032714
Article Type: Solution
Last Modified: 28 May 2025
Version: 4
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.