I have been playing with VMware Integrated Openstack for the last couple of months. After installation I have been able to launch a couple of instances, create networks, create routers, etc. Everything works fine, however I was unable to launch the instance’s console from horizon; it failed every time with the error, "Failed to connect to server(code:1006)". I have been working around this by using the VM’s console from the vSphere client.

I decided to dig deeper and was able to resolve the issue by allowing a set of ports in the ESXi hosts security profile. Specifically, incoming ports (1000-9999 and 50000-50999).

To resolve the VNC console issue for instances deployed via VMware Integrated Openstack, enable the gdbserver rule on the ESXi firewall for each of the ESXi hosts that belong to the compute cluster.

To enable the gdbserver rule:

A. Using vSphere Client:

  • Select the ESXi host
  • Select the configuration tab
  • Select “Security Profile” under Software
  • Click on “Properties…” next to Firewall
  • Check “gdbserver” and click ok.

B. Using the vSphere Web Client:

  • Select the ESXi host
  • Select the Manage tab and then Settings
  • Select “Security Profile” under System
  • Click Edit next to Firewall
  • Check “gdbserver” and click ok.