VMware Horizon VDI

Infrastructure Components

The current infrastructure is composed of two UAG appliances, three connection servers, one enrollment server, one error reporting server, and the file server. All connections are proxied via the UAG appliances; there is one for internal connections and one for external. Each UAG is registered/pointed at a specific connection server: UAG02 → OKIOPRDHCS01 and UAG03 → OKIOPRDHCS02. The connection servers are only responsible for processing authentication and coordinating vCenter/vSphere actions. The enrollment server is required for TrueSSO and the M365 authentication that is being used. TrueSSO is required for cert based authentication that ties the M365 login to the local AD login in Horizon so that users do not have to authenticate twice. The error reporting server facilitates extended Horizon error logging. The file server is where the FSLogix user containers are stored.

UAGs
- Internal - OKIOPRDUAG02
  - 10.103.70.44
    - horizon.caliberfs.com in on-prem DNS
- External - OKIOPRDUAG03
  - 172.23.85.12
  - 12.19.201.87
    - horizon.caliberfs.com in Cloudflare
Connection Servers
- OKIOPRDHCS01 - 10.103.70.38
  - horizonint.caliberfs.com
- OKIOPRDHCS02 - 10.103.70.39
  - horizonext.caliberfs.com
- LEIOPRDHCS01 - 10.100.70.39
Enrollment Server
- OKIOPRDHES01 - 10.103.70.117
Error Reporting Server
- OKIOPRDHER01 - 10.103.70.45
File Server
- OKRRK1VDIFILE - 10.103.70.197

Documentation Status:

Status

DRAFT

Approval

IN-PROGRESS

Primary Technical SME

Chase Vernon

Secondary Technical SME

Business Owner

Vendor

VMware

Support Portal

https://apex1vcsa.otoemc.local/ui

https://horizonint.caliberfs.com/admin/#/login

Last Modified

Desktop Pools

Automated Pools
- Caliber_Agents
  - 75 machines up front with 25 spares powered on. Max of 120
- BPO_Agents
  - 25 machine up front with 25 spares powered on. Max of 50
- Caliber_Ops
  - 30 machine up front with 3 spares powered on. Max of 35
- IT_Agent_Test
  - 6 machines all up front
Manual Pools
- Caliber_Contractors - modern
  - This pool will hold all contractor machines going forward.
  - It's not tied to a specific vCenter so VMs can migrate and still work
- Contractors - legacy
  - Contractor VMs from LE
- OKVDIDEV - legacy
  - OKVDIDEVxx machines
- QASim - legacy
  - OTOEQASIMxx machines
- SpecOps - legacy
  - Special Operations machines

Video Overview of Golden Image and VDI Infrastructure. This is outdated, but for historical context it can be left here

VMware training sessions-20240715_140504-Meeting Recording.mp4

Search This Documentation

Recent updates

Observability - Prometheus/Grafana
Jul 03, 2025 • contributed by Chase Vernon
DevOps
Jun 30, 2025 • contributed by Anthony Klynsma
RabbitMQ
Oct 29, 2024 • contributed by Jeffery White
Postman
Apr 01, 2024 • contributed by TJ Blogumas
AppDynamics
Feb 29, 2024 • contributed by TJ Blogumas