Pivotal Knowledge Base


Unable to SSH into a Diego Application Container; getsockopt: Connection Refused


Pivotal Cloud Foundry® (PCF) 1.6.x and 1.7.x


When trying to run cf ssh, you get the following error message:

Error opening SSH connection: dial tcp <load balancer ip>:2222: getsockopt: connection refused


This error message is caused when the load balancer is not listening on port 2222.


The Load Balancer needs to be configured to redirect TCP traffic on port 2222 to the Diego brain VM on port 2222.


You need at least version 6.13 of the cf CLI to use the cf ssh related features. Please follow the article How to ssh login application container in verbose mode for troubleshooting purposes. Also, please check that the following conditions are true:

  • The user has been given the SpaceDeveloper for the space that contains the application that is being accessed. This can be confirmed with the command cf space-users <org> <space>
  • Single SHell (SSH) access has been enabled for the application. This can be confirmed with the command cf ssh-enabled <app-name>.
  • The space that is being accessed has SSH enabled. This can be confirmed with the command cf space-ssh-allowed <space-name>.

Additional Information

For further information, please refer to the following resource:

Accessing Apps with SSH 



Powered by Zendesk