guacamole-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Christian Kraus <>
Subject AW: Deploy guacd behind NAT
Date Mon, 26 Nov 2018 19:06:17 GMT

I use apache as reverse proxy for that.

thats my setting for the apache2 site:

<Location /guacamole>
        Order allow,deny
Allow from all
ProxyPass <>
max=20 flushpackets=on
ProxyPassReverse http:// <>
<> :8080/guacamole <>


<Location /guacamole/websocket-tunnel>
         Order allow,deny
Allow from all
ProxyPass ws:// <>
ProxyPassReverse ws:// <>



Christian Kraus
CKC IT Consulting & Solutions e.U.
Kirschenallee 22
Telefon: +43 (0) 680 2062952
Fax:        +43 820 220262992

-----Ursprüngliche Nachricht-----
Von: ssat <>
Gesendet: Montag 26 November 2018 20:02
Betreff: Deploy guacd behind NAT


I am looking to place guacd behind a NAT network as that looks to be the

only way to gain a VNC connection to my destination VMs. This naturally
introduces a challenge in maintaining the connectivity between
guacamole-client cloud layer and guacd. The environment restrictions local
to guacd dictate that I cannot directly expose the IP address/port of guacd
to the outside world. 

My question is two-fold:
- I was wondering if there are any known best practices or recommended
deployment topologies to make this work? Are there any known experiences of
making a reverse ssh-like setup work successfully to support the websocket
connections between guacamole-client & guacd?

- Are there any long term plans to support a reverse connection setup
assuming users take responsibility of making available a messaging mechanism
to inform guacd of a connection to be setup?


Sent from:

  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message