guacamole-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Christian Kraus <christian.kr...@ckc-it.at>
Subject AW: Deploy guacd behind NAT
Date Mon, 26 Nov 2018 19:06:17 GMT
Hi


I use apache as reverse proxy for that.


thats my setting for the apache2 site:


<Location /guacamole>
        Order allow,deny
Allow from all
ProxyPass http://internal.domain.name:8080/guacamole <http://ckcucs12.intern.ckc-it.at:8080/guacamole>
max=20 flushpackets=on
ProxyPassReverse http:// <http://ckcucs12.intern.ckc-it.at:8080/guacamole> internal.domain.name
<http://ckcucs12.intern.ckc-it.at:8080/guacamole> :8080/guacamole <http://ckcucs12.intern.ckc-it.at:8080/guacamole>

</Location>

<Location /guacamole/websocket-tunnel>
         Order allow,deny
Allow from all
ProxyPass ws://internal.domain.name <http://ckcucs12.intern.ckc-it.at:8080/guacamole>
:8080/guacamole/websocket-tunnel
ProxyPassReverse ws://internal.domain.name <http://ckcucs12.intern.ckc-it.at:8080/guacamole>
:8080/guacamole/websocket-tunnel
</Location>



rg

Christian



Christian Kraus
Inhaber
CKC IT Consulting & Solutions e.U.
Kirschenallee 22
2120 OBERSDORF
Österreich
Telefon: +43 (0) 680 2062952
Fax:        +43 820 220262992
E-mail: christian.kraus@ckc-it.at

-----Ursprüngliche Nachricht-----
Von: ssat <ssatpute@zededa.com>
Gesendet: Montag 26 November 2018 20:02
An: user@guacamole.apache.org
Betreff: Deploy guacd behind NAT


Hello,

I am looking to place guacd behind a NAT network as that looks to be the

only way to gain a VNC connection to my destination VMs. This naturally
introduces a challenge in maintaining the connectivity between
guacamole-client cloud layer and guacd. The environment restrictions local
to guacd dictate that I cannot directly expose the IP address/port of guacd
to the outside world. 

My question is two-fold:
- I was wondering if there are any known best practices or recommended
deployment topologies to make this work? Are there any known experiences of
making a reverse ssh-like setup work successfully to support the websocket
connections between guacamole-client & guacd?

- Are there any long term plans to support a reverse connection setup
assuming users take responsibility of making available a messaging mechanism
to inform guacd of a connection to be setup?

Thanks!



--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message