From user-return-5533-archive-asf-public=cust-asf.ponee.io@guacamole.apache.org Tue Mar 5 04:08:47 2019 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by mx-eu-01.ponee.io (Postfix) with SMTP id 9D15A18067E for ; Tue, 5 Mar 2019 05:08:46 +0100 (CET) Received: (qmail 54543 invoked by uid 500); 5 Mar 2019 04:08:40 -0000 Mailing-List: contact user-help@guacamole.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@guacamole.apache.org Delivered-To: mailing list user@guacamole.apache.org Received: (qmail 54529 invoked by uid 99); 5 Mar 2019 04:08:40 -0000 Received: from mail-relay.apache.org (HELO mailrelay1-lw-us.apache.org) (207.244.88.152) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 05 Mar 2019 04:08:40 +0000 Received: from mail-oi1-f174.google.com (mail-oi1-f174.google.com [209.85.167.174]) by mailrelay1-lw-us.apache.org (ASF Mail Server at mailrelay1-lw-us.apache.org) with ESMTPSA id 535C9449E for ; Tue, 5 Mar 2019 04:08:39 +0000 (UTC) Received: by mail-oi1-f174.google.com with SMTP id u128so5788342oie.2 for ; Mon, 04 Mar 2019 20:08:39 -0800 (PST) X-Gm-Message-State: APjAAAXBQ4S+8Kir9rxYMmzdHLag+vyMWaAP40LRDbaSvAKKuUFxYn6y OTu3/2mQ9CyiczG+4yJGB6+EKn3IRe6yMK5NoKzLBQ== X-Google-Smtp-Source: APXvYqzJ0Ti32k8zUNS1jd/emS6e2yACBDQfvVZQ8uE0vzgfJGniKHnpc3Bjoyp0vEXyGeqbsaZRfeunyubtUcx9JO4= X-Received: by 2002:aca:dc41:: with SMTP id t62mr816339oig.170.1551758918773; Mon, 04 Mar 2019 20:08:38 -0800 (PST) MIME-Version: 1.0 References: <1551744254104-0.post@n4.nabble.com> In-Reply-To: From: Mike Jumper Date: Mon, 4 Mar 2019 20:08:01 -0800 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: 1.0.0 LocalStorage auth instead of cookies To: user@guacamole.apache.org Content-Type: multipart/alternative; boundary="0000000000002186510583510724" --0000000000002186510583510724 Content-Type: text/plain; charset="UTF-8" On Mon, Mar 4, 2019 at 7:49 PM Lev Dubinets wrote: > To add to that, I'd bet that most serious deployments of guacamole are > putting it behind nginx or some other proxy and/or load balancer. > Yes, though it's mainly guacd that needs the most balancing. The cookies allow the backend to control and isolate guacamole sessions or > deployments. This is really useful. For large-scale deployments this has to > be a must-have feature. > No. With respect to routing of sticky sessions, the typical case would involve configuring the balancer to set its own cookie independent of the backend session. Setting an HTTP header specifically for use by balancers (such that they can properly route future requests based on the "token" parameter) might be a good way to expand this case. Additionally setting and accepting a cookie as an optional alternative to the "token" parameter might also be worth doing. It's definitely not a requirement for a deployment to be large/serious. - Mike --0000000000002186510583510724 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
On Mon, Mar 4, 2019 at 7:49 PM Lev Dubine= ts <levdubinets@live.com>= wrote:
To add to that, I'd bet that most serious deployments of guacamole are = putting it behind nginx or some other proxy and/or load balancer.

Yes, though it's mainly guacd that n= eeds the most balancing.

The cookies allow the backen= d to control and isolate guacamole sessions or deployments. This is really = useful. For large-scale deployments this has to be a must-have feature.

No. With respect to routing of sticky sessions, the typic= al case would involve configuring the balancer to set its own cookie indepe= ndent of the backend session.

Setting an HTTP head= er specifically for use by balancers (such that they can properly route fut= ure requests based on the "token" parameter) might be a good way = to expand this case. Additionally setting and accepting a cookie as an opti= onal alternative to the "token" parameter might also be worth doi= ng. It's definitely not a requirement for a deployment to be large/seri= ous.

- Mike

--0000000000002186510583510724--