Sounds great.


After some tcpdumping the decisive paramenter should be TcpAckTimeout. Because:

I saw that after 5 seconds Guacamole sends a TCP keep alive, but after 9 
seconds Guacamole sends a FIN to end the RDP connection attempt.

But as soon as the RDP connection is approved by an employee within the 9 sec, 
the SPS sends an ACK and the RDP session starts well.



- Martin





On 2023/02/16 12:21:16 Nick Couchman wrote:

>

[cid:audit_bf_rz_21_DE_RGB_65712845-2146-4396-8f42-bcd2b1e8317e11.jpg]

On Thu, Feb 16, 2023 at 2:07 AM Dyck, Martin (BITBW)

> <ma...@bitbw.bwl.de<mailto:ma...@bitbw.bwl.de>> wrote:

> >

> > Hi Nick,

> >

> >

> >

> > thank you very much for the quick reply. That sounds promising.

> >

> > I have seen your pull request #413. So can we expect in the next guacamole 
> > release a way to modify the TcpAckTimeout? That would be gorgeous!

> >

>

> Yeah, your e-mail prompted me to go re-visit that Jira issue

> (https://issues.apache.org/jira/browse/GUACAMOLE-600) and see if I

> could make some progress on it. RDP was pretty easy to knock out -

> assuming it actually works, we'll see - and I'll work through SSH and

> Telnet, as well. VNC I'm not sure about at the moment.

>

> Another thing to note is that the source code for FreeRDP on Github

> actually contains two parameters - TcpAckTimeout and

> TcpConnectTimeout. My understanding is that the first one,

> TcpAckTimeout, is the timeout for actually getting an initial

> acknowledgement from the server that it is alive. TcpConnectTimeout is

> likely the timeout between getting the acknowledgement that the server

> is alive and when the connection is considered established. However,

> checking my FreeRDP headers on my EL8 development system,

> TcpConnectTimeout is not present, so I'm guessing this was added much

> more recently. Ultimately we can probably support both, we'll just

> have to check for that support in the FreeRDP library at build time

> and enable it if it exists. All that to say - it isn't clear to me

> which one is actually going to be of use to you.

>

> -Nick

>

Reply via email to