[jira] [Commented] (GUACAMOLE-283) HA in Guacamole
[ https://issues.apache.org/jira/browse/GUACAMOLE-283?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16097102#comment-16097102 ] Thiago dos Santos Nunes commented on GUACAMOLE-283: --- Hi Nick, Thanks a lot for your sharing. I studied Hazelcast, but can´t worked for me. It´s to expensive an Enterprise license for us. I need to know how to do this High Availability by the cache option. I am not a developer, only a sysadmin. And the server, how to do this? Is possible? > HA in Guacamole > --- > > Key: GUACAMOLE-283 > URL: https://issues.apache.org/jira/browse/GUACAMOLE-283 > Project: Guacamole > Issue Type: New Feature > Components: guacamole-client, guacamole-server >Affects Versions: 0.9.12-incubating >Reporter: Thiago dos Santos Nunes > > A great feature for guacamole would be high availability both on the client > (mainly) and on the server. > In the client the ideal would be to be able to at least be able to block by > the number of simultaneous connections even having an environment with > several vms or containers. > I currently have an environment with 3 guacamole servers with Tomcat 8 > running behind a HAPROXY. But I lose the block by simultaneous connection (I > charge my clients for simultaneous connection) and I can not give up having > more than one vm, because if one falls I lose all. It would also be great if > the user does not need to log in again if they go to another server (session > permanence). Today I work with hundreds of simultaneous users from different > places. > It would also be very good to be able to separate the client from the server > and be able to work on HA on the server as well. > My Environment: > 3x Guacamole server and client: 0.9.12 > Database and Authentication: MySQL (another vm) > File Server: SFTP (another vm) > I alread commented this on: > https://issues.apache.org/jira/browse/GUACAMOLE-189 -- This message was sent by Atlassian JIRA (v6.4.14#64029)
[jira] [Commented] (GUACAMOLE-283) HA in Guacamole
[ https://issues.apache.org/jira/browse/GUACAMOLE-283?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16089479#comment-16089479 ] AlanBaban2000 commented on GUACAMOLE-283: - thanks Nick for commenting on this. i can see the first option achievable with little bit of work. as i now have load balancing working with HAproxy. is there any more information on this you can share - or any articles you are aware of? Thanks Alan Baban > HA in Guacamole > --- > > Key: GUACAMOLE-283 > URL: https://issues.apache.org/jira/browse/GUACAMOLE-283 > Project: Guacamole > Issue Type: New Feature > Components: guacamole-client, guacamole-server >Affects Versions: 0.9.12-incubating >Reporter: Thiago dos Santos Nunes > > A great feature for guacamole would be high availability both on the client > (mainly) and on the server. > In the client the ideal would be to be able to at least be able to block by > the number of simultaneous connections even having an environment with > several vms or containers. > I currently have an environment with 3 guacamole servers with Tomcat 8 > running behind a HAPROXY. But I lose the block by simultaneous connection (I > charge my clients for simultaneous connection) and I can not give up having > more than one vm, because if one falls I lose all. It would also be great if > the user does not need to log in again if they go to another server (session > permanence). Today I work with hundreds of simultaneous users from different > places. > It would also be very good to be able to separate the client from the server > and be able to work on HA on the server as well. > My Environment: > 3x Guacamole server and client: 0.9.12 > Database and Authentication: MySQL (another vm) > File Server: SFTP (another vm) > I alread commented this on: > https://issues.apache.org/jira/browse/GUACAMOLE-189 -- This message was sent by Atlassian JIRA (v6.4.14#64029)
[jira] [Commented] (GUACAMOLE-283) HA in Guacamole
[ https://issues.apache.org/jira/browse/GUACAMOLE-283?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16089239#comment-16089239 ] Nick Couchman commented on GUACAMOLE-283: - To implement this properly, the Guacamole Client code would have to be changed such that active connections are stored somewhere in a shared location that can be accessed by all servers participating in the front-end cluster. Two possibilities come to mind: * Track active connections in the database - perhaps even using the existing history table (make it so that connections that are inserted with a start date and no end date are active, or add a boolean isActive field). * Use some sort of shared/distributed caching mechanism (Hazelcast, memcached come to mind) where multiple systems could access the data, without actually writing it to a database. The first option is simpler to implement, maintain, and configure; the second option would probably scale better from a performance perspective. > HA in Guacamole > --- > > Key: GUACAMOLE-283 > URL: https://issues.apache.org/jira/browse/GUACAMOLE-283 > Project: Guacamole > Issue Type: New Feature > Components: guacamole-client, guacamole-server >Affects Versions: 0.9.12-incubating >Reporter: Thiago dos Santos Nunes > > A great feature for guacamole would be high availability both on the client > (mainly) and on the server. > In the client the ideal would be to be able to at least be able to block by > the number of simultaneous connections even having an environment with > several vms or containers. > I currently have an environment with 3 guacamole servers with Tomcat 8 > running behind a HAPROXY. But I lose the block by simultaneous connection (I > charge my clients for simultaneous connection) and I can not give up having > more than one vm, because if one falls I lose all. It would also be great if > the user does not need to log in again if they go to another server (session > permanence). Today I work with hundreds of simultaneous users from different > places. > It would also be very good to be able to separate the client from the server > and be able to work on HA on the server as well. > My Environment: > 3x Guacamole server and client: 0.9.12 > Database and Authentication: MySQL (another vm) > File Server: SFTP (another vm) > I alread commented this on: > https://issues.apache.org/jira/browse/GUACAMOLE-189 -- This message was sent by Atlassian JIRA (v6.4.14#64029)
[jira] [Commented] (GUACAMOLE-283) HA in Guacamole
[ https://issues.apache.org/jira/browse/GUACAMOLE-283?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=1605#comment-1605 ] AlanBaban2000 commented on GUACAMOLE-283: - I see, that's what I am trying to investigate as well. At the moment I have issue of blank page when load balances. Would probably think of session aggregation between the instances. However I am not using NGinx as frontend. Is it straight forward? Would you please share the config, and where does it sit on the network? Is it running on Ubuntu? I will share my findings as we progress > HA in Guacamole > --- > > Key: GUACAMOLE-283 > URL: https://issues.apache.org/jira/browse/GUACAMOLE-283 > Project: Guacamole > Issue Type: New Feature > Components: guacamole-client, guacamole-server >Affects Versions: 0.9.12-incubating >Reporter: Thiago dos Santos Nunes > > A great feature for guacamole would be high availability both on the client > (mainly) and on the server. > In the client the ideal would be to be able to at least be able to block by > the number of simultaneous connections even having an environment with > several vms or containers. > I currently have an environment with 3 guacamole servers with Tomcat 8 > running behind a HAPROXY. But I lose the block by simultaneous connection (I > charge my clients for simultaneous connection) and I can not give up having > more than one vm, because if one falls I lose all. It would also be great if > the user does not need to log in again if they go to another server (session > permanence). Today I work with hundreds of simultaneous users from different > places. > It would also be very good to be able to separate the client from the server > and be able to work on HA on the server as well. > My Environment: > 3x Guacamole server and client: 0.9.12 > Database and Authentication: MySQL (another vm) > File Server: SFTP (another vm) > I alread commented this on: > https://issues.apache.org/jira/browse/GUACAMOLE-189 -- This message was sent by Atlassian JIRA (v6.4.14#64029)
[jira] [Commented] (GUACAMOLE-283) HA in Guacamole
[ https://issues.apache.org/jira/browse/GUACAMOLE-283?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16088734#comment-16088734 ] Thiago dos Santos Nunes commented on GUACAMOLE-283: --- Yes publicly availabe. Same backend. In simple way: 1-FrontEnd (NGINX) Public IP with proxy 2- PFSENSE with HAPROXY 3- Load Balance with 3 app guacamole tomcat with guacd too. 4- 1 MySQL Database But if 1 server goes down, all clients on this server lost their connection and authentication. I can´t implemented all servers in pointing to one guacamole server because if this server goes down all my clients goes down. I don´t know how to resolve this big problem to me, and now I opened this ticket to HA in Gaucamole server and webapp. > HA in Guacamole > --- > > Key: GUACAMOLE-283 > URL: https://issues.apache.org/jira/browse/GUACAMOLE-283 > Project: Guacamole > Issue Type: New Feature > Components: guacamole-client, guacamole-server >Affects Versions: 0.9.12-incubating >Reporter: Thiago dos Santos Nunes > > A great feature for guacamole would be high availability both on the client > (mainly) and on the server. > In the client the ideal would be to be able to at least be able to block by > the number of simultaneous connections even having an environment with > several vms or containers. > I currently have an environment with 3 guacamole servers with Tomcat 8 > running behind a HAPROXY. But I lose the block by simultaneous connection (I > charge my clients for simultaneous connection) and I can not give up having > more than one vm, because if one falls I lose all. It would also be great if > the user does not need to log in again if they go to another server (session > permanence). Today I work with hundreds of simultaneous users from different > places. > It would also be very good to be able to separate the client from the server > and be able to work on HA on the server as well. > My Environment: > 3x Guacamole server and client: 0.9.12 > Database and Authentication: MySQL (another vm) > File Server: SFTP (another vm) > I alread commented this on: > https://issues.apache.org/jira/browse/GUACAMOLE-189 -- This message was sent by Atlassian JIRA (v6.4.14#64029)
[jira] [Commented] (GUACAMOLE-283) HA in Guacamole
[ https://issues.apache.org/jira/browse/GUACAMOLE-283?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16088689#comment-16088689 ] AlanBaban2000 commented on GUACAMOLE-283: - thanks for this Thiago.. does that mean your guac is publicly available and behind pfsense firewall? just need to get my head around it, as my instances are publicly available behind paloalto firewalls - which doesn't have HAproxy functionality therefore i have an ubuntu server running HAproxy. also, do you have all instances connected to the same backend database? thanks Thiago Alan Baban > HA in Guacamole > --- > > Key: GUACAMOLE-283 > URL: https://issues.apache.org/jira/browse/GUACAMOLE-283 > Project: Guacamole > Issue Type: New Feature > Components: guacamole-client, guacamole-server >Affects Versions: 0.9.12-incubating >Reporter: Thiago dos Santos Nunes > > A great feature for guacamole would be high availability both on the client > (mainly) and on the server. > In the client the ideal would be to be able to at least be able to block by > the number of simultaneous connections even having an environment with > several vms or containers. > I currently have an environment with 3 guacamole servers with Tomcat 8 > running behind a HAPROXY. But I lose the block by simultaneous connection (I > charge my clients for simultaneous connection) and I can not give up having > more than one vm, because if one falls I lose all. It would also be great if > the user does not need to log in again if they go to another server (session > permanence). Today I work with hundreds of simultaneous users from different > places. > It would also be very good to be able to separate the client from the server > and be able to work on HA on the server as well. > My Environment: > 3x Guacamole server and client: 0.9.12 > Database and Authentication: MySQL (another vm) > File Server: SFTP (another vm) > I alread commented this on: > https://issues.apache.org/jira/browse/GUACAMOLE-189 -- This message was sent by Atlassian JIRA (v6.4.14#64029)
[jira] [Commented] (GUACAMOLE-283) HA in Guacamole
[ https://issues.apache.org/jira/browse/GUACAMOLE-283?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16088664#comment-16088664 ] Thiago dos Santos Nunes commented on GUACAMOLE-283: --- My HAProxy is on Pfsense firewall. Automaticaly generated, dont edit manually. # Generated on: 2017-05-15 00:05 global maxconn 1 stats socket /tmp/haproxy.socket level admin uid 80 gid 80 nbproc 1 chroot /tmp/haproxy_chroot daemon server-state-file /tmp/haproxy_server_state listen HAProxyLocalStats bind 127.0.0.1:2200 name localstats mode http stats enable stats refresh 30 stats admin if TRUE stats uri /haproxy/haproxy_stats.php?haproxystats=1 timeout client 5000 timeout connect 5000 timeout server 5000 frontend App1-Azure bindMYIP:8080 name MYIP:8080 modehttp log global option dontlog-normal option http-server-close option forwardfor acl https ssl_fc http-request set-header X-Forwarded-Proto http if !https http-request set-header X-Forwarded-Proto https if https maxconn 1 timeout client 3 default_backend BackendApp1Azure_http_ipvANY backend BackendApp1Azure_http_ipvANY modehttp log global stats enable stats uri /haproxy?stats stats realm . balance source timeout connect 300 timeout server 30 retries 3 fullconn 2000 server App_DR_3_IP_15 192.168.33.15:8080 check inter 2000 weight 2 server App_DR_2_IP_4 192.168.33.4:8080 check inter 2000 weight 2 server App_DR_1_IP_7 192.168.33.7:8080 check inter 2000 weight 2 > HA in Guacamole > --- > > Key: GUACAMOLE-283 > URL: https://issues.apache.org/jira/browse/GUACAMOLE-283 > Project: Guacamole > Issue Type: New Feature > Components: guacamole-client, guacamole-server >Affects Versions: 0.9.12-incubating >Reporter: Thiago dos Santos Nunes > > A great feature for guacamole would be high availability both on the client > (mainly) and on the server. > In the client the ideal would be to be able to at least be able to block by > the number of simultaneous connections even having an environment with > several vms or containers. > I currently have an environment with 3 guacamole servers with Tomcat 8 > running behind a HAPROXY. But I lose the block by simultaneous connection (I > charge my clients for simultaneous connection) and I can not give up having > more than one vm, because if one falls I lose all. It would also be great if > the user does not need to log in again if they go to another server (session > permanence). Today I work with hundreds of simultaneous users from different > places. > It would also be very good to be able to separate the client from the server > and be able to work on HA on the server as well. > My Environment: > 3x Guacamole server and client: 0.9.12 > Database and Authentication: MySQL (another vm) > File Server: SFTP (another vm) > I alread commented this on: > https://issues.apache.org/jira/browse/GUACAMOLE-189 -- This message was sent by Atlassian JIRA (v6.4.14#64029)
[jira] [Commented] (GUACAMOLE-283) HA in Guacamole
[ https://issues.apache.org/jira/browse/GUACAMOLE-283?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16088598#comment-16088598 ] AlanBaban2000 commented on GUACAMOLE-283: - HI would you be able to share the HAproxy setting please? i have few instances of Guacamole in LB mode, when enabled i get a blank page. note: i am not sharing mysql database between the instances at the moment. Thanks in advance > HA in Guacamole > --- > > Key: GUACAMOLE-283 > URL: https://issues.apache.org/jira/browse/GUACAMOLE-283 > Project: Guacamole > Issue Type: New Feature > Components: guacamole-client, guacamole-server >Affects Versions: 0.9.12-incubating >Reporter: Thiago dos Santos Nunes > > A great feature for guacamole would be high availability both on the client > (mainly) and on the server. > In the client the ideal would be to be able to at least be able to block by > the number of simultaneous connections even having an environment with > several vms or containers. > I currently have an environment with 3 guacamole servers with Tomcat 8 > running behind a HAPROXY. But I lose the block by simultaneous connection (I > charge my clients for simultaneous connection) and I can not give up having > more than one vm, because if one falls I lose all. It would also be great if > the user does not need to log in again if they go to another server (session > permanence). Today I work with hundreds of simultaneous users from different > places. > It would also be very good to be able to separate the client from the server > and be able to work on HA on the server as well. > My Environment: > 3x Guacamole server and client: 0.9.12 > Database and Authentication: MySQL (another vm) > File Server: SFTP (another vm) > I alread commented this on: > https://issues.apache.org/jira/browse/GUACAMOLE-189 -- This message was sent by Atlassian JIRA (v6.4.14#64029)
[jira] [Commented] (GUACAMOLE-283) HA in Guacamole
[ https://issues.apache.org/jira/browse/GUACAMOLE-283?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16057676#comment-16057676 ] Thiago dos Santos Nunes commented on GUACAMOLE-283: --- I see this related old post on old Jira https://glyptodon.org/jira/browse/GUAC-1057 I think is an way to do this on webclient app. > HA in Guacamole > --- > > Key: GUACAMOLE-283 > URL: https://issues.apache.org/jira/browse/GUACAMOLE-283 > Project: Guacamole > Issue Type: New Feature > Components: guacamole-client, guacamole-server >Affects Versions: 0.9.12-incubating >Reporter: Thiago dos Santos Nunes > > A great feature for guacamole would be high availability both on the client > (mainly) and on the server. > In the client the ideal would be to be able to at least be able to block by > the number of simultaneous connections even having an environment with > several vms or containers. > I currently have an environment with 3 guacamole servers with Tomcat 8 > running behind a HAPROXY. But I lose the block by simultaneous connection (I > charge my clients for simultaneous connection) and I can not give up having > more than one vm, because if one falls I lose all. It would also be great if > the user does not need to log in again if they go to another server (session > permanence). Today I work with hundreds of simultaneous users from different > places. > It would also be very good to be able to separate the client from the server > and be able to work on HA on the server as well. > My Environment: > 3x Guacamole server and client: 0.9.12 > Database and Authentication: MySQL (another vm) > File Server: SFTP (another vm) > I alread commented this on: > https://issues.apache.org/jira/browse/GUACAMOLE-189 -- This message was sent by Atlassian JIRA (v6.4.14#64029)
