Hi
I use apache as reverse proxy for that. thats my setting for the apache2 site: <Location /guacamole> Order allow,deny Allow from all ProxyPass http://internal.domain.name:8080/guacamole <http://ckcucs12.intern.ckc-it.at:8080/guacamole> max=20 flushpackets=on ProxyPassReverse http:// <http://ckcucs12.intern.ckc-it.at:8080/guacamole> internal.domain.name <http://ckcucs12.intern.ckc-it.at:8080/guacamole> :8080/guacamole <http://ckcucs12.intern.ckc-it.at:8080/guacamole> </Location> <Location /guacamole/websocket-tunnel> Order allow,deny Allow from all ProxyPass ws://internal.domain.name <http://ckcucs12.intern.ckc-it.at:8080/guacamole> :8080/guacamole/websocket-tunnel ProxyPassReverse ws://internal.domain.name <http://ckcucs12.intern.ckc-it.at:8080/guacamole> :8080/guacamole/websocket-tunnel </Location> rg Christian Christian Kraus Inhaber CKC IT Consulting & Solutions e.U. Kirschenallee 22 2120 OBERSDORF Österreich Telefon: +43 (0) 680 2062952 Fax: +43 820 220262992 E-mail: [email protected] -----Ursprüngliche Nachricht----- Von: ssat <[email protected]> Gesendet: Montag 26 November 2018 20:02 An: [email protected] Betreff: Deploy guacd behind NAT Hello, I am looking to place guacd behind a NAT network as that looks to be the only way to gain a VNC connection to my destination VMs. This naturally introduces a challenge in maintaining the connectivity between guacamole-client cloud layer and guacd. The environment restrictions local to guacd dictate that I cannot directly expose the IP address/port of guacd to the outside world. My question is two-fold: - I was wondering if there are any known best practices or recommended deployment topologies to make this work? Are there any known experiences of making a reverse ssh-like setup work successfully to support the websocket connections between guacamole-client & guacd? - Are there any long term plans to support a reverse connection setup assuming users take responsibility of making available a messaging mechanism to inform guacd of a connection to be setup? Thanks! -- Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
