RE: Maximum number of simultaneous RDP connections

Tobias Feller | OPC Mon, 20 Jan 2025 00:21:50 -0800

Hi Nick, Hi Paul,

i can also confirm this issue with > ~ 60 active Connections.


Same environment. Docker, Debian

I ran into this problem a time ago with Version 1.5.4 / 1.5.5 and thengoing back to 1.5.3 to resolve it.


In the meantime we now also have a HA-setup:

 * Loadbalancer with RoundRobin/StickySessions
 * 2 Guacamole Hosts (docker, guacd,tomcat)
 * 1 HA (cloud) Postgres DB

This morning one of the Host (Debian 11, running 1.5.3) had someproblems, and all users connected to the guacamole-host with version1.5.5. After some time i received the info that users can not connect,because without round-robin the 1.5.5, hit the 60-connection limit.

It is maybe possible to provide an offical debian-image instead ofALPINE? Will this be addressed/fixed in 1.6?


Also a small feature request for this kind of this HA-Setup:

Is it possible to add a info somewhere in the connection-history fromwhich host the connection was initiated? Maybe via an ENVIRONMENT-VAR"GUCAMOLE_HOST_ID" as prefix/suffix in some existing info (connectionname) if defined?


Thanks a lot.

Best regards,

Tobias

Am 16.12.2024 um 18:34 schrieb HASENOHR Paul:


Hello Nick,

I built the guacd Docker image from the branch staging/1.6.0 and ranthe same series of test and unfortunately, they failed again from the60^th connection onwards. This time, the failure seems to be linked to/lib/libcrypto.so.1.1 All details in the second part of this message.


*DEBIAN 12 tests*

I did not manage to build an image based on Debian 12. Either it failsduring when make checkis executed (see the [socket] message below) orrdp does not work in the resulting guacd image. Looking at the builderimage of the Dockerfile, I found several core dump files in it. Iattach the Dockerfile I used and the config.log generated during thebuild.

[socket] nested_send_instruction: Assertion failed onsocket/nested_send_instruction.c:105:CU_ASSERT_EQUAL(offset,strlen(expected))


*Analysis of one of the core dump produced during the build stage:*

root@e0a228a4b17f:/tmp# gdb/tmp/guacamole-server/src/libguac/tests/.libs/test_libguaccore-test_libguac.28610.buildkitsandbox.1734366310


GNU gdb (Debian 13.1-3) 13.1

Copyright (C) 2023 Free Software Foundation, Inc.

License GPLv3+: GNU GPL version 3 or later<http://gnu.org/licenses/gpl.html>


This is free software: you are free to change and redistribute it.

There is NO WARRANTY, to the extent permitted by law.

Type "show copying" and "show warranty" for details.

This GDB was configured as "x86_64-linux-gnu".

Type "show configuration" for configuration details.

For bug reporting instructions, please see:

<https://www.gnu.org/software/gdb/bugs/>.

Find the GDB manual and other documentation resources online at:

<http://www.gnu.org/software/gdb/documentation/>.

For help, type "help".

Type "apropos word" to search for commands related to "word"...

Reading symbols from/tmp/guacamole-server/src/libguac/tests/.libs/test_libguac...

(No debugging symbols found in/tmp/guacamole-server/src/libguac/tests/.libs/test_libguac)


[New LWP 28610]

[Thread debugging using libthread_db enabled]

Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".

Core was generated by`/tmp/guacamole-server/src/libguac/tests/.libs/test_libguac'.


Program terminated with signal SIGABRT, Aborted.

#0 __pthread_kill_implementation (threadid=<optimized out>,signo=signo@entry=6, no_tid=no_tid@entry=0) at ./nptl/pthread_kill.c:44


44 ./nptl/pthread_kill.c: No such file or directory.

(gdb) bt

#0 __pthread_kill_implementation (threadid=<optimized out>,signo=signo@entry=6, no_tid=no_tid@entry=0) at ./nptl/pthread_kill.c:44

#1 0x00007f0e1158ff1f in __pthread_kill_internal (signo=6,threadid=<optimized out>) at ./nptl/pthread_kill.c:78

#2 0x00007f0e11540fb2 in __GI_raise (sig=sig@entry=6) at../sysdeps/posix/raise.c:26


#3 0x00007f0e1152b472 in __GI_abort () at ./stdlib/abort.c:79

#4 0x00007f0e116faf87 in PRIV_guac_mem_realloc_or_die () from/tmp/guacamole-server/src/libguac/.libs/libguac.so.24


#5 0x000055f66bf32c70 in test_mem.realloc_or_die_fail_large ()

#6 0x00007f0e1171d927 in ?? () from /lib/x86_64-linux-gnu/libcunit.so.1

#7 0x00007f0e1171db78 in ?? () from /lib/x86_64-linux-gnu/libcunit.so.1

#8 0x00007f0e1171dfb0 in CU_run_all_tests () from/lib/x86_64-linux-gnu/libcunit.so.1


#9 0x000055f66bf396a0 in main ()

(gdb) quit

I am likely missing some packages to build guacd on Debian. Could youtell me what is missing/wrong?


*ALPINE tests*

To run gdb in the Alpine guacd container, I installed gdb,apk-tools-dbg, musl-dbg and openssl1.1-compat-dbg


Core was generated by `/opt/guacamole/sbin/guacd -b 0.0.0.0 -L debug -f'.

Program terminated with signal SIGSEGV, Segmentation fault.

#0 0x00007f87341580e3 in CRYPTO_set_ex_data () from /lib/libcrypto.so.1.1

[Current thread is 1 (LWP 24844)]

(gdb) bt

#0 0x00007f87341580e3 in CRYPTO_set_ex_data () from /lib/libcrypto.so.1.1

#1 0x00007f86d985a26c in transport_default_connect_tls () from/opt/guacamole/lib/libfreerdp3.so.3

#2 0x00007f86d97ed996 in nego_try_connect () from/opt/guacamole/lib/libfreerdp3.so.3

#3 0x00007f86d97efda8 in nego_connect () from/opt/guacamole/lib/libfreerdp3.so.3

#4 0x00007f86d982a899 in rdp_client_connect () from/opt/guacamole/lib/libfreerdp3.so.3

#5 0x00007f86d981683f in freerdp_connect () from/opt/guacamole/lib/libfreerdp3.so.3

#6 0x00007f86d9c281f6 in guac_rdp_handle_connection () from/opt/guacamole/lib/libguac-client-rdp.so

#7 0x00007f86d9c28baa in guac_rdp_client_thread () from/opt/guacamole/lib/libguac-client-rdp.so

#8 0x00007f8734525bc2 in start (p=0x7f86d8125328) atsrc/thread/pthread_create.c:207


#9 0x00007f8734527f30 in __clone () at src/thread/x86_64/clone.s:22

Backtrace stopped: frame did not save the PC

(gdb)

(gdb) bt full

#0 0x00007f87341580e3 in CRYPTO_set_ex_data () from /lib/libcrypto.so.1.1

No symbol table info available.