[Engine-devel] Adding VNC support

[Floris Bos / Maxnet]

Hi,

On 07/31/2012 08:18 AM, Itamar Heim wrote:
> 5.2 novnc websocket server - i see three options
>
> 5.2.1 extend qemu to do this, so novnc can connect to it directly like 
> we do today for vnc/spice
>
> 5.2.2 use the python based one from:
> https://bugzilla.redhat.com/show_bug.cgi?id=822187
>
> 5.2.3 look at a java based websocket solution, assuming easier to 
> deploy it as part of webadmin/user portal war than another service 
> (requires a bit of research)
> looking forward user portal and webadmin would be deployed on multiple 
> hosts, so a websockets would need to be deployed next to them.
>
> from the little i looked at, the various websocket implementations are 
> mostly nascent and are not scaleable/robust/etc.
> I'd love to be proven wrong, and worth playing with them a bit to 
> measure that. 

For a commercial management product we used the following BSD licensed 
websocket proxy written in C as a base:

https://github.com/kumina/wsproxy

Need to use it in combination with stunnel to get SSL.
Did modify it a bit. E.g. in our software we do not use URLs in the form 
of ws://host:41337/1234  but 
wss://host:41337/249c345e-db0c-11e1-8013-2ce7130dcd93  where the uuid 
serves as a session id for authentication.



Works ok.

One thing I did notice is that you must use a proper SSL certificate 
issued by a CA for the proxy, even during testing.
Browsers tend to fail the websockets connection instead of offering a 
dialog to override if that is not the case.


Yours sincerely,

Floris Bos