Hi, On 07/31/2012 08:18 AM, Itamar Heim wrote:
5.2 novnc websocket server - i see three options
5.2.1 extend qemu to do this, so novnc can connect to it directly like we do today for vnc/spice
5.2.2 use the python based one from: https://bugzilla.redhat.com/show_bug.cgi?id=822187
5.2.3 look at a java based websocket solution, assuming easier to deploy it as part of webadmin/user portal war than another service (requires a bit of research) looking forward user portal and webadmin would be deployed on multiple hosts, so a websockets would need to be deployed next to them.
from the little i looked at, the various websocket implementations are mostly nascent and are not scaleable/robust/etc. I'd love to be proven wrong, and worth playing with them a bit to measure that.
For a commercial management product we used the following BSD licensed websocket proxy written in C as a base: https://github.com/kumina/wsproxy Need to use it in combination with stunnel to get SSL. Did modify it a bit. E.g. in our software we do not use URLs in the form of ws://host:41337/1234 but wss://host:41337/249c345e-db0c-11e1-8013-2ce7130dcd93 where the uuid serves as a session id for authentication. Works ok. One thing I did notice is that you must use a proper SSL certificate issued by a CA for the proxy, even during testing. Browsers tend to fail the websockets connection instead of offering a dialog to override if that is not the case. Yours sincerely, Floris Bos