Re: [Engine-devel] Adding VNC support
Hi,
On 07/31/2012 08:18 AM, Itamar Heim wrote:
5.2 novnc websocket server - i see three options
5.2.1 extend qemu to do this, so novnc can connect to it directly like
we do today for vnc/spice
5.2.2 use the python based one from:
https://bugzilla.redhat.com/show_bug.cgi?id=822187
5.2.3 look at a java based websocket solution, assuming easier to
deploy it as part of webadmin/user portal war than another service
(requires a bit of research)
looking forward user portal and webadmin would be deployed on multiple
hosts, so a websockets would need to be deployed next to them.
from the little i looked at, the various websocket implementations are
mostly nascent and are not scaleable/robust/etc.
I'd love to be proven wrong, and worth playing with them a bit to
measure that.
For a commercial management product we used the following BSD licensed
websocket proxy written in C as a base:
https://github.com/kumina/wsproxy
Need to use it in combination with stunnel to get SSL.
Did modify it a bit. E.g. in our software we do not use URLs in the form
of ws://host:41337/1234 but
wss://host:41337/249c345e-db0c-11e1-8013-2ce7130dcd93 where the uuid
serves as a session id for authentication.
Works ok.
One thing I did notice is that you must use a proper SSL certificate
issued by a CA for the proxy, even during testing.
Browsers tend to fail the websockets connection instead of offering a
dialog to override if that is not the case.
Yours sincerely,
Floris Bos