Changes between Version 30 and Version 31 of ProxyServer
- Timestamp:
- 05/08/18 16:21:46 (4 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
ProxyServer
v30 v31 28 28 Depending on the [/wiki/Authentication Authentication] module configured, the proxy server can: 29 29 * expose all local xpra sessions after user authentication 30 * provide access to a custom list of sessions configured through the "multifile" auth mechanism30 * provide access to a custom list of sessions configured through the {{{sqlite}}} and {{{multifile}}} authentication modules 31 31 * start new sessions on demand (#1319) 32 32 }}} … … 36 36 (see also [/wiki/DataFlow]) 37 37 38 Here is an example architecture using the proxy server to provide access to a number of servers through a single port, also showing where NVENC hardware encoders and TCP proxying (apache, nginx, thttp,..) can all hook into: 38 39 [[Image(Xpra-Proxy.png)]] 39 40 }}} … … 44 45 '''Beware''': to simplify these instructions, we use the "{{{allow}}}" [/wiki/Authentication authentication module], which does '''no''' checking whatsoever! 45 46 46 To start the proxy server, simply run: 47 * start a session on display {{{:100}}} with an {{{xterm}}}, this session is not exposed via tcp (there is no {{{bind-tcp}}} option): 48 {{{ 49 xpra start :100 --start=xterm 50 }}} 51 * start the proxy server tcp port 8443: 47 52 {{{ 48 53 xpra proxy :20 --auth=allow --bind-tcp=0.0.0.0:8443 49 54 }}} 50 51 If only one session is accessible, users can connect as usual with: 55 * if only one session is accessible for this user, you can connect via the proxy with: 52 56 {{{ 53 xpra attach tcp: USERNAME:PASSWORD@PROXYHOST:844357 xpra attach tcp://:foo@PROXYHOST:8443/ 54 58 }}} 55 59 56 If there is more than one session accessible for this user, the client also needs to specify which display it wishes to connect to using the extended attach syntax: "{{{tcp/USERNAME:PASSWORD@SERVER:PORT/DISPLAY}}}":60 If there is more than one existing session accessible for this user, the client also needs to specify which display it wishes to connect to using the extended attach syntax: "{{{tcp/USERNAME:PASSWORD@SERVER:PORT/DISPLAY}}}": 57 61 {{{ 58 xpra attach tcp /username:password@127.0.0.1:8443/10062 xpra attach tcp://:foo@127.0.0.1:8443/100 59 63 }}} 60 64 [[BR]] 61 65 62 66 Notes: 67 * this example uses tcp, but the proxy works equally well with all other transports ({{{ssl}}}, {{{wss}}} etc) 63 68 * if you run this command as root, all the user sessions will be exposed! 64 69 * if you run it a normal user, only this user's session will be exposed