Changes between Version 30 and Version 31 of ProxyServer

Timestamp:

05/08/18 16:21:46 (4 years ago)

Author:

Antoine Martin

Comment:

--

ProxyServer

@@ -28 +28 @@
 Depending on the [/wiki/Authentication Authentication] module configured, the proxy server can:
 * expose all local xpra sessions after user authentication
-* provide access to a custom list of sessions configured through the "multifile" auth mechanism
+* provide access to a custom list of sessions configured through the {{{sqlite}}} and {{{multifile}}} authentication modules
 * start new sessions on demand (#1319)
 }}}
@@ -36 +36 @@
 (see also [/wiki/DataFlow])
 
+Here is an example architecture using the proxy server to provide access to a number of servers through a single port, also showing where NVENC hardware encoders and TCP proxying (apache, nginx, thttp,..) can all hook into:
 [[Image(Xpra-Proxy.png)]]
 }}}
@@ -44 +45 @@
 '''Beware''': to simplify these instructions, we use the "{{{allow}}}" [/wiki/Authentication authentication module], which does '''no''' checking whatsoever!
 
-To start the proxy server, simply run:
+* start a session on display {{{:100}}} with an {{{xterm}}}, this session is not exposed via tcp (there is no {{{bind-tcp}}} option):
+{{{
+xpra start :100 --start=xterm
+}}}
+* start the proxy server tcp port 8443:
 {{{
 xpra proxy :20 --auth=allow --bind-tcp=0.0.0.0:8443
 }}}
-
-If only one session is accessible, users can connect as usual with:
+* if only one session is accessible for this user, you can connect via the proxy with:
 {{{
-xpra attach tcp:USERNAME:PASSWORD@PROXYHOST:8443
+xpra attach tcp://:foo@PROXYHOST:8443/
 }}}
 
-If there is more than one session accessible for this user, the client also needs to specify which display it wishes to connect to using the extended attach syntax: "{{{tcp/USERNAME:PASSWORD@SERVER:PORT/DISPLAY}}}":
+If there is more than one existing session accessible for this user, the client also needs to specify which display it wishes to connect to using the extended attach syntax: "{{{tcp/USERNAME:PASSWORD@SERVER:PORT/DISPLAY}}}":
 {{{
-xpra attach tcp/username:password@127.0.0.1:8443/100
+xpra attach tcp://:foo@127.0.0.1:8443/100
 }}}
 [[BR]]
 
 Notes:
+* this example uses tcp, but the proxy works equally well with all other transports ({{{ssl}}}, {{{wss}}} etc)
 * if you run this command as root, all the user sessions will be exposed!
 * if you run it a normal user, only this user's session will be exposed