You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by Stefan Bogdan Cimpeanu <bo...@cimpeanu.org> on 2022/06/14 19:07:35 UTC
Weird behaviour - RDP timeout
Hello all,
I have this interesting behaviour,, that I can’t fully understand, maybe someone can help out please.
I have Guacamole deployed in several Azure locations in Europe.
I have servers again in Azure deployed in most of the regions.
If I, from Europe, want to access via Guacamole, a server in Australia, it all works ok.
If someone from Australia wants to access a server from Australia, via an European Guacamole, they get a connection timeout:
I understand round trips etc, but I really don’t see why would Guacamole “care” where the user comes from. As long as Guacamole can access the target server, I should get a connection, right?
Slow, but it should be there.
Can anyone help figure this out?
Regards,
Bogdan
Re: Weird behaviour - RDP timeout
Posted by Lee Doughty <le...@virginiacyberrange.org>.
I agree with Nick here...
My coworker had a task to evaluate performance from Australia to our
guacamole in Northern Virginia. Despite using a VPN to jump to Australia
before circling back (VA-> Australia->VA), the latency he observed was in
the ~1-2 second range. Even if satellites are involved, I can't see a round
trip time over 4 seconds being possible without an underlying problem.
In my experience, guacamole has rarely been the failure point if anyone
else can access the same connection. It almost always is a problem on the
users side... Either network, plug-in/extension, security software, or ISP
problem.
-Lee
On Wed, Jun 22, 2022, 12:21 PM Nick Couchman <vn...@apache.org> wrote:
> On Tue, Jun 14, 2022 at 3:17 PM Stefan Bogdan Cimpeanu <
> bogdan@cimpeanu.org> wrote:
>
>> Hi Antony,
>> I agree it could be that, however, it does not explain (in my mind) why
>> would the Guacamole server behave differently when the user is from Europe
>> or from Australia if the target is still in Australia.
>> Is there any special connection happening from the end user all the way
>> to the target somehow?
>>
>> Additionally, can that 15 seconds timeout be increased somehow?
>>
>>
> At this point I do not believe the 15 second time limit can be increased,
> but I'd also be surprised if it's actually taking 15 seconds to connect to
> the server, even if it's going Australia -> Europe -> Australia. I run a
> Guacamole instance in Ashburn, Virginia, and access servers in Singapore
> and Australia from that instance, and I don't see intermittent or
> consistent issues with that.
>
> When you hit the failure, check the guacd logs, and possibly start guacd
> in debug mode, and see what the error is. Is it really timing out, or is it
> throwing some other error? Is there an Azure firewall, ACL, or network
> route in place that could be stopping or disrupting traffic from the
> Guacamole server to the target server?
>
> -Nick
>
Re: Weird behaviour - RDP timeout
Posted by Nick Couchman <vn...@apache.org>.
On Tue, Jun 14, 2022 at 3:17 PM Stefan Bogdan Cimpeanu <bo...@cimpeanu.org>
wrote:
> Hi Antony,
> I agree it could be that, however, it does not explain (in my mind) why
> would the Guacamole server behave differently when the user is from Europe
> or from Australia if the target is still in Australia.
> Is there any special connection happening from the end user all the way to
> the target somehow?
>
> Additionally, can that 15 seconds timeout be increased somehow?
>
>
At this point I do not believe the 15 second time limit can be increased,
but I'd also be surprised if it's actually taking 15 seconds to connect to
the server, even if it's going Australia -> Europe -> Australia. I run a
Guacamole instance in Ashburn, Virginia, and access servers in Singapore
and Australia from that instance, and I don't see intermittent or
consistent issues with that.
When you hit the failure, check the guacd logs, and possibly start guacd in
debug mode, and see what the error is. Is it really timing out, or is it
throwing some other error? Is there an Azure firewall, ACL, or network
route in place that could be stopping or disrupting traffic from the
Guacamole server to the target server?
-Nick
RE: Weird behaviour - RDP timeout
Posted by Sean Hulbert <sh...@securitycentric.net.INVALID>.
Verify your NTP time is set to UTC verses standard time and date.
Thank You
Sean Hulbert
Founder / CEO
Work Ph: 925.292.4309
<http://www.securitycentric.net/> www.securitycentric.net
A Cybersecurity Enablement Company
We don't just run you through the motions, Our labs teach you how to think!
System Award Management
CAGE: 8AUV4
AFCEA San Francisco Chapter V.P.
If you have heard of a hacker by name, he/she has failed, fear the hacker you haven’t heard of!
CONFIDENTIALITY NOTICE: This communication with its contents may contain confidential and/or legally privileged information. It is solely for the use of the intended recipient(s). Unauthorized interception, review, use or disclosure is prohibited and may violate applicable laws including the Electronic Communications Privacy Act. If you are not the intended recipient, please contact the sender and destroy all copies of the communication. Content within this email communication is not legally binding as a contract and no promises are guaranteed unless in a formal contract outside this email communication.
igitur qui desiderat pacem, praeparet bellum!!!
Epitoma Rei Militaris
From: Stefan Bogdan Cimpeanu [mailto:bogdan@cimpeanu.org]
Sent: Tuesday, June 14, 2022 12:18 PM
To: user@guacamole.apache.org
Subject: Re: Weird behaviour - RDP timeout
Hi Antony,
I agree it could be that, however, it does not explain (in my mind) why would the Guacamole server behave differently when the user is from Europe or from Australia if the target is still in Australia.
Is there any special connection happening from the end user all the way to the target somehow?
Additionally, can that 15 seconds timeout be increased somehow?
Bogdan
On 14 Jun 2022, at 22:10, Antony Awaida <antony@apporto.com <ma...@apporto.com> > wrote:
HI There:
It may be a problem with the network latency. Have your user in Australia check his latency to Europe/Azure using this:
https://www.azurespeed.com/Azure/Latency
Cheers,
Antony Awaida
CEO
www.apporto.com <http://www.apporto.com/>
2 min intro video Apporto for Business:
Apporto for Business — Introduction - YouTube <https://www.youtube.com/watch?v=lyncxPtgncQ>
2 min intro video Apporto for Education:
https://www.youtube.com/watch?v=dUBk_cF3tY8
On Tue, Jun 14, 2022 at 12:07 PM Stefan Bogdan Cimpeanu <bogdan@cimpeanu.org <ma...@cimpeanu.org> > wrote:
Hello all,
I have this interesting behaviour,, that I can’t fully understand, maybe someone can help out please.
I have Guacamole deployed in several Azure locations in Europe.
I have servers again in Azure deployed in most of the regions.
If I, from Europe, want to access via Guacamole, a server in Australia, it all works ok.
If someone from Australia wants to access a server from Australia, via an European Guacamole, they get a connection timeout:
<Screenshot 2022-06-14 at 22.06.08.png>
I understand round trips etc, but I really don’t see why would Guacamole “care” where the user comes from. As long as Guacamole can access the target server, I should get a connection, right?
Slow, but it should be there.
Can anyone help figure this out?
Regards,
Bogdan
Re: Weird behaviour - RDP timeout
Posted by Stefan Bogdan Cimpeanu <bo...@cimpeanu.org>.
Hi Antony,
I agree it could be that, however, it does not explain (in my mind) why would the Guacamole server behave differently when the user is from Europe or from Australia if the target is still in Australia.
Is there any special connection happening from the end user all the way to the target somehow?
Additionally, can that 15 seconds timeout be increased somehow?
Bogdan
> On 14 Jun 2022, at 22:10, Antony Awaida <an...@apporto.com> wrote:
>
> HI There:
>
> It may be a problem with the network latency. Have your user in Australia check his latency to Europe/Azure using this:
>
> https://www.azurespeed.com/Azure/Latency <https://www.azurespeed.com/Azure/Latency>
>
> Cheers,
> Antony Awaida
> CEO
> www.apporto.com <http://www.apporto.com/>
>
> 2 min intro video Apporto for Business:
> Apporto for Business — Introduction - YouTube <https://www.youtube.com/watch?v=lyncxPtgncQ>
>
> 2 min intro video Apporto for Education:
> https://www.youtube.com/watch?v=dUBk_cF3tY8 <https://www.youtube.com/watch?v=dUBk_cF3tY8>
>
>
>
>
> On Tue, Jun 14, 2022 at 12:07 PM Stefan Bogdan Cimpeanu <bogdan@cimpeanu.org <ma...@cimpeanu.org>> wrote:
> Hello all,
> I have this interesting behaviour,, that I can’t fully understand, maybe someone can help out please.
>
> I have Guacamole deployed in several Azure locations in Europe.
> I have servers again in Azure deployed in most of the regions.
>
> If I, from Europe, want to access via Guacamole, a server in Australia, it all works ok.
> If someone from Australia wants to access a server from Australia, via an European Guacamole, they get a connection timeout:
>
> <Screenshot 2022-06-14 at 22.06.08.png>
>
> I understand round trips etc, but I really don’t see why would Guacamole “care” where the user comes from. As long as Guacamole can access the target server, I should get a connection, right?
> Slow, but it should be there.
>
> Can anyone help figure this out?
>
> Regards,
> Bogdan
Re: Weird behaviour - RDP timeout
Posted by Antony Awaida <an...@apporto.com>.
HI There:
It may be a problem with the network latency. Have your user in Australia
check his latency to Europe/Azure using this:
https://www.azurespeed.com/Azure/Latency
Cheers,
Antony Awaida
CEO
www.apporto.com
2 min intro video Apporto for Business:
Apporto for Business — Introduction - YouTube
<https://www.youtube.com/watch?v=lyncxPtgncQ>
2 min intro video Apporto for Education:
https://www.youtube.com/watch?v=dUBk_cF3tY8
On Tue, Jun 14, 2022 at 12:07 PM Stefan Bogdan Cimpeanu <bo...@cimpeanu.org>
wrote:
> Hello all,
> I have this interesting behaviour,, that I can’t fully understand, maybe
> someone can help out please.
>
> I have Guacamole deployed in several Azure locations in Europe.
> I have servers again in Azure deployed in most of the regions.
>
> If I, from Europe, want to access via Guacamole, a server in Australia, it
> all works ok.
> If someone from Australia wants to access a server from Australia, via an
> European Guacamole, they get a connection timeout:
>
>
> I understand round trips etc, but I really don’t see why would Guacamole
> “care” where the user comes from. As long as Guacamole can access the
> target server, I should get a connection, right?
> Slow, but it should be there.
>
> Can anyone help figure this out?
>
> Regards,
> Bogdan
>