You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by "Rao, Amit" <Am...@verint.com.INVALID> on 2022/05/17 04:53:40 UTC
question:guacamole connection slow over https but not on http
Hi ,
I have configured Guacamole in AWS ECS using fargate which has following architecture .
My issue is when I rdp to any server on 443 https then connection takes extra 5 second to load but when I use http connection is almost immediate .
My nginx conf is below . can you please help what am I missing ?
server {
listen 80;
listen [::]:80;
server_name dockerconnect.dev.verint.training ;
#access_log /var/log/nginx/host.access.log main;
location /request {
proxy_pass http://request:3001/;
proxy_buffering off;
proxy_http_version 1.1;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection;
proxy_set_header X-Real-IP $remote_addr;
proxy_cookie_path /guacamole/ /guacamole/;
access_log off;
}
location /status {
proxy_pass http://status:3002/;
proxy_buffering off;
proxy_http_version 1.1;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection;
proxy_set_header X-Real-IP $remote_addr;
proxy_cookie_path /guacamole/ /guacamole/;
access_log off;
}
location /timer {
proxy_pass http://timer:3005/;
proxy_buffering off;
proxy_http_version 1.1;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection;
proxy_cookie_path /guacamole/ /guacamole/;
access_log off;
}
location /expired {
proxy_pass http://timer:3005/expired;
proxy_buffering off;
proxy_http_version 1.1;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection;
proxy_cookie_path /guacamole/ /guacamole/;
access_log off;
}
location /links {
proxy_pass http://links:3008/links;
proxy_buffering off;
proxy_http_version 1.1;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection;
proxy_cookie_path /guacamole/ /guacamole/;
access_log off;
}
location / {
proxy_pass http://guacamole:8080/guacamole/;
proxy_buffering off;
proxy_http_version 1.1;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection;
proxy_cookie_path /guacamole/ /;
access_log off;
}
#error_page 404 /404.html;
# redirect server error pages to the static page /50x.html
#
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root /usr/share/nginx/html;
}
# proxy the PHP scripts to Apache listening on 127.0.0.1:80
#
#location ~ \.php$ {
# proxy_pass http://127.0.0.1;
#}
# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
#
#location ~ \.php$ {
# root html;
# fastcgi_pass 127.0.0.1:9000;
# fastcgi_index index.php;
# fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name;
# include fastcgi_params;
#}
# deny access to .htaccess files, if Apache's document root
# concurs with nginx's one
#
#location ~ /\.ht {
# deny all;
#}
}
[cid:image001.png@01D869D6.562012D0]
Thanks and Regards
Amit Rao
This electronic message may contain proprietary and confidential information of Verint Systems Inc., its affiliates and/or subsidiaries. The information is intended to be for the use of the individual(s) or entity(ies) named above. If you are not the intended recipient (or authorized to receive this e-mail for the intended recipient), you may not use, copy, disclose or distribute to anyone this message or any information contained in this message. If you have received this electronic message in error, please notify us by replying to this e-mail.
RE: question:guacamole connection slow over https but not on http
Posted by "Rao, Amit" <Am...@verint.com.INVALID>.
Thanks Mike, you for reply , but I was able to increase performance by using application load balancer over https .
Thanks and Regards
Amit Rao
From: Michael Jumper <mj...@apache.org>
Sent: Tuesday, May 17, 2022 10:49 AM
To: user@guacamole.apache.org
Subject: Re: question:guacamole connection slow over https but not on http
On Mon, May 16, 2022, 21:53 Rao, Amit <Am...@verint.com.invalid>> wrote:
Hi ,
I have configured Guacamole in AWS ECS using fargate which has following architecture .
My issue is when I rdp to any server on 443 https then connection takes extra 5 second to load but when I use http connection is almost immediate .
My nginx conf is below . can you please help what am I missing ?
Perhaps the host system is rapidly running out of entropy? It's common for virtualized systems to have a hard time generating enough entropy for the secure random number generation required for cryptography.
- Mike
This electronic message may contain proprietary and confidential information of Verint Systems Inc., its affiliates and/or subsidiaries. The information is intended to be for the use of the individual(s) or entity(ies) named above. If you are not the intended recipient (or authorized to receive this e-mail for the intended recipient), you may not use, copy, disclose or distribute to anyone this message or any information contained in this message. If you have received this electronic message in error, please notify us by replying to this e-mail.
Re: question:guacamole connection slow over https but not on http
Posted by Michael Jumper <mj...@apache.org>.
On Mon, May 16, 2022, 21:53 Rao, Amit <Am...@verint.com.invalid> wrote:
> Hi ,
>
>
>
> I have configured Guacamole in AWS ECS using fargate which has following
> architecture .
>
> My issue is when I rdp to any server on 443 https then connection takes
> extra 5 second to load but when I use http connection is almost immediate .
>
>
>
> My nginx conf is below . can you please help what am I missing ?
>
Perhaps the host system is rapidly running out of entropy? It's common for
virtualized systems to have a hard time generating enough entropy for the
secure random number generation required for cryptography.
- Mike