RE: RE: Re: Re: Guacamole RDP connection establishing timeout

["Dyck, Martin (BITBW)" <Ma...@bitbw.bwl.de>]

Hi,



just a friendly reminder that this problem is still relevant for us. If you have time to continue working here (https://github.com/apache/guacamole-server/pull/413), we would be very pleased.

Thank you very much.



-Martin





On 2023/02/16 15:14:51 "Dyck, Martin (BITBW)" wrote:

> Sounds great.

>

>

>

> After some tcpdumping the decisive paramenter should be TcpAckTimeout. Because:

>

> I saw that after 5 seconds Guacamole sends a TCP keep alive, but after 9 seconds Guacamole sends a FIN to end the RDP connection attempt.

>

> But as soon as the RDP connection is approved by an employee within the 9 sec, the SPS sends an ACK and the RDP session starts well.

>

>

>

> - Martin

>

>

>

>

>

> On 2023/02/16 12:21:16 Nick Couchman wrote:

>

> >

>

> [cid:audit_bf_rz_21_DE_RGB_65712845-2146-4396-8f42-bcd2b1e8317e11.jpg]

>

>

[cid:audit_bf_rz_21_DE_RGB_65712845-2146-4396-8f42-bcd2b1e8317e11.jpg]

On Thu, Feb 16, 2023 at 2:07 AM Dyck, Martin (BITBW)

>

> > <Ma...@bitbw.bwl.de>>> wrote:

>

> > >

>

> > > Hi Nick,

>

> > >

>

> > >

>

> > >

>

> > > thank you very much for the quick reply. That sounds promising.

>

> > >

>

> > > I have seen your pull request #413. So can we expect in the next guacamole release a way to modify the TcpAckTimeout? That would be gorgeous!

>

> > >

>

> >

>

> > Yeah, your e-mail prompted me to go re-visit that Jira issue

>

> > (https://issues.apache.org/jira/browse/GUACAMOLE-600) and see if I

>

> > could make some progress on it. RDP was pretty easy to knock out -

>

> > assuming it actually works, we'll see - and I'll work through SSH and

>

> > Telnet, as well. VNC I'm not sure about at the moment.

>

> >

>

> > Another thing to note is that the source code for FreeRDP on Github

>

> > actually contains two parameters - TcpAckTimeout and

>

> > TcpConnectTimeout. My understanding is that the first one,

>

> > TcpAckTimeout, is the timeout for actually getting an initial

>

> > acknowledgement from the server that it is alive. TcpConnectTimeout is

>

> > likely the timeout between getting the acknowledgement that the server

>

> > is alive and when the connection is considered established. However,

>

> > checking my FreeRDP headers on my EL8 development system,

>

> > TcpConnectTimeout is not present, so I'm guessing this was added much

>

> > more recently. Ultimately we can probably support both, we'll just

>

> > have to check for that support in the FreeRDP library at build time

>

> > and enable it if it exists. All that to say - it isn't clear to me

>

> > which one is actually going to be of use to you.

>

> >

>

> > -Nick

>

> >

>