xpra icon
Bug tracker and wiki

Changes between Version 24 and Version 25 of Network


Ignore:
Timestamp:
08/29/17 15:20:31 (3 weeks ago)
Author:
Antoine Martin
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • Network

    v24 v25  
    1717== Types of connections ==
    1818Xpra supports many different types of connections:
    19 * '''unix domain socket''' connections using the {{{bind}}} option. From the same machine only - potentially as a different user. This is obviously restricted to Unix like systems. When using this type of direct connection locally, you should also be using "{{{mmap}}}" for maximum speed (which should be enabled by default). For connecting to a different user, you may need to use the "{{{socket-dir}}}" option to place the socket in a public location, and maybe also "{{{mmap-group}}}" to make the socket accessible to other users.
     19* '''unix domain socket''' connections using the {{{bind}}} option. From the same machine only, or via SSH (see below) - potentially as a different user. This is obviously restricted to Unix like systems. When using this type of direct connection locally, you should also be using "{{{mmap}}}" for maximum performance (which should be enabled by default). For connecting to a different user, you may need to use the "{{{socket-dir}}}" option to place the socket in a public location, and maybe also "{{{mmap-group}}}" to make the socket accessible to other users.
    2020 When starting a server, a socket is automatically created for it by default.
    2121* '''named-pipes''': MS Windows only (#1150)
    2222* '''VSOCK''' using the {{{bind-vsock}}} option, for host - guest virtual machines connections, see #983
    23 * '''TCP''' connections using the "{{{bind-tcp}}}" option. May be specified more than once to bind to multiple ports or IPs, supports {{{IPv6}}}. These can be secured with [/wiki/Authentication authentication modules], in which case you probably want to enable [/wiki/Encryption encryption] too to prevent some MITM attacks.
     23* '''TCP''' connections using the "{{{bind-tcp}}}" option
     24* '''UDP''' connections using the "{{{bind-udp}}}" option
    2425* '''SSL''' connections using the "{{{bind-ssl}}}" option, or TCP sockets with the {{{ssl=on}}} option.
     26* '''websocket''' connections using the "{{{bind-ws}}} option
     27* secure '''websocket''' connections using the "{{{bind-wss}}} option
    2528* '''SSH''' connections: this type of connection uses a SSH as transport to connect to the unix domain socket. (forwarded using the hidden xpra sub-command "_proxy").
    2629 On Unix-like systems you may need an "{{{SSH_ASKPASS}}}" utility to be able to enter your password or passphrase.
     30
     31Notes:
     32* each bind option can be secured with [/wiki/Authentication authentication modules], in which case you probably want to enable [/wiki/Encryption encryption] too to prevent some MITM attacks.
     33* the {{{bind-XXX}}} option may be specified more than once to bind to multiple  locations, ie: multiple ports or IP addresses ({{{IPv6}}} is supported).
    2734}}}
    2835