Re: How to allow "WebSocket | HTTP tunnel request" with IPv6?

[Willy Manga]

Hi Alves,

On 19/04/2022 15:32, Henri Alves de Godoy wrote:

Hi Willy,

Assuming that your server where the tomcat/guacd daemon is is dual-stack
and your internal environment is IPv6-only

What if I want to avoid any IPv4 config ..

Here's what I want


+------------------+
| Network of hosts |
| using IPv6-only  |
+------------------+
        |
        |
        | (IPv6)
        |
+-----------------+
|Guacamole/Tomcat |
+-----------------+
        |
        |
        | (IPv6)
        |
+-----------------+
|      Nginx      |
+-----------------+
        |
        |
(IPv4)  | (IPv6)
        |
+-----------------+
|   Internet      |
+-----------------+

In the host configuration, put the IPv6 of the remote machine you want to
access.

I don't have any issue accessing v6 hosts provided by guacamole.

You can also change in guacd to bind the v6 address of localhost ::1

I had to tell guacd to bind to 127.0.0.1 :(

Otherwise I got this









--
Willy Manga
@ongolaboy
https://ongola.blogspot.com/

Here is my issue. By default, when you build from scratch guacamole 1.4 on debian 11, it will listen to ::1 . That setup will not work unless I missed something. Apr 21 10:29:12 guac2 tomcat9[1811]: 10:29:12.870 [http-nio-8080-exec-6] INFO o.a.g.r.auth.AuthenticationService - User "gogo" successfully authenticated from 2001:db8:43:cafe::1. Apr 21 10:29:14 guac2 tomcat9[1811]: 10:29:14.423 [http-nio-8080-exec-9] ERROR o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to guacd failed: java.net.ConnectException: Connection refused (Connection refused) Apr 21 10:29:15 guac2 tomcat9[1811]: 10:29:15.369 [http-nio-8080-exec-1] ERROR o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request failed: java.net.ConnectException: Connection refused (Connection refused)

OpenPGP_signature
Description: OpenPGP digital signature