Vnc to kvm host not working despite succesfull network connection

openstackvnc

I have a centos 6.4 box running openstack grizzly. I have various instances running, yet I can not view their console. Horizon has a built in console viewer called novnc-proxy, which is not working either. For debugging purposes I try to connect to the vnc port directy. I have a network connection, but can not see any output.

The compute host has instances:

$ virsh list
 Id    Name                           State
----------------------------------------------------
  81    instance-0000010d              running
 82    instance-0000010e              running
 84    instance-00000110              running
 85    instance-00000111              running

They have a vnc port open:

 $ virsh vncdisplay 85
:9

The port is listet as open:

$ ss -l |grep -v 127.0.0.1 |grep 590
LISTEN     0      1                       *:5907                     *:*       
LISTEN     0      1                       *:5908                     *:*       
LISTEN     0      1                       *:5909                     *:*

I can connect to that port from outside using telnet:

$ telnet 192.168.10.140 5909
Trying 192.168.10.140...
Connected to 192.168.10.140.
Escape character is '^]'.
RFB 003.008

I can connect to that port with remmina, which then is listet as an established connection:

$ ss |grep 5909
ESTAB      0      0          192.168.10.140:5909        192.168.10.117:52172

Still I don't see anything. What is going on here?

Best Answer

You can run this short script I wrote, I use it when deploying many servers:

#!/bin/bash
yum install pixman pixman-devel libXfont tigervnc-server.x86_64 -y
cat <<EOF > /etc/sysconfig/vncservers
VNCSERVERS="6:root"
VNCSERVERARGS[6]="-geometry 1152x864"
EOF
chkconfig vncserver on
/usr/bin/vncpasswd
/etc/init.d/vncserver start

During the script run you will be asked to set the VNC password and when it finishes you'll be able to connect to the server like so: #vncviewer hostname:5906

Related Solutions

Ssh – Cannot connect to Openstack Instance via horizon, but SSH works

I think your URL reference should be your public IP.

novncproxy_base_url=http://:6080/vnc_auto.html

xvpvncproxy_base_url=http://:6081/console

Try that.

Nginx – OpenStack Horizon behind reverse proxy (nginx preferred)

I was able to solve the first issue as well. The reason for this odd behavior was caused because the reverse proxy dropped the query part of the request (everything behind the ?). This again was caused by misconfigured proxy_pass lines.

The solution to this was to remove /$uri from both proxy_pass lines in the configuration file (details see http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_pass ).

This is a working solution:

ssl_certificate /etc/nginx/certs/gateway.example.com.crt;  
ssl_certificate_key /etc/nginx/certs/gateway.example.com.key;  
ssl_dhparam /etc/nginx/certs/dh.pem;  
ssl_protocols TLSv1.2 TLSv1.1;  
ssl_ciphers AES256+EECDH:AES128+EECDH:!aNULL:!eNULL:!ECDSA:!SHA:!DSS;  
ssl_prefer_server_ciphers on;  
ssl_session_cache shared:SSL:10m;  
ssl_session_timeout 10m;  

server { # http  
  server_name gateway.example.com localhost 1.2.3.4;  
  listen *:80;  
  root /usr/share/nginx/html;  

  location / {  
    index index.html;  
  }  

  location ~ ^/dashboard {  
    return 302 `https://$host$request_uri`;  
  }  

  location ~ ^/console {  
    return 302 `https://$host:6080$request_uri`;  
  }  

  location ~ ^/websockify {  
    return 302 `https://$host:6080$request_uri`;  
  }  
}  

server { # https  
  server_name gateway.example.com localhost 1.2.3.4;  
  listen *:443;  
  ssl on;  

  location / {  
    sub_filter '`http://10.24.7.9`' '`https://$host`';  
    sub_filter '`http://$host`' '`https://$host`';  
    sub_filter_last_modified on;  
    sub_filter_once off;  
    sub_filter_types *;  
    proxy_pass `http://10.24.7.9`;  
    proxy_request_buffering off;  
    proxy_http_version 1.1;  
    proxy_set_header Upgrade $http_upgrade;  
    proxy_set_header Connection "upgrade";  
    proxy_set_header Host $host;  
    proxy_set_header Origin `http://$host`;  
    proxy_set_header Accept-Encoding "";  
    proxy_set_header X-Real-IP $remote_addr;  
    proxy_set_header X-Forwarded-Host $host;  
    proxy_set_header X-Forwarded-Server $host;  
    proxy_set_header X-Forwarded-Proto $scheme;  
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;  
    proxy_connect_timeout 90;  
    proxy_send_timeout 90;  
    proxy_read_timeout 90;  
  }  
}  

server { # https on port 6080 for novnc  
  server_name gateway.example.com localhost 1.2.3.4;  
  listen *:6080;  
  ssl on;  

  location / {  
  proxy_pass `http://10.24.7.9:6080`;  
  proxy_request_buffering off;  
  proxy_http_version 1.1;  
  proxy_set_header Upgrade $http_upgrade;  
  proxy_set_header Connection "upgrade";  
  proxy_set_header Host $host;  
  proxy_set_header Origin `http://$host`;  
  proxy_set_header X-Real-IP $remote_addr;  
  proxy_set_header X-Forwarded-Host $host;  
  proxy_set_header X-Forwarded-Server $host;  
  proxy_set_header X-Forwarded-Proto $scheme;  
  proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;  
  # proxy_connect_timeout 90;  
  # proxy_send_timeout 90;  
  # proxy_read_timeout 90;  
  }  
}

Related Topic