Type of viewers¶
We can differentiate two main types of viewers depending on the place from where we access:
Viewers integrated in the browser: the viewer is integrated into a web page, from a browser tab we can manage a windows or a linux. The decoding of the video signal and the sending of the mouse and keyboard signal is done from a browser tab.
- You do not need to have a client installed, it works from any device (computers, tablets, mobile phones) and operating system that has a browser.
- Decoding is not as efficient as in a dedicated viewer, noticeable slower on desktop refresh and when moving items around the desktop.
- We cannot redirect to the virtual desktop local devices connected by usb such as a pendrive, a webcam...
Desktop client applications: these are applications dedicated to acting as viewers, they are optimized and are the best option to have the best user experience
- Optimized for desktop client protocols, better performance than in-browser viewers. If there are no network problems (adequate latency and bandwidth) the feeling of working with the desktop is similar to that of a real desktop.
- Although it depends on the type of protocol and the version of the client, in general they offer advanced options such as: redirection of USB ports, copy and paste from the virtual desktop to the real desktop, upload files through the viewer to the virtual desktop...
- Not in all cases do they come pre-installed with the operating system, so it is necessary to carry out an installation on the operating system of the computer from which we connect.
- Advanced features not available depending on client versions and protocol version
Protocols and viewers available in Isard¶
SPICE: is a communication protocol for virtual environments. It allows us to access the video signal, mouse and keyboard of the desktop as if we were connected to the screen, mouse and keyboard of a real computer.
- It is the virtual machine engine that Isard uses (Qemu-KVM) that gives us access regardless of the operating system that is running.
- We can use this protocol to see the entire desktop boot sequence, install operating systems...
- We do not need to install any components in the virtual desktop operating system to be able to interact with it.
- It is a protocol that optimizes the video bandwidth used by compressing the signal and sending only the areas that vary from one frame to another.
- The client is not installed by default on any operating system, the installation is very simple and can be done by any user, but in corporate or educational environments permission restrictions may make it difficult to install.
- The installation in windows requires an extra program to be able to redirect the USB ports
- The connection is made through an HTTP proxy using a "CONNECT" method. This method, in some cases, is filtered by some intermediate firewall or proxy.
VNC: is a protocol that works at the same level as SPICE but since it is older, the video signal is not as optimized. It is the protocol that we use in the client integrated in the browser
RDP: is the protocol used by default to connect remotely to a windows operating system. It needs us to allow remote access in the operating system. It is not available from desktop boot and you have to wait for the desktop boot sequence to get an IP address. The main advantage is that it offers the best smooth experience for a windows desktop, using the current native RDP windows client. It is the recommended protocol also when used in conjunction with Nvidia vGPU cards.
- The best user experience if the operating system of the virtual desktop is windows and the computer from which the client connects is also windows
- In windows clients it is not necessary to install additional software, since the remote desktop client comes by default in all windows
- It is necessary for a good user experience using Nvidia vGPUs on windows operating systems.
- If there is a problem when starting the operating system, you do not access the screen signal (you solve it by connecting through spice or vnc)
Ports and proxies¶
Isard has made a significant effort to avoid having to open extra ports and encapsulate connections in HTTP proxies. It is about adapting to any situation where there is a firewall that can make it difficult to connect. By default the ports are used:
- TCP/80 for the proxy where the SPICE protocol connections are encapsulated
- TCP/443 for web and browser-embedded viewers
- TCP/9999 for the proxy through which the RDP protocol connections are encapsulated
Browser-embedded VNC viewer¶
To be able to see a desktop directly from the browser, select the option
It is necessary to take into account if the browser is blocked from opening pop-up windows
In Firefox: A message about popups will appear
Press the button
And it will open the desktop in a new browser tab
Viewer for the SPICE protocol¶
It is recommended to use version 7 of Spice.
To be able to use the Spice viewer download the viewer client:
Spice client app¶
Spice client app¶
- Debian/Ubuntu based distros:
sudo apt install virt-viewer -y
- RedHat/CentOS/Fedora based distros:
sudo dnf install remote-viewer -y
Once installed, when booting a desktop you can select the "Spice Viewer" option from the drop down menu
And a dialog box will appear so you can open the Spice file
Once opened, a window will appear with the desktop
For the RDP client to connect It is necessary to have the Wireguard network activated on the desktop through which we will connect and have the "Remote Desktop" configured on said desktop
On computers with windows operating system it is not necessary to install any additional software since they have the remote desktop client installed as a widows tool.
RDP client app (Windows)¶
- Usually Windows already have
Remote Desktop Connectioninstalled. If not refer to Remote Desktop clients
On computers with Linux you have to install a client like remmina and on macOS there is an official application, Microsoft Remote Desktop, which can be downloaded from the Apple Store
RDP client app (Linux)¶
- In Linux distros the client app for RDP it is called
Remminaand it can be installed following this guide
As previously mentioned, the RDP viewer needs an IP to connect to, so when a desktop starts we see a blink and the links to the RDP viewers appear as non-selectable:
Once the IP address has been obtained, it is reported and access to viewers is activated:
Selecting the RDP viewer downloads a file with an .rdp extension:
The file isard-rdp-gw.rdp contains the information to be able to connect to the desktop.
It is likely that the first time in windows operating systems it will inform us with a security alert, we can confirm it in the box "Do not ask me again about connections to this computer" and in the future it will not ask us anymore.
Now it asks us for the credentials. It is important to note that this username and password is that of the virtual desktop that is running. In the templates we offer by default:
- user is: isard
- the password is: pirineus
When accessing the desktop, it asks us for confirmation to accept the certificate:
And finally the client opens and we can interact with the desktop.
Download native clients viewers for other distributions¶
For spice client app you can find more information for any OS at spice-space
Spice client app¶
- You can follow this install guide
RDP client app¶
- There is an official application,
Microsoft Remote Desktop, which can be downloaded from the Apple Store
Spice client app¶
RDP client app¶
- Microsoft has it's own Remote Desktop in Play Store
Spice client app¶
- There is a payed version in Apple Store
RDP client app¶
- Microsoft has it's own Remote Desktop in Apple Store
You can activate multiple RDP connections when creating or editing a desktop:
- RDP web (HTML5)
- RDP (native client through IsardVDI proxy at default port tcp/9999)
- RDP vpn (through wireguard vpn)
All this viewers need that the desktop has the
Wireguard VPN interface alongside others.
IsardVDI uses guacamole server that allows HTML5 RDP clients (any actual browser) to connect to IsardVDI windows guests through the default https port. Also it has audio through the browser.
To allow this connection you need to activate RDP in windows and disable network authentication in advanced options in the windows guest.
Disable network authentication
You only need the client (RDP client in Windows or Remmina in Linux) and that the desktop has the
Wireguard interface added.
This connection is done by default throught the tcp/9999 port but you can change it at
isardvdi.cfg if you need to.
You need also the client and the
Wireguard interface added to the desktop.
To connect through wireguard vpn to RDP you'll need to set up your
isard-vpn.conf wireguard client file in your client computer. Refer to in IsardVDI.
Plug devices (USB)¶
Plugging USB with RDP or RDP vpn¶
From the desktop that you want to connect the USB, press the button
You have to download the viewer file that you want to use with rdp
Open the file where you have the download and click on the "modify" button
Press the button "local resources"
And press the button "More" on local devices and resources
Once there, in the "Units" section we select the USB that we want, in my case I have selected the "SUN-USB(D:)"
The "Connect" button is pressed
User: isard and password: pirineus -> default
Press the button "yes"
And when you enter through the remote desktop, something like this should come out. In this case it's D because it's where it was on my computer.
Plugging USB with Spice¶
NOTE: This applies to Windows only as in linux remote-viewer client this option is active by default.
IMPORTANT: Download the USB driver so that it can be detected in the viewer. (UsbDk_1.0.22x64.msi): https://www.spice-space.org/download.html
Once the driver is downloaded, open the Spice viewer, press the "File" button
And the option "USB device selection" is selected
And the device you want to use is selected.