For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Wasfi_182818's avatar
Wasfi_182818
Icon for Altostratus rankAltostratus
Oct 31, 2015

PCOIP Gateway's detailed traffic flow

Hi;

 

I am trying to understand the traffic flow of PCOIP for VMware's View when used with the APM as a PCOIP proxy. Is there a document or link that shows the correct sequence of events or connections. My understanding is this and please correct me if wrong:

 

  1. The client establishes an https connection to the public IP address of the VServer
  2. The APM presents the logon page
  3. The user supplies her/his credentials and they are sent to APM over https
  4. The username and password are passed by the APM to an AD server (assuming that AD is used as AAA)
  5. AD verifies these credentials and if OK, they are passed to the View Connection Server over https
  6. The View Connection Server authenticates these credentials against the AD server
  7. If the AD server authentication is successful then some XML broker operation happens here (not sure about how this happens)
  8. The Icon of the user's VDI is shown on the traditional horizon view client interface
  9. The user clicks on her/his VDI icon and this initiates a PCOIP UDP flow over port 4172 to the APM
  10. The UDP flow is reconstructed by the APM to become a TCP connection on port 4172 between the APM and the Virtual Desktop (VDI). At the back end only PCOIP over TCP is passed between the APM and the VDI
  11. If using the HTML5 client, then the blast traffic at the front end (user to apm) is over HTTPS port 443 and the blast traffic on the back end (apm to VDI) is over HTTPS port 8443.

Please feel free to correct the above steps and add to them the parts I have missed.

 

Kindly Wasfi

 

No RepliesBe the first to reply