[ale] Something faster than X-Windows but more secure than VNC server?

[Michael H. Warfield]

On Wed, 2014-10-01 at 12:20 -0400, Scott Plante wrote:
> You could always run VNC over an SSH tunnel. You could create a batch
> file that starts plink and your VNC client.
> 
> 
> Google also turned up this:
> http://www.karlrunge.com/x11vnc/ssvnc.html
> Looks like he built a VNC with SSL and SSH tunnel options.
> 
VNC is horribly slow.  Even RDP is faster.  VNC over ssh with
compression is somewhat better (in addition to be much more secure) but
still sucks unless you have a lot of bandwidth.  About the only thing
slower, in my personal experience, has been raw X11 forwarding over ssh
(I don't even consider X11/XDM over live network due to security
issues).

> Scott

Regards,
Mike
> 
> ______________________________________________________________________
> From: "Jeff Lightner" <JLightner at dsservices.com>
> To: "Atlanta Linux Enthusiasts (ale at ale.org)" <ale at ale.org>
> Sent: Tuesday, September 30, 2014 1:39:36 PM
> Subject: [ale] Something faster than X-Windows but more secure than
> VNC        server?
> 
> 
> 
> Basic question:
> 
> Can anyone suggest something faster than X-Windows but more secure
> than VNC server?
> 
>  
> 
> Details:
> 
> We have applications that run as X applications.   The vendor is used
> to running this in VNC Server but that isn’t very secure.
> 
>  
> 
> We instead gave X access on MS-Windows desktops using Exceed or
> Cygwin/X and the applications are exported back to the users’ desktop.
> Since we’re doing this via ssh X tunneling it is encrypted.
> 
>  
> 
> The users continually complain that this is too slow for their needs.
> We did initially give a single VPN session access to a remote
> consultant using VNC because it was clearly too slow going over the
> multiple hops it took to him in Pennsylvania.
> 
>  
> 
> Now I’m being asked to either turn on VNC Server for the users to
> access internally or propose an alternative solution.  
> 
>  
> 
> Is there such a thing as a host based service like VNC Server but that
> makes an encrypted connection to the users’ desktop so that only the
> display is being sent encrypted rather than having to draw on the
> desktop.  Is there a way to make the VNC connection encrypted?
> 
>  
> 
> Jeffrey C. Lightner
> 
> Sr. UNIX Administrator
> 
>  
> 
> DS Services of America, Inc.
> 
> 5660 New Northside Drive NW
> 
> Suite 250
> 
> Atlanta, GA  30328
> 
>  
> 
> P: 678-486-3516
> 
> C: 678-772-0018
> 
> F: 678-460-3603
> 
> E: jlightner at dsservices.com
> 
>  
> 
> 
>  
> 
> Athena®, Created for the Cause™
> 
> Making a Difference in the Fight Against Breast Cancer
> 
> _________________________________________________________
> 
> CONFIDENTIALITY NOTICE: This e-mail may contain privileged
> 
> or confidential information and is for the sole use of the intended
> 
> recipient(s). If you are not the intended recipient, any disclosure,
> 
> copying, distribution, or use of the contents of this information
> 
> is prohibited and may be unlawful. If you have received thiselectronic
> 
> transmission in error, please reply immediately tothe sender that
> 
> you have received the message in error, and delete it. Thank you.
> 
> 
> 
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo
> 
> 
> 
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo

-- 
Michael H. Warfield (AI4NB) | (770) 978-7061 |  mhw at WittsEnd.com
   /\/\|=mhw=|\/\/          | (678) 463-0932 |  http://www.wittsend.com/mhw/
   NIC whois: MHW9          | An optimist believes we live in the best of all
 PGP Key: 0x674627FF        | possible worlds.  A pessimist is sure of it!

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 465 bytes
Desc: This is a digitally signed message part
URL: <http://mail.ale.org/pipermail/ale/attachments/20141001/e1472887/attachment.sig>