Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
  • Search
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Brand Logo

Cloudron Forum

Apps | Demo | Docs | Install
  1. Cloudron Forum
  2. Guacamole
  3. Communicate Across Two Interfaces

Communicate Across Two Interfaces

Scheduled Pinned Locked Moved Guacamole
6 Posts 2 Posters 1.2k Views 2 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • R Offline
      R Offline
      Rez
      wrote on last edited by Rez
      #1
      .
      

      Cloudron is setup in the typical manner with the public IP sitting on ENS3. Everything works as expected and no issues. I have a second interface, ENS4 which is connected to a number of servers internally. From the CLI I can reach everything just fine. When I deployed Guacamole I found it was unable to connect to any systems on ENS4. It would connect externally just fine. Is there something I can do to enable this? I imagine this is a pretty common use case for Guacamole and it's worked well for me in the past. Thanks in advance for any help.

      girishG 1 Reply Last reply
      0
      • R Rez
        .
        

        Cloudron is setup in the typical manner with the public IP sitting on ENS3. Everything works as expected and no issues. I have a second interface, ENS4 which is connected to a number of servers internally. From the CLI I can reach everything just fine. When I deployed Guacamole I found it was unable to connect to any systems on ENS4. It would connect externally just fine. Is there something I can do to enable this? I imagine this is a pretty common use case for Guacamole and it's worked well for me in the past. Thanks in advance for any help.

        girishG Offline
        girishG Offline
        girish
        Staff
        wrote on last edited by
        #2

        @rez When you say from the CLI, do you mean via SSH or using the Web terminal ? If you haven't done so already, can you check if the internal servers are reachable via the Web terminal? Network connectivity wise that is what the app will be facing as well.

        R 1 Reply Last reply
        0
        • girishG girish

          @rez When you say from the CLI, do you mean via SSH or using the Web terminal ? If you haven't done so already, can you check if the internal servers are reachable via the Web terminal? Network connectivity wise that is what the app will be facing as well.

          R Offline
          R Offline
          Rez
          wrote on last edited by Rez
          #3

          @girish No route to host for anything on ENS4. Checked using the web terminal as requested.

          girishG 1 Reply Last reply
          0
          • R Rez

            @girish No route to host for anything on ENS4. Checked using the web terminal as requested.

            girishG Offline
            girishG Offline
            girish
            Staff
            wrote on last edited by
            #4

            @rez Not sure what needs to be done here but looks like the docker containers are unable to connect. Maybe you can debug using docker run -t cloudron/base:3.0.0 /bin/bash . This gives you a plain docker container. We have to somehow make the routing stuff work via docker container.

            R 1 Reply Last reply
            0
            • girishG girish

              @rez Not sure what needs to be done here but looks like the docker containers are unable to connect. Maybe you can debug using docker run -t cloudron/base:3.0.0 /bin/bash . This gives you a plain docker container. We have to somehow make the routing stuff work via docker container.

              R Offline
              R Offline
              Rez
              wrote on last edited by
              #5

              @girish I came across this when I was doing some research on the issue.

              "you can run your container in host mode and you will see the same networking that you see on the host, but there is no network isolation. When there is a bridge in between the packets from the container have to be natted and so one interface has to be chosen"

              This explains why I didn't see the issue on my other systems since Guacamole is running in host mode there. I'll need to look at a different work around or create a seperate bridge and add the container to it.

              girishG 1 Reply Last reply
              0
              • R Rez

                @girish I came across this when I was doing some research on the issue.

                "you can run your container in host mode and you will see the same networking that you see on the host, but there is no network isolation. When there is a bridge in between the packets from the container have to be natted and so one interface has to be chosen"

                This explains why I didn't see the issue on my other systems since Guacamole is running in host mode there. I'll need to look at a different work around or create a seperate bridge and add the container to it.

                girishG Offline
                girishG Offline
                girish
                Staff
                wrote on last edited by
                #6

                @rez I see. Cloudron apps do not run in host mode because we need the network isolation for security purposes. Still I am not sure I understand why a docker container cannot access external network regardless. I thought this was taken care of by linux routing.

                1 Reply Last reply
                0
                Reply
                • Reply as topic
                Log in to reply
                • Oldest to Newest
                • Newest to Oldest
                • Most Votes


                  • Login

                  • Don't have an account? Register

                  • Login or register to search.
                  • First post
                    Last post
                  0
                  • Categories
                  • Recent
                  • Tags
                  • Popular
                  • Bookmarks
                  • Search