b2b8c481d5
* init client app doc * init TCP section * add redirect for TCP client doc * Redis and Mysql * finish TCP exampels * init Draft template * cleanup whitespace * escape markdown image in template * add redirect and update links * copy edit * Update readme.md * fmt Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com> * optimize png Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com> * header cleanup and child listing * Update docs/docs/tcp/ssh.md Co-authored-by: bobby <1544881+desimone@users.noreply.github.com> Co-authored-by: cmo-pomerium <91488121+cmo-pomerium@users.noreply.github.com> Co-authored-by: Bobby DeSimone <bobbydesimone@gmail.com> Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2.8 KiB
| title | description |
|---|---|
| RDP | Tunnel RDP connections through Pomerium |
Tunneled RDP Connections
Remote Desktop Protocol (RDP) is a standard for using a desktop computer remotely. It was released by Microsoft and is most commonly used to access Windows systems, but can be used for macOS and Linux systems as well.
Basic Connection
-
Create a TCP tunnel, using either
pomerium-clior the Pomerium Desktop client:::::: tabs :::: tab pomerium-cli
pomerium-cli tcp aService.corp.example.com:3389 --listen :3389:::tip --listen The
--listenflag is optional. It lets you define what port the tunnel listens on locally. If not specified, the client will choose a random available port. ::::::: :::: tab Pomerium Desktop
:::tip Local Address The Local Address field is optional. Using it defines what port the tunnel listens on locally. If not specified, Pomerium Desktop will choose a random available port. :::
:::: :::::
-
Initiate your RDP connection, pointing to
localhost. This example uses the Remmina client, but the procedure should be similar for other tools:
::: warning The first connection attempt will initiate a redirect to authenticate you in the browser. Once you're signed in, subsequent connections will succeed. If your client isn't configured to retry the connection, you may have to reconnect manually. :::
Always Tunnel through Pomerium
Some clients, like Remmina, support running commands before and after connection. The script below (adopted from this example using SSH tunnels) starts and stops an instance of pomerium-cli:
<<< @/examples/tcp/pomerium-tunnel.sh
-
Save the script above to your home folder (
~/), and make it executable:cd ~/ wget https://github.com/pomerium/pomerium/blob/master/examples/tcp/pomerium-tunnel.sh chmod +x pomerium-tunnel.sh -
Update your client profile to execute the script before and after the connection:
::: warning Flatpak versions of client software may not be able to read external scripts or programs. :::