Encrypt VNC Traffic from Proxy Host to Compute Node

[Solly Ross]

Description of problem:

If we break the novnc connections into three parts as below:

 client browser (1) -----> novnc proxy (2) ------> compute node (3)

Then the present status is: connection from browser to proxy is encrypted, while the nonvnc proxy(on controller nodes) to compute nodes are NOT.

We would like the novnc traffic from controller node to compute nodes be encrypted as wel.

[Eric Brown (ericwb)]

I believe the free and open source versions of VNC servers do not natively support encryption of communication. But the common setup is to tunnel VNC over an SSH connection. So maybe paramiko could be used in some way.

[Solly Ross (sross-7)]

@ericwb: actually, that's not true. Some (if not many) support various forms of encryption. In fact, libvirt's built-in VNC server supports SASL, and I've actually implemented code for using Kerberos (via SASL) to encrypt the connection. SPNEGO is used to obtain credentials from the user, and then s4u2 proxy is used by the novnc proxy to obtain a ticket, which is then used to perform encryption between the proxy and compute node. It's around here somewhere...

[Solly Ross (sross-7)]

For some reason, the commit hook isn't working. Here's the review: https://review.openstack.org/#/c/77266/

[Daniel Berrange (berrange)]

This isn't really a bug, it is a major feature request, so it needs to go through the blueprint process, not bug process.

[Sean Dague (sdague)]

Put as opinion as it's not a bug