Azure Bastion is expensive, slow to deploy, and can't be turned off. You literally have to delete the Azure Bastion resource in Azure to avoid paying for it when it's not used, and then redeploy as needed, which can take over 10 minutes. This is much cheaper, faster, and efficient - ThreadSky

awakecoding.com • 41 days ago

Azure Bastion is expensive, slow to deploy, and can't be turned off. You literally have to delete the Azure Bastion resource in Azure to avoid paying for it when it's not used, and then redeploy as needed, which can take over 10 minutes. This is much cheaper, faster, and efficient

Comments

jamielangdon.bsky.social•41 days ago

Interesting, but how about from a connection standpoint? Do you get a better framerate or scaling? How about copy and paste to and from the host abilities?

awakecoding.com•41 days ago

This is using IronRDP and the RDCleanPath protocol extension we originally designed in Devolutions Gateway, adding native WebSocket support to RDP. Just like with Devolutions Gateway, Cloudflare acts as a very lightweight WebSocket network bridge, which is much more efficient than Apache Guacamole

awakecoding.com•41 days ago

Simply put, most web-based RDP web clients right now are based on Apache Guacamole, and that includes Azure Bastion. With the Guacamole design, a FreeRDP client in a bastion host does the real RDP connection to send images back to the browser. It's much more resource-intensive

awakecoding.com•41 days ago

The other design is the HTML5 web client that comes with the RD Gateway, called "RD Web Access". Instead of adapting RDP for WebSocket, they wrapped the TCP connection in a WebSocket and implemented TLS *inside* the browser a second time. TLS in WSS, which you can guess comes with overhead

jamielangdon.bsky.social•41 days ago

Wow, thank you for the info. I remember messing with Guacamole back in the day. Didn't realize that was basically the tech behind what MS is using today.

awakecoding.com•41 days ago

Yup, and I've tried reaching out to the Azure Bastion team several times to suggest improvements to their product, but never quite managed to get through.

The Cloudflare people were more than happy to listen to my advice though, and thankfully didn't build yet-another-Guacamole 😜

awakecoding.com•41 days ago

This being said, I encourage you to also look at Devolutions Gateway. While the Cloudflare solution is great, it is based on the same open source components we developed, like IronRDP. There are some differences that may matter, like Kerberos support: https://devolutions.net/gateway/

Comments

Posting Rules

Reply