Live data from Hacker News

Zero-Trust RDP and SSH Access to VMs on Google Cloud

github.com

21–30 of 90 posts

Re: Zero-Trust RDP and SSH Access to VMs on Google Cloud

#22
post #17

I'm sorry if this sounds completely ridiculous to some people, but what do people use RDP/Windows server for in 2021? Given that ASP/Dotnet is portable to linux, what are people building that isn't better deployed to linux? It can't just be the legacy use-case, can it?

We use remote scripted Indesign instances for creating catalogues, which needs Windows to run, and RDP for debugging. I'd love to hear about alternative solutions that don't require Windows, and still spit out colour-accurate CMYK indesign files; the printing shops won't accept anything else.

Take a look at open source Ziti, it will work on any system, app or cloud - https://ziti.dev/ or https://github.com/openziti

Re: Zero-Trust RDP and SSH Access to VMs on Google Cloud

#23
post #22
post #17

Earlier quoted context omitted.

We use remote scripted Indesign instances for creating catalogues, which needs Windows to run, and RDP for debugging. I'd love to hear about alternative solutions that don't require Windows, and still spit out colour-accurate CMYK indesign files; the printing shops won't accept anything else.

Take a look at open source Ziti, it will work on any system, app or cloud - https://ziti.dev/ or https://github.com/openziti

Not sure if this is link spam or if you just didn't understand my question.

Re: Zero-Trust RDP and SSH Access to VMs on Google Cloud

#24

I'm sorry if this sounds completely ridiculous to some people, but what do people use RDP/Windows server for in 2021? Given that ASP/Dotnet is portable to linux, what are people building that isn't better deployed to linux? It can't just be the legacy use-case, can it?

I use Windows VMs on Google Cloud to install and play games in the cloud - my Mac can’t play any

This is a very novel use case to me. Could you elaborate why use this solution instead of a local VM, boot camp, or something like Stadia?

Seems that it would work quite well for turn based games (including auto save)

Re: Zero-Trust RDP and SSH Access to VMs on Google Cloud

#25

Earlier quoted context omitted.

I use Windows VMs on Google Cloud to install and play games in the cloud - my Mac can’t play any

hows the performance/input lag on that? How much are you paying & is it worth?

It really depends on how far away from the data center you are. I used to live close to Amsterdam and that felt basically local, even with a not-amazing internet connection. Right now I live in the Valencia (Spain), with a local and not very well paired ISP. There is lag, but it is just about acceptable for platformers and action/adventure games. I wouldn't recommend it for shooters.

The cost ended up being around 1€/hr when the instance was on, and 0.06€/day for the storage. I am sure this could be optimized (e.g. use snapshots and spot instance) - but I just couldn't be bothered to. For me it is worth it.

Re: Zero-Trust RDP and SSH Access to VMs on Google Cloud

#26
post #18

This sounds like a deal breaker for some use cases: https://github.com/GoogleCloudPlatform/iap-desktop/wiki/Trou... "Because of the way IAP Desktop tunnels RDP connections, it always uses NTLM for authentication and can't use Kerberos." There may be environments that lose the security benefits of Kerberos over NTLMv2 (e.g., mutual authentication) because they've been forced into a new compliance mandate that dictates…

Looks like Microsoft's decision to go with increasingly elaborate challenge-response schemes instead of properly encrypting the whole connection (like SSL/SSH) will be haunting us for a while yet.

I don't understand why RDP/SMB/... with plaintext auth over SSL hasn't been a thing for at least a decade, does Microsoft just not care about transport security?

Re: Zero-Trust RDP and SSH Access to VMs on Google Cloud

#27
post #24

Earlier quoted context omitted.

I use Windows VMs on Google Cloud to install and play games in the cloud - my Mac can’t play any

This is a very novel use case to me. Could you elaborate why use this solution instead of a local VM, boot camp, or something like Stadia? Seems that it would work quite well for turn based games (including auto save)

I don't use a local VM or bootcamp because I just don't have a powerful enough computer to run AAA games from the last 5 years or so - even earlier if the game is badly optimized. Now with an M1 they're not even compatible.

Stadia, GeForce NOW, Xbox Game Streaming and PlayStation Now: I've tried them all, and GeForce NOW specifically is very good. But, they only allow me to play a subset of my large pre-existing game library, and/or make me buy games again, which I'm not interested in.

Stadia is specially bad at this, having to purchase on a game-by-game basis, not being compatible with any existing ecosystem (Steam, PS, Xbox have cloud saves and friend lists), and then trusting Google to run my game forever on their servers after paying a one-time cost.

Re: Zero-Trust RDP and SSH Access to VMs on Google Cloud

#28
post #23
post #22

Earlier quoted context omitted.

Take a look at open source Ziti, it will work on any system, app or cloud - https://ziti.dev/ or https://github.com/openziti

Not sure if this is link spam or if you just didn't understand my question.

I understood you would like an "alternative solution" to dozero trust RDP and SSH "that don't require Windows"

Re: Zero-Trust RDP and SSH Access to VMs on Google Cloud

#29
post #17

I'm sorry if this sounds completely ridiculous to some people, but what do people use RDP/Windows server for in 2021? Given that ASP/Dotnet is portable to linux, what are people building that isn't better deployed to linux? It can't just be the legacy use-case, can it?

We use remote scripted Indesign instances for creating catalogues, which needs Windows to run, and RDP for debugging. I'd love to hear about alternative solutions that don't require Windows, and still spit out colour-accurate CMYK indesign files; the printing shops won't accept anything else.

The most frustrating, and most fun moments I've had hacking on a computer has been scripting InDesign, so props for that!

Most printing shops I've had to treat with will also accept PDFs, is that the case? Because then, there's a case to be made for converting your templates to HTML (gives you access to a huge amount of tooling) and printing them to a PDF through a headless browser instance (like pptr.dev). That has worked for me in the past, and is accessible and good quality (though I did not need accurate CMYK, so YMMV).

Re: Zero-Trust RDP and SSH Access to VMs on Google Cloud

#30
post #28
post #23

Earlier quoted context omitted.

Not sure if this is link spam or if you just didn't understand my question.

I understood you would like an "alternative solution" to dozero trust RDP and SSH "that don't require Windows"

I believe (s)he meant an alternative to the InDesign rendering workflow that runs on Windows.
Post reply on HN