VNC - RDP
Remote Graphic Terminal Solutions
- Access to desktop applications
- Thin client compatible
- Horse power is somewhere else
- Log in remotely to a graphic user interface
- This is not Telnet or SSH, they are command-based
- Microsoft offers Remote Desktop Protocol (RDP)
- Many Linux distributions package VNC
- Commercial third-party offerings exist
- *Consider bandwith requirements over CLI tools
Remote Desktop Services (RDS)
- Formerly known as Terminal Services
- Actual service is
termdd.sys - Listening on TCP 3389
- There have been bugs historically in Remote Desktop leading To RCE (Remote Code Execution)
- We never want to have RDP services exposed to the internet
- Put up a firewall and require someone to use a VPN to RDP
- RDP Clients encapsulate KVM (Keyboard Video Mouse) over IP
- RDS passes KVM data to device drivers
Virtual Network Computing (VNC)
-
VNC Client
-
VNC Protocol
-
VNC Server
-
Leverages Remote Frame Buffer Protocol (RFBP)
- Recording what's happening on our screen and its encapsulating it on over IP
-
RFBP is extensible
-
Capabilities are negotiated
-
TCP 5900+N client interface
- Ports that you want to allow vary a little bit
-
TCP 500 typically a browser interface
- Is not as sharp or as snappy, but there is broader compatibility