{"id":1270,"date":"2014-05-28T23:37:18","date_gmt":"2014-05-28T22:37:18","guid":{"rendered":"http:\/\/blog.cloud-client.info\/?p=1270"},"modified":"2014-05-29T00:23:11","modified_gmt":"2014-05-28T23:23:11","slug":"tip-how-to-avoid-adobe-flash-in-terminal-servervdi-environments-with-the-igel-lxos","status":"publish","type":"post","link":"https:\/\/blog.cloud-client.info\/?p=1270","title":{"rendered":"Tip: How to avoid Adobe Flash in Terminal Server\/VDI environments with the IGEL LX\/OS"},"content":{"rendered":"<div class=\"f1b57b4156f3c43e8a7d72dffc4b2e52\" data-index=\"1\" style=\"float: none; margin:10px 0 10px 0; text-align:center;\">\n<script type=\"text\/javascript\"><!--\r\ngoogle_ad_client = \"ca-pub-5449811010861855\";\r\n\/* blog.cloud-client.info 2 *\/\r\ngoogle_ad_slot = \"6689524735\";\r\ngoogle_ad_width = 468;\r\ngoogle_ad_height = 60;\r\n\/\/-->\r\n<\/script>\r\n<script type=\"text\/javascript\"\r\nsrc=\"http:\/\/pagead2.googlesyndication.com\/pagead\/show_ads.js\">\r\n<\/script>\n<\/div>\n<p>Hi Folks,<\/p>\n<p>maybe you also agree that Adobe Flash content is one of the biggest crap that can be used in a Terminal Server\/VDI environment. For example youtube or similar site&#8217;s mostly waste expensive Server CPU resources only for watching a &#8220;funny&#8221; video..<\/p>\n<p style=\"text-align: center;\"><a href=\"https:\/\/blog.cloud-client.info\/wp-content\/uploads\/2014\/05\/flashtaskbar.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-1271\" src=\"https:\/\/blog.cloud-client.info\/wp-content\/uploads\/2014\/05\/flashtaskbar.jpg\" alt=\"flashtaskbar\" width=\"554\" height=\"19\" srcset=\"https:\/\/blog.cloud-client.info\/wp-content\/uploads\/2014\/05\/flashtaskbar.jpg 554w, https:\/\/blog.cloud-client.info\/wp-content\/uploads\/2014\/05\/flashtaskbar-300x10.jpg 300w\" sizes=\"auto, (max-width: 554px) 100vw, 554px\" \/><br \/>\n<\/a>Yeah&#8230; One User with one HD Flash Movie use 41% of \u00a0Server CPU resources!<\/p>\n<p>HTML5 is still not a big deal for most site&#8217;s, so how can you handle it?<\/p>\n<p>1) Ban it&#8230; Block unwanted traffic with a firewall or proxy. This is highly efficient but will upset the user base and maybe you need it (schools\/education), so mostly this option is no deal.<\/p>\n<p>2) Buy more Server.. More or less efficient and very expensive (Hardware, licensing, setup and cooling). No deal!<\/p>\n<p>3) Use solutions like Citrix HDX Flash Redirection&#8230; More or less efficient, hard to setup and not 100% compatible, it could be a option but it&#8217;s not a real solution.<\/p>\n<p>4) Ban it from the servers&#8230; I just setup this for a PoC and it seams to be the most efficient way which is also acceptable for most users. So how is the setup?<\/p>\n<p>a) You need IGEL Linux based devices (LX or OS) based on the x86 architecture to do this.<\/p>\n<p>b) Setup a local Firefox browser session and deploy any Version of the Adobe Flash Player for Linux to it (Browser Plugins in the IGEL Setup).<\/p>\n<p>c) Assign a Hotkey to the Firefox Browser Session like ALT+CTRL+i.<\/p>\n<p>d) Setup a IIS\/Webserver on any System that is not already running a IIS\/Webserver<\/p>\n<p>e) On the Terminal Server\/VDI (i recommend to use the golden Image) site open the hosts file which is located in the Windows\/System32\/drivers\/etc folder and edit it. Now add any Website you want to outsource, point it to the &#8220;new&#8221; Webserver. Example:<\/p>\n<p style=\"text-align: center;\">192.168.1.150 youtube.com<br \/>\n192.168.1.150 youtube.de<br \/>\n192.168.1.150 anyotheruselessflashsite.com<\/p>\n<p style=\"text-align: left;\">Do not perform this for any Website which is used for &#8220;business&#8221; uploads\/work! Don&#8217;t use a DNS Server to apply the configuration, this might also point the Thin Clients to a &#8220;wrong&#8221; site&#8230; Of course you can also add Webradio Website&#8217;s, browser based games or what ever you don&#8217;t want to see\u00a0in a Webbrowser on the server backend. But at all.. It&#8217;s not a security solution at all, it&#8217;s to save resources only!<\/p>\n<p style=\"text-align: left;\">f) Create a small HTML Website with a short Text like &#8220;This site can not be used on a Server\/VDI! Please press ALT+CTRL+i to open the local Browser and use ALT+CTRL+TAB to switch between the Browser\/Session.&#8221; or similar. Make it simple and easy to understand&#8230; Now set this HTML Page as default and 404 error page for the new Webserver (d).<\/p>\n<p style=\"text-align: left;\">g) Let the user test it&#8230; If the User enter www.youtube.com the &#8220;new&#8221; Website will open and point the user how to work with the local Browser.. For the User it looks &#8220;very&#8221; embedded into the session, not 100% but it will be good enough to watch movies for most of them.<\/p>\n<p style=\"text-align: left;\">I know this solution is also not a 100% one and it can be bypassed if the User is using the IP. \ud83d\ude09 ..but it&#8217;s not a security solution, the User can watch Movies and you have minimized the wasted CPU resource on your backend. It&#8217;s easy to control, high compatible and everyone is happy. From my point it&#8217;s currently the best way to handle Flash until it will be fully replaced by HTML5 or any other &#8220;better&#8221; working solution. The performance depends on the User device, a UD5 will better perform than a UD2 but still: A slow client is better than a slow server for most company environments.<\/p>\n<p style=\"text-align: left;\">Also some more\u00a0benefit&#8217;s.. You can seperate client traffic from your server traffic quite simple, the customer where i suggest this mentioned that they have 10GB or more &#8220;flash&#8221; streaming traffic (only youtube) per day in the server infrastructure with a little bit more than 300 user&#8217;s. You can use it with any Terminal Server\/VDI solution but please note: If using VMWare View, Microsoft RemoteFX, Citrix XenDesktop x.x \/ XenApp 7.5 or any other solution that support real USB redirection don&#8217;t setup USB Redirection for Human Interface Devices (HID) because in this case the Mouse and Keyboard can not be used outside the Session (&#8230;and with the local Browser).<\/p>\n<p style=\"text-align: left;\">You can also add other description&#8217;s to the created &#8220;manual&#8221; website, for example for Android press the home button and open the local Browser or similar.<\/p>\n<p style=\"text-align: left;\">If you have suggestions to improve this solution feel free to give me a mail or add a comment.<\/p>\n<p style=\"text-align: left;\">Cheers<\/p>\n<p style=\"text-align: left;\">Michael<\/p>\n\n<div style=\"font-size: 0px; height: 0px; line-height: 0px; margin: 0; padding: 0; clear: both;\"><\/div>","protected":false},"excerpt":{"rendered":"<p>Hi Folks, maybe you also agree that Adobe Flash content is one of the biggest crap that can be used in a Terminal Server\/VDI environment. For example youtube or similar site&#8217;s mostly waste expensive Server CPU resources only for watching a &#8220;funny&#8221; video.. Yeah&#8230; One User with one HD Flash Movie use 41% of \u00a0Server [&hellip;]<\/p>\n","protected":false},"author":1423,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[15,33,7,34,38,43,36,37],"tags":[],"class_list":["post-1270","post","type-post","status-publish","format-standard","hentry","category-udlsos","category-remote-desktop-services","category-solutions","category-vdi","category-vdi-in-a-box","category-view","category-xenapp","category-xendesktop"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p3AZQ3-ku","_links":{"self":[{"href":"https:\/\/blog.cloud-client.info\/index.php?rest_route=\/wp\/v2\/posts\/1270","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.cloud-client.info\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.cloud-client.info\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.cloud-client.info\/index.php?rest_route=\/wp\/v2\/users\/1423"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.cloud-client.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1270"}],"version-history":[{"count":8,"href":"https:\/\/blog.cloud-client.info\/index.php?rest_route=\/wp\/v2\/posts\/1270\/revisions"}],"predecessor-version":[{"id":1279,"href":"https:\/\/blog.cloud-client.info\/index.php?rest_route=\/wp\/v2\/posts\/1270\/revisions\/1279"}],"wp:attachment":[{"href":"https:\/\/blog.cloud-client.info\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1270"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.cloud-client.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1270"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.cloud-client.info\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1270"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}