无需vncserver通过vnc client直接访问虚拟机Using VNC to Connect to a XenServer VM

Using VNC to Connect to a XenServer VM’s Console

In order to present a virtual machine’s console in XenCenter, XenServer creates a VNC stream for each VM that is running on the server. The VNC session is bound to the localhost address of the server (127.0.0.1) and is therefore not directly accessible from external VNC clients. In this post I’ll discuss a quick and dirty way to connect directly to the VM’s console using a remote VNC client and an SSH tunnel. Since there is not a version of XenCenter that runs on Linux, this method allows you to connect to XenServer VM consoles from a Linux machine.

This post will assume that the user doesn’t have access to XenCenter, but does have root access to the XenServers in a resource pool. To create the SSH tunnel it will expect that you’re using OpenSSH. If not, you’ll need to look at your SSH utility’s documentation to determine how to create SSH sessions and tunnels. Some VNC clients have the ability to establish SSH tunnels on their own. I’ve found these implementations to be hit or miss, so for this post we’ll separate SSH and VNC utilities. Also, note that this post will exclusively use the XenServer CLI. If you want to access the VNC console via the XAPI, documentation is found at here.

First, you’ll need to find the domain ID of the VM you’re interested in and the XenServer host that it’s running on. To do this y ou’ll need to SSH to one of the hosts in the resource pool and execute the following xe command:

[root@jeckle ~]# xevm-list params=dom-id,resident-on name-label= resident-on ( RO) : 06970b38-8b11-4228-bfc5-198405530e10

dom-id ( RO): 2

记住自己的dom id

Next, you’ll need to identify which server is running the VM from the uuid above:

[root@jeckle ~]# xe host-list uuid=06970b38-8b11-4228-bfc5-198405530e10

uuid ( RO) : 06970b38-8b11-4228-bfc5-198405530e10

name-label ( RW): jeckle

name-description ( RW): Default install of XenServer

If you need to determine the IP address of the host that’s running the VM you can issue the following command:

[root@jeckle ~]# xepif-list management=true params=IP host-uuid=06970b38-8b11-4228-bfc5-198405530e10

IP ( RO) : 192.168.10.52

If necessary, establish an SSH session to the host that is running the VM you want to connect to. Next, we’ll need to identify the port that XenServer is using to present the VM console’s VNC stream. In the code below, replace the 1 with the domain id you found in the previous step.

[root@jeckle ~]# xenstore-read /local/domain/1/console/vnc-port

5902

//不同的机器获取的port是不一样的，它在xs里面已经分配好了

This tells you that you want to connect to the VM on port 5902.

Now that we know the port we want to connect to, we need to create an SSH tunnel to the XenServer and then connect the VNC client through the tunnel. An SSH tunnel basically says, any connection that is made to a selected port on the local machine will be forwarded through the SSH tunnel to an identified port that is accessible from the remote host you SSH to. To create the tunnel issue the following command in a local shell:

ssh -L :localhost:@

?local port: any unused port on the client host that you want to proxy through (should be greater than 1024)

?VM console port: the port on the XenServer host that the VM console is listening on

?username: the user account on the XenServer host that the VM is running on

?xenserver host: the host your VM is running on

Here’s an example:

ssh -L 5903:localhost:5903 root@192.168.10.52 //根据自己实际得到的dom id 加上console端口号（59xx）

This command says to send any traffic that is sent to local port 5903 on the client, through ssh to the host 192.168.10.52 and then redirect it to localhost:5903.

Once this is established, you can connect a VNC client to localhost:5903 and you’ll be connec ted to the VM’s console.

配置2：

利用putty软件，建立tunnels，根据上面得到的port，建立过程，如下图：