Forum Discussion

fdwl's avatar
fdwl
Iron Contributor
Apr 13, 2022

Announcing public preview of Azure Virtual Desktop RDP Shortpath for public networks

Today I have the pleasure of announcing the public preview of RDP Shortpath for public networks. This Remote Desktop Protocol (RDP) feature establishes a direct UDP data flow between the Remote Deskt...
pcluskey's avatar
pcluskey
Brass Contributor
Apr 15, 2022
Great work, this should really help our remote workers. So my understanding is that this is supported by UDRs to NVAs provided they don't double NAT on the Firewall. Is this what "Local NAT does not use Port Preservation - custom port range may not work worth shortpath" means on the troubleshooting script provided? I'm not defining a custom port range on my session hosts, and I'm seeing STUN traffic successfully establish a binding request at both ends but no UDP.
Also would using the AzureVirtualDesktop service tag on a custom UDR (to send that straight out of the session host and bypass NVA inspection) help? I've tried and it doesnt appear to.
Any additional logs other than the Log Analytics ones.?

thanks
pcluskey's avatar
pcluskey
Brass Contributor
Apr 19, 2022

update: it seems like this has now just started to work - even though I've made no additional host or network changes, so maybe a backend change. Either way its looking good!

  • pcluskey's avatar
    pcluskey
    Brass Contributor
    Apr 20, 2022
    well I spoke too soon. no changes on our side, client on the same network as yesterday now using TCP again. I can't get it to work on my home broadband (Virgin) unless I disable UDR to our NVA (so can't do that in production). I'm wondering if my home mesh TPlink Deco is causing problems.
  • dextraa9791's avatar
    dextraa9791
    Copper Contributor
    Apr 19, 2022

    pcluskey 
    We started testing this feature today and also getting the same error.

     

    Failed to communicate [2a01:111:202f::155]:3478 with error: Unable to send data, check if InterNetworkV6 is configured
    Local NAT does not use port preservation, custom port range may not work with Shortpath

     

    Anyone else running into this?

    • MawandaH's avatar
      MawandaH
      Brass Contributor
      Jul 27, 2022

      dextraa9791I just enabled shortpath using the guide "https://3tallah.com/improve-your-end-user-experience-with-rdp-shortpath-for-avd/?unapproved=101&moderation-hash=4c1fa124dd396ca4c6c9ff4904c54e87#comment-101" before following these steps I struggled to get this working.

      • Kyle_Wise's avatar
        Kyle_Wise
        Copper Contributor
        Jul 27, 2022
        MawandaH Im assuming you dont have a firewall in your environment. ShortPath Public Network doesn’t work with most.
    • Dennis_Schierenbeck's avatar
      Dennis_Schierenbeck
      Copper Contributor
      Jun 13, 2022

      dextraa9791 

      I'm seeing the same error message.

      Could anyone here find out the reason?

    • Nigel's avatar
      Nigel
      Iron Contributor
      Apr 25, 2022
      Yup same error - unsure what to do next - our network team has confirmed we are allowing UDP, and can see it making outbounds to STUN. Still no UDP sessions
      • pcluskey's avatar
        pcluskey
        Brass Contributor
        Apr 26, 2022
        We have the same, and whilst outbound to the STUN servers is visible, I believe there also needs to be an outbound connection to the clients public IP. If I remove my UDRs then I see that communication, but with the UDR to our NVAs it's not happening. I suspect partly its because our NVA doesn't support STUN, and also down to lack of NAT for UDP traffic outbound. I've raised a support ticket (even though its in preview) - hopefully MS can have a look at my matching wireshark traces and advise.

Resources