Forum Discussion

DarrenP's avatar
DarrenP
Copper Contributor
Aug 08, 2021
Solved

Azure Virtual Desktop RDP Shortpath

Hello team

In a scenario where remote users are connecting directly to Azure Virtual Desktop from their home (with no VPN to corp office), can I use ShortPath? 

 

The MS doc states:

"

To support RDP Shortpath, the Azure Virtual Desktop client needs a direct line of sight to the session host. You can get a direct line of sight by using one of the following technologies:

  • The remote client machines must be running either Windows 10 or Windows 7 and have the https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/clients/windowsdesktop installed. Currently, the web client is not supported.
  • https://docs.microsoft.com/en-us/azure/expressroute/expressroute-circuit-peerings
  • https://docs.microsoft.com/en-us/azure/vpn-gateway/tutorial-site-to-site-portal
  • https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-point-to-site-resource-manager-portal
  • https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-public-ip-address

"

 

So, home users connecting directly to AVD - does this equal a 'direct line of sight' connection?

 

thanks

 

  • No, it doesn't, users connecting from home will just be flowing over the internet - both side of the traffic (the home internet to the Azure edge) is unmanaged, so the route can't be optimized.

3 Replies

  • No, it doesn't, users connecting from home will just be flowing over the internet - both side of the traffic (the home internet to the Azure edge) is unmanaged, so the route can't be optimized.
    • DarrenP's avatar
      DarrenP
      Copper Contributor

      lukemurraynz - thats great thank you! So basically Shortpath is a good option to optimise traffic when inside a corp / private network and this can prevent 'hair pin' type traffic flow I guess.

      • lukemurraynz's avatar
        lukemurraynz
        Learn Expert
        Yes, as long as the Firewalls aren't blocking UDP port 3390 in your path - which you can control with the Expressroute/VPN connections, without those you can't control the specific paths of the traffic.

Resources