基于 Amazon DCV的Web远程桌面应用管理平台实践

@GetMapping("token/{resourceId}/{userCode}")
@Operation(summary = "获取dcv token")
@OperateLog(type = OperateTypeEnum.GET)
@PreAuthorize("hasAuthority('cloudesk:instance:getDcvToken2') or hasRole('SUPER_ADMIN')")
public Result<Map<String,String>> getDcvToken(@PathVariable("resourceId") String resourceId,@PathVariable("userCode") String userCode) {
    LambdaQueryWrapper<InstanceEntity> instanceWrapper = Wrappers.lambdaQuery();
    instanceWrapper.eq(InstanceEntity::getEc2InstanceId,resourceId).eq(InstanceEntity::getUserCode,userCode).notIn(InstanceEntity::getInstanceStatus, Arrays.asList(
                    CommonConstant.INSTANCE_STATUS.TERMINATED,
                    CommonConstant.INSTANCE_STATUS.SHUTTING_DOWN));
    InstanceEntity instanceEntity  = instanceService.getOne(instanceWrapper);
    if(instanceEntity == null){
        return Result.error("用户与云桌面不匹配");
    }
    Map<String, String> result = new HashMap<>();
    String dcvToken = dcvService.getDcvToken(resourceId);
    Long dcvTokenExpire = sysParamsService.getLong("DCV_TOKEN_EXPIRE");
    result.put("expire", String.valueOf(dcvTokenExpire));
    result.put("token", dcvToken);
    return Result.ok(result);
}

@PostMapping("/authenticator")
@Operation(summary = "dcv回调接口")
public ResponseEntity<String> dcvAuthenticator(@RequestParam String authenticationToken) {
    String resourceId = tokenStoreCache.getDcvUser(authenticationToken);
    String result;
    if(resourceId == null) {
        result = String.format("<auth result=\"no\"><message>%s</message></auth>", "invalid token");
    }else{
        LambdaQueryWrapper<InstanceEntity> instanceWrapper = Wrappers.lambdaQuery();
        instanceWrapper.eq(InstanceEntity::getEc2InstanceId,resourceId);
        InstanceEntity instanceEntity = instanceService.getOne(instanceWrapper);
        String userCode = instanceEntity.getUserCode();
        LambdaQueryWrapper<SysUserEntity> wrapper = Wrappers.lambdaQuery();
        wrapper.eq(SysUserEntity::getCode, userCode);
        SysUserEntity sysUser = sysUserService.getOne(wrapper);
        String netBiosName = sysParamsService.getString("NET_BIOS_NAME");
        if("0".equals(netBiosName)){
            result = String.format("<auth result=\"yes\"><username>%s</username></auth>", sysUser.getUsername());
        }else{
            result = String.format("<auth result=\"yes\"><username>%s</username></auth>", netBiosName+"\\"+sysUser.getUsername());
        }
    }
    tokenStoreCache.deleteDcvUser(authenticationToken);
    final HttpHeaders httpHeaders= new HttpHeaders();
    httpHeaders.setContentType(MediaType.TEXT_XML);
    return new ResponseEntity<>(result, httpHeaders, HttpStatus.OK);
}

@PostMapping
@Operation(summary = "创建资源池")
@OperateLog(type = OperateTypeEnum.INSERT)
@PreAuthorize("hasAuthority('cloudesk:instancepool:save') or hasRole('SUPER_ADMIN')")
public Result<String> save(@RequestBody @Valid CloudInstancePoolSaveVO vo) throws IOException {
    instanceService.validateImageSize(vo.getAmiId(), vo.getSystemDiskSize(), vo.getResourceName(), "");
    return Result.ok(service.save(vo));
}
@PutMapping
@Operation(summary = "修改资源池")
@OperateLog(type = OperateTypeEnum.UPDATE)
@PreAuthorize("hasAuthority('cloudesk:instancepool:update') or hasRole('SUPER_ADMIN')")
public Result<Void> update(@RequestBody @Valid CloudInstancePoolUpdateVO vo) throws IOException {
    service.update(vo);
    return Result.ok();
}
@DeleteMapping
@Operation(summary = "删除云资源池")
@OperateLog(type = OperateTypeEnum.DELETE)
@PreAuthorize("hasAuthority('cloudesk:instancepool:delete') or hasRole('SUPER_ADMIN')")
public Result<String> delete(@RequestBody List<Long> idList) {
    service.delete(idList);
    return Result.ok();
}
@PostMapping("authorize")
@Operation(summary = "资源池授权与解授权")
@OperateLog(type = OperateTypeEnum.UPDATE)
@PreAuthorize("hasRole('SUPER_ADMIN')")
public Result<Void> authorize(@RequestBody @Valid PoolAuthorizeVO vo) {
    instancePoolBindUserService.authorize(vo);
    return Result.ok();
}

/**
批量检查实例是否有活跃的DCV会话
@param instanceIds 实例ID列表
@return 实例ID到是否有会话的映射，true表示有会话，false表示无会话
*/
public Map<String, Boolean> getBatchDCVSessionExists(List<String> instanceIds) {
    if (CollectionUtils.isEmpty(instanceIds)) {
        return new HashMap<>();
    }
    List<String> commands = Arrays.asList(
            "$dcv = 'C:\\Program Files\\NICE\\DCV\\Server\\bin\\dcv.exe'",
            "$s = & $dcv describe-session console -j 2>$null",
            "if ($s -and $s -match '\"id\"') { Write-Output 'true' } else { Write-Output 'false' }"
    );
    try {
        String[] instanceArray = instanceIds.toArray(new String[0]);
        Map<String, String> results = executeSSMCommandWithBatchResult(instanceArray, commands, "checkDCVSessionExists");

        Map<String, Boolean> sessionExistsMap = new HashMap<>();
        for (Map.Entry<String, String> entry : results.entrySet()) {
            String instanceId = entry.getKey();
            String result = entry.getValue();
            sessionExistsMap.put(instanceId, parseSessionExistsResult(result));
        }
        return sessionExistsMap;
    } catch (Exception e) {
        log.error("批量检查DCV会话是否存在失败: {}", e.getMessage());
        // 返回默认值false
        Map<String, Boolean> defaultMap = new HashMap<>();
        for (String instanceId : instanceIds) {
            defaultMap.put(instanceId, false);
        }
        return defaultMap;
    }
}

networks:
  app-network:
    driver: bridge
services:
  mysql:
    image: mysql:8.0
    environment:
      MYSQL_ROOT_PASSWORD: youpassword
      TZ: Asia/Shanghai
    ports:
      - "3306:3306"
    volumes:
      - ./mysql/data:/var/lib/mysql
      - ./mysql/config/my.cnf:/etc/mysql/my.cnf
      - ./mysql/init:/docker-entrypoint-initdb.d
      - ./mysql/log:/var/log/mysql
      - ./mysql/mysql-files:/var/lib/mysql-files
    command:
      --default-authentication-plugin=mysql_native_password
      --character-set-server=utf8mb4
      --collation-server=utf8mb4_general_ci
      --explicit_defaults_for_timestamp=true
      --lower_case_table_names=1
      --max_connections=1000
      --default-time-zone='+08:00'
    restart: always
    networks:
      - app-network
  redis:
    image: redis:latest
    command: redis-server --appendonly yes --requirepass "youpassword"
    ports:
      - "6379:6379"
    restart: always
    volumes:
      - ./redis/data:/data
    networks:
      - app-network
 
networks:
  cloud-desktop_app-network:
    external: true

services:
  upcloudx-boot:
    image: accountId.dkr.ecr.us-east-1.amazonaws.com/upcloudx-boot:v1.9
    container_name: upcloudx-boot
    ports:
      - 8088:8080
    environment:
      - HOST_CPU_SERIAL=${HOST_CPU_SERIAL}
      - HOST_BOARD_SERIAL=${HOST_BOARD_SERIAL}
      - HOST_IP=${HOST_IP}
      - SPRING_PROFILES_ACTIVE=prod
      - JAVA_OPTS=-Xms1024M -Xmx1024M -Dlogging.config=/app/config/logback.xml
      - CLOUDESK_LICENSE_PATH=/app/config/license.lic
      - DOMAIN=https://cloudesk.upcloudx.cn/upcloudx-boot-server
      - TZ=Asia/Shanghai
    volumes:
      - /root/cloud-desktop/upcloudx-boot/upload:/app/upload
      - /root/cloud-desktop/upcloudx-boot/config:/app/config
      - /etc/localtime:/etc/localtime
    restart: always
    networks:
      - cloud-desktop_app-network
  upcloudx-boot-web:
    image: accountId.dkr.ecr.us-east-1.amazonaws.com/upcloudx-boot-web:v1.9
    container_name: upcloudx-boot-web
    ports:
      - 80:80
      - 8443:8443
    restart: always
    environment:
      - SERVER_IP=10.0.0.246
      - BACKEND_URL=http://upcloudx-boot:8080
      - DCV_URL=https://cloudesk.upcloudx.cn:8443
    networks:
      - cloud-desktop_app-network

@GetMapping("/connection/{resourceId}/{userCode}")
@Operation(summary = "获取DCV连接信息")
@OperateLog(type = OperateTypeEnum.GET)
@PreAuthorize("hasAuthority('cloudesk:instance:getDcvConnection') or hasRole('SUPER_ADMIN')")
public Result<Map<String,String>> getDcvConnectionInfo(
        @PathVariable("resourceId") String resourceId,
        @PathVariable("userCode") String userCode,
        @RequestParam(value = "taskId", required = false) String taskId) {
    return dcvService.getDcvConnectionInfo(resourceId, userCode, taskId);
}