Chapter 4

Remote Computing & Desktop

RDP, VDI, SSH, VPN — access patterns.

Learning objectives

  • Define remote computing and how it differs from "the cloud" marketing term
  • Identify access patterns: SSH, RDP, web consoles, VPN
  • Plan Workshop Co. admin and teacher access from outside the workshop

Remote computing in plain language

Remote computing means using IT resources you are not sitting next to — whether they live in a Montreal datacenter, AWS us-east-1, or an Edmonton basement reachable only over VPN. The cloud is one delivery model for remote resources; your Proxmox host accessed via SSH from Marcus's kitchen is also remote computing.

Access channels Workshop Co. uses

ChannelWhoProtects
SSH via bastionMarcus, DanaLinux VMs, Proxmox tunnel
HTTPSPublic, customersWebsite, booking, Nextcloud WebDAV
Web admin consolesMarcusGoogle Admin, Swift Host panel, registrar DNS
WireGuard VPN (optional)Staff on roadDirect access to 192.168.10.0/24 without public SSH

Worked example — instructor uploads plans from home

Dana teaches from Sherwood Park. She uploads PDFs to Nextcloud at files.workshopco.ca — pure HTTPS remote access, no VPN required. Authentication via Google SSO plugin. Data transits TLS; files land on VM 130 in Edmonton.

Marcus patches VM 130 via SSH — different protocol, same remote idea. Security model differs: SSH keys and bastion vs HTTPS session cookies and 2FA.

Remote desktop vs server admin

Workshop Co. does not RDP into Windows servers — Linux only. If they had a Windows CNC machine PC, RDP over VPN might apply. Know the distinction:

  • Server remote admin — SSH, serial/IPMI, provider KVM console
  • Desktop remote — RDP, VNC, Parsec — full GUI session
Provider rescue console

Swift Host VPS includes web-based VNC/serial console — remote computing when SSH is broken and you have no physical keyboard. Marcus tests it once before an emergency.

Latency and geography

Edmonton staff accessing Montreal VPS: ~50 ms RTT — fine for SSH and web. Real-time video editing remote over VPN: painful. Place resources near users or near data they sync with — Workshop Co. keeps authoritative DB in Edmonton, DR copy in Montreal.

Try it yourself

Classify each action as remote computing or local-only:

  1. Marcus runs apt upgrade on db VM from home
  2. Student registers for class on workshopco.ca
  3. Marcus uses Proxmox web UI on laptop via SSH tunnel
  4. Printing class handouts on workshop office printer
Answers
  1. Remote
  2. Remote (customer's device → internet → server)
  3. Remote
  4. Local — unless printer is network-managed from home, then hybrid

Check your understanding

  1. Is every cloud service an example of remote computing?
  2. Why might Workshop Co. add VPN instead of public SSH on bastion?
Answers
  1. Yes — you access resources over the network. But not all remote computing is "cloud" (subscription/on-demand).
  2. VPN reduces public attack surface; SSH listens only on internal interface after VPN connect.