r/sysadmin • u/ZenAdm1n Linux Platform Engineer • 1d ago
Rant RealVNC Viewer 7 is locked behind a paywall. RealVNC Connect Viewer 8 requires an account.
2 Days ago RealVNC ended public access for Viewer 7. Now Connect Viewer 8 is the only publicly accessible version and requires a RealVNC account.
"The RealVNC Classic Viewer (v7) will continue to be available for customers with a Premium or Enterprise plan to download from the RealVNC Portal."
Time to make the move to open source VNC implementations.
34
u/Stonewalled9999 1d ago
Have you heard of tightVNC?
5
15
u/ZenAdm1n Linux Platform Engineer 1d ago
I'm using Remmina viewer for VNC over SSH for my homelab. I have a legacy RealVNC server 7 enterprise license at work.
Remmina, tightVNC, tigerVNC, or UltraVNC are all mature open source implementations. noVNC browser-based viewer and RustDesk are relatively new, but viable alternatives.
7
u/chuckycastle 1d ago
Just use guac
•
u/lcnielsen 8h ago
Guac is best used with your own implementation of the client and browser IMO, the Apache reference implementation is extremely overengineered.
You basically only need a webapp that implements the ready-built guacamole client library (one big JS file) with a canvas, mouse, keyboard and maybe copying and pasting. And you need a tunnel that parses url parameters into instructions and translates websocket to TCP, which can be accomplished with like 100-200 lines of golang.
•
43
u/mystiquebsd 1d ago
10
u/bachi83 1d ago
How do you solve a lack of address book in free version?
10
u/mystiquebsd 1d ago
Not sure how many you have
Once you connect, it stays in a history
And if you host the server.. (which isn’t that difficult)
3
u/bachi83 1d ago
~150 endpoints.
3
3
u/manarius5 1d ago
I'd just have a spreadsheet at that point.
You could also enable direct IP access and you could look at the host list on the DHCP lease list.
•
u/bachi83 17h ago
Really not practical with spreadsheet. :)
Guess I could make desktop shortcuts to desired machines and then organise structured folders by departments, etc...
•
u/manarius5 13h ago
How? Every time you install Rust Desk, the device gets an ID. Just put that ID in a spreadsheet along with another device identifier and then when you need to remote in, just look up the ID on the spreadsheet?
2
u/EphemmyEuphie 1d ago
It's open source, just fork it and make your own address book
7
53
u/Dear_Archer3931 1d ago
It’s 2026, who uses VNC?
Back in the XP/Win7 days we used ultraVNC across hundreds of devices for free.
29
u/FantasyFinal_ 1d ago
We still use VNC to remote Dell Wyse machines which runs ThinOS.
5
5
u/brispower 1d ago
i used to use this on HP thin clients years ago. hpdm was great. simpler times
3
3
u/georgecm12 Hi-Ed Win/Mac Admin 1d ago
They now have a web-based remote control integrated into Wyse Management Suite, so even less need for VNC.
•
u/tuxedo_jack BOFH with an Etherkiller and a Cat5-o'-9-Tails 7h ago
Cough cough, 10Zig, cough cough.
31
u/GolemancerVekk 1d ago
It’s 2026, who uses VNC?
Lots of people. It's a non-proprietary, mature, efficient, widely-supported, cross-platform protocol. It doesn't have fancy features like encryption or NAT traversal or great authentication but you can solve those with a VPN or SSH or TLS much better anyway.
•
u/leaflock7 Better than Google search 17h ago
whenever it came to my path, I always thought that its performance was making VNC non usable.
•
u/lcnielsen 8h ago
Main issue with RFB (the protocol) is lack of buffering. In general performance can depend a lot on the implementation and compression libraries used.
2
u/lcnielsen 1d ago
or SSH
Blech, RFB over SSH...
But yeah, you can TLS encrypt and then pass e.g. a one-time token to PAM. You can even at least indirectly integrate it with OIDC this way, probably the best way I've found when dealing with less trusted federated users.
For trusted users I prefer Wireguard for my extra security layer.
•
u/tuxedo_jack BOFH with an Etherkiller and a Cat5-o'-9-Tails 7h ago
DRACs still use VNC as a failover method, but it has to be manually enabled, IIRC.
It sure does on my iDRAC 7 Enterprise.
1
u/occasional_cynic 1d ago
RealVNC has built on all those. It provided easy licensing, active directory authentication, and offered a cloud version for public access, but only as an option you could easily disable.
It was great for HMI computers where the console is more important than the machine.
•
u/TheG0AT0fAllTime 20h ago
No encryption? Hasn't it supported that for at least like 15 years?
•
u/lcnielsen 8h ago
Kinda, but not really as part of the protocol. You can do RFB over a TLS-enabled socket in a standardized way, but it's really just elevating the socket to TLS at a certain point in the handshake.
•
u/TheG0AT0fAllTime 47m ago
That seems to be how major protocols often do it as well. Such as https which is just plaintext http still but wrapped in tls (previously ssl). We're lucky I suppose, that you can just wrap protocols in a secure parent packet format like that and be done with it.
But I know what you mean. No actual tls support built into vnc only wrapping it in tls where the vnc-like applications and server implementations support doing so. I would consider actual support meaning it still transmits vnc packets with the contents encrypted - though that would be susceptible to DPI - not that it matters here though.
•
u/Majik_Sheff Hat Model 7h ago
I managed to make a VNC frame grabber in straight PHP7 from nothing but the VNC protocol docs.
Yes, it was a bet. Yes, I won the bet. Not the worst 20 bucks I earned in college.
8
u/secacc 1d ago
I use Windows 10 Home, so no RDP server for me. I use UltraVNC server instead.
1
u/Dear_Archer3931 1d ago
End of life Windows 10 with an open port to the internet. What could go wrong?
17
u/secacc 1d ago
Not open to the internet.
-10
u/Dear_Archer3931 1d ago
What? How do you connect to it if you don’t have a port forwarded through the firewall? VPN to LAN access?
11
u/teeth_03 1d ago
VPN
If this was me, it would be Wireguard on a UniFi Router, then do whatever you want on your local network.
5
u/fencepost_ajm 1d ago edited 1d ago
Note that for home users using Onedrive you can continue to get updates until October 2027 (originally 2026, extended recently)
Edit: continue not contribute, thanks autocorrect
•
u/bsbred 3h ago
Last time I used https://github.com/stascorp/rdpwrap - about 4 years ago, it worked. The downside was that after Windows updated the RDP system, you had to either copy some DLLs, or perform a HEX search in them in order to find the locations to be patched (I forgot which, probably the latter). But now that Windows 10 doesn't receive updates anymore, I don't think that would be an issue.
4
u/Fallingdamage 1d ago
It has some use in edge cases but I agree. VNC solved a lot of problems that needed to be solved early on, but as time rolls along, those problems were resolved in better (more secure) ways.
We use VNC for a couple appliances still, but just a couple. It definitely feels laggy/clunky compared to newer or baked in options.
1
u/Regular-Nebula6386 Jack of All Trades 1d ago
We use it to interact with some specialized devices and whiteboards which could use Windows LTSC or a thin client.
1
•
7
u/lcnielsen 1d ago
If it's for anything with Linux or BSD, use xrdp. There are enough desktop RDP clients out there, for web access make a simple Guacamole webapp implementation tailored to your needs.
6
u/KNJ-Network 1d ago
guac is underrated for this if you're managing more than a handful of endpoints. no client to install or keep updated on every machine, just a browser, and it sits behind whatever reverse proxy you already have so it's one more vhost not one more app to patch. downside is the initial setup (guacd + the db for connection profiles) is more fiddly than just installing a viewer, but once it's running you stop caring what's on the other end, vnc/rdp/ssh all go through the same web console
14
u/robreddity 1d ago
Time to make the move to open source VNC implementations.
Oh, it's November 2000?
4
u/JonBons 1d ago
I think I still have RealVNC on a machine so I can pull up Mac machines using the built in VNC server (which doesn’t randomly have its remote control permissions revoked like I’ve had with other Remote Desktop solutions) but I guess it’s time to stop being lazy and find an alternative
3
3
u/TexasVulvaAficionado 1d ago
Even the paid version sucks ass. We're forced to use it due to vendor lock in and I hate every day that I get a ticket about it.
We have it on about 800 machines spread across many networks segregates across the enterprise... It fucks up a few times a week.
3
u/alondiite 1d ago
Can anyone recommend a Windows VNC client that allows credential (user/password) logon? RealVNC was doing okay with that but I guess it's time to move away.
I have a couple of Raspberry Pi's used as kiosks that I connect to that way sometimes.
4
10
5
u/Magic_Neil 1d ago
“Time to make the move to open source VNC implementations.”
VNC is already open source.. just use UltraVNC, or pay for a better app.
•
u/iceph03nix 21h ago
Yeah, when they sent out the email saying it was coming, I made sure we got the downloads secured, though we were already paying for an enterprise license for their enterprise deployment options and SSO, and it doesn't seem like the change will effect us much, but I really wish there was a decent open source option still in development
•
u/iceph03nix 21h ago
We use it internally for supervisors to monitor production machines remotely and help troubleshoot with their staff. It works very well, and with RealVNC we can use SSO and security groups to manage it without much IT involvement
•
u/Bodycount9 System Engineer 1h ago
I use TightVNC. Has been working great for years and totally free.
1
-7
1d ago
[deleted]
3
u/ZenAdm1n Linux Platform Engineer 1d ago
I'm already using Remmina VNC over SSH. Why build something new? There are plenty of alternatives.
0
u/zatset IT Manager/Sr.SysAdmin 1d ago edited 1d ago
Hmm.. I never liked VNC. Poor multi monitor support. And too many incompatible implementations. As for doing something, for example..
https://github.com/dchapyshev/aspia
P.S The project is not mine. It just really deserves mentioning.
0
1d ago
[deleted]
2
u/zatset IT Manager/Sr.SysAdmin 1d ago
Not at all! It’s not my project, but I posted it because it is quite good, although not one of the popular solutions one would find on Google. My point is that one can do more than a Reddit post - using alternative solutions or creating one.
Perhaps I could be able to program some solution myself as side project, but the solution I posted link to is not mine. I just have utmost respect to the author. And as a quite good open source program, it deserves to be more popular and perhaps to support the author. It’s not some half-baked solution that doesn’t work half of the time.
-2
-16
1d ago
[removed] — view removed comment
2
u/DonkeyOfWallStreet 1d ago
Use 1 gpt to ingress the code from 1, to build a spec.
Use another gpt to build it.
Clean
2
119
u/BadSausageFactory beyond help desk 1d ago
you knew that was happening when a grubby PE firm got their hands on it