General

FastX

Overview

This guide explains how to access and use the modern FastX service at SLAC using both the browser‐based client and the desktop client.

Rocky 9 Linux
- Active Directory authentication
  - If you have a Heimdal Kerberos account, and need to create an Active Directory Kerberos account, you can use this self-service process to create your Active Directory account:
    - https://ad-account.slac.stanford.edu, or you can contact the SLAC IT Service Desk and request to have an Active Directory account created.
- SLAC IT TrueNAS Storage appliance
  - Shared TrueNAS home directory (Coming Soon)
  - SLAC IT Storage Platform and AFS Migration (login required to view)
    - TrueNAS group space request form, to replace/migrate AFS group space
- DUO MFA installed
- Specs - 3 clustered servers, each with:
  - 32 vCPUs
  - 128 GB of memory
FastX Version 3.3.65
- 3 servers in a nats cluster configuration. Cluster load-balances to the node with the least sessions
Audio playback is not supported by FastX.

Use the load-balanced name fastx.slac.stanford.edu to connect to the FastX cluster.

The cluster consists of 3 nodes (fx3a, fx3b, and fx3c).
You do not need to connect to an individual node directly – using the load-balanced hostname allows you to access any of your FastX sessions on any of the nodes.

Open Your Browser:
- Use a supported browser (Chrome, Firefox, Safari, Brave or Microsoft Edge).
Navigate to the URL:
- Enter: https://fastx.slac.stanford.edu:3300
Authenticate:
- Log in with your SLAC Active Directory credentials.
Complete DUO Multi-Factor Authentication. (using the push prompt or passcode; do not cancel the prompt).
Launch a Session:
- Option A: Click on an application icon to launch a session.
- Option B: Click the plus sign within the circle to start a new session.
Desktop Environment:
- Only XFCE4 is available, Terminal with X11 supported

For more details, refer to the FastX Browser Client Guide.

Download and Install:
- Download the latest FastX 4 Client from:
  https://www.starnet.com/download/fastx-client
  (Note: FastX Version 3 is compatible but may not support DPI scaling correctly.)
Launch the FastX 4 Client.
Add a New Session:
- Click the plus (+) icon.
- Enter Connection Details:
  - Connection type: SSH
  - Host: fastx.slac.stanford.edu
  - User: Enter your SLAC username.
  - Port: 22
    - (Do not use “HTTPS ” since is not supported in the desktop client due to a known bug)
- Give a name for connection profile, default to 'fastx'. (It will be saved for you)
Double Click on your connection for 'fastx'
Authenticate:
- Enter your SLAC Active Directory password.
- Complete DUO Multi-Factor Authentication (using the push prompt or passcode; do not cancel the prompt).
Select Session Options:
- After connecting, click the plus sign to choose your desktop environment.
- Desktop Environment: Only XFCE4 is available, Terminal with X11 supported
- Adjust additional session settings (e.g., DPI scaling) as needed.

For more detailed instructions, see the FastX Desktop Client Guide.

Error	Cause	Solution
jwt expired [ TokenExpiredError ]	DUO login took too long to get a response	Login & DUO 2FA with Passcode or Push
SSH Login Failed: All configured authentication methods failed publickey, gssapi-keyex, gssapi-with-mic, password, keyboard-interactive [ AuthError ]	Wrong Password	Use Active Directory(Windows) for login
The FastX 3/4 Desktop End-user software does not work with HTTPS	Bug in the software	Use SSH on port 22 on the App. HTML based HTTPS works without issue.