apache/guacamole-server
Guacamole Server
Apache Guacamole is a clientless remote desktop gateway that translates RDP, VNC, and SSH protocols into browser-based sessions. It acts as a remote desktop protocol proxy, allowing platform-independent access to remote machines without requiring specialized client software or plugins.
The system functions as an enterprise remote access gateway, integrating with LDAP and Active Directory to manage permissions via corporate credentials. It includes security mechanisms such as multi-factor authentication, connection access restrictions, and the ability to retrieve sensitive credentials from external secure vaults.
The gateway provides session recording and playback capabilities to capture remote desktop activity for security auditing and compliance. It also offers interfaces for embedding these remote desktop gateway capabilities into other software applications.
Features
- Clientless Access - Provides secure access to remote machines via a web browser without requiring specialized client software or plugins.
- Remote Desktop Protocol Translation - Translates various remote desktop protocols into a unified format for delivery through a web browser.
- Remote Protocol Proxies - Implements a proxy that bridges remote protocol servers to clients, decoupling the browser from native protocols.
- Remote Desktop Protocols - Bridges various remote desktop standards to web-compatible formats without requiring client-side software.
- Remote Access Gateways - Provides a secure entry point for remote infrastructure with multi-factor authentication and secret vault integration.
- Enterprise Identity Providers - Connects the gateway to LDAP and Active Directory for centralized organizational authentication and permission management.
- Identity Provider Integrations - Integrates with external identity providers to synchronize user identities and manage access using corporate credentials.
- Protocol Plugins - Employs a modular architecture that allows new communication protocols to be integrated into the core engine via plugins.
- Remote Session Recorders - Captures and stores remote desktop traffic into logs for later playback and security auditing.
- Multi-Factor Authentication - Implements multi-factor authentication to provide an additional layer of security before granting access to remote sessions.
- Connection Access Restrictions - Restricts which users can reach specific remote machines based on predefined login and connection constraints.
- Event-Driven Architectures - Utilizes an asynchronous event-based processing model to manage real-time user interactions and desktop updates.
- Remote Session Audits - Records and tracks administrative activities performed during remote sessions for security compliance.
