novnc/websockify
Websockify
Websockify es un proxy WebSocket-a-TCP y servidor de túnel que permite a los navegadores web comunicarse con servidores o aplicaciones que solo admiten conexiones TCP estándar. Funciona como un puente de red y broker de conexiones, traduciendo tramas WebSocket bidireccionales en paquetes TCP crudos para facilitar el acceso remoto del navegador a servicios de backend.
El sistema actúa como una pasarela de sockets segura que admite enrutamiento de sockets multi-inquilino, permitiendo que múltiples clientes sean dirigidos a diferentes destinos de backend basados en tokens de URL únicos o nombres de host. Asegura los datos en tránsito envolviendo las conexiones en cifrado SSL/TLS y utiliza un sistema basado en plugins para autenticar a los usuarios antes de establecer conexiones de backend.
Las capacidades adicionales incluyen un modelo de trabajador multiproceso para escalar cargas de conexión concurrentes y la capacidad de interceptar procesos locales para redirigir la salida de red al flujo del proxy. El proyecto también proporciona herramientas para grabar flujos de bytes de red crudos para depuración y puede servir contenido web estático desde un directorio local en el mismo puerto que el proxy.
El software puede operarse como un demonio para mantener una conectividad persistente sin una sesión de terminal activa.
Features
- WebSocket Proxy Tunnels - Provides a proxy that translates WebSocket traffic into raw TCP packets to enable browser communication with non-WebSocket servers.
- TCP Proxies - Implements a TCP proxy that converts WebSocket traffic from browsers into standard TCP packets for communication with backend servers.
- Tenant Request Routing - Directs incoming WebSocket connections to different backend targets based on unique tokens or hostnames.
- Multi-Target Connection Brokers - Provides a routing system that connects clients to specific backend targets based on request hostnames or URL tokens.
- Multi-Target Socket Routing - Directs multiple clients to different backend targets based on unique URL tokens or hostnames.
- Secure Socket Wrappers - Wraps unencrypted TCP traffic in SSL or TLS to ensure secure data transmission between browsers and servers.
- Token-Based Target Routing - Maps unique URL tokens or hostnames to specific backend TCP destinations to multiplex multiple targets on one port.
- WebSocket-to-TCP Translation - Translates bidirectional WebSocket frames into raw TCP streams to allow browser communication with non-WebSocket servers.
- Connection Authentication Mechanisms - Validates client identities using a plugin-based system before allowing the proxy to establish backend TCP connections.
- TLS Session Wrapping - Wraps raw socket traffic in an SSL/TLS encrypted layer using certificates to secure data in transit.
- TLS-Secured WebSocket Gateways - Acts as a gateway that authenticates users and encrypts data before proxying WebSocket traffic to internal TCP ports.
- SSL/TLS Connection Security - Wraps raw socket traffic in an SSL/TLS encrypted layer using certificates to secure data in transit.
- Token-Based Target Mapping - Connects clients to specific backend targets based on unique tokens provided in the URL or request hostname.
- Process Scaling - Uses a multi-process worker model to distribute concurrent connection loads across multiple CPU cores.
- Local Process Bridging - Provides the ability to launch local processes and intercept their network calls to send WebSocket traffic directly to the program's TCP port.
- Process-Level Interception - Launches target applications as subprocesses and redirects their network output directly into the proxy stream.
- Proxy Connection Authentications - Utilizes a plugin-based system to authenticate users before establishing backend TCP connections.
- Remote Access Tunnels - Enables web-based interfaces to interact with local processes or remote services via secure WebSocket tunnels.
