kasmtech/KasmVNC
KasmVNC
KasmVNC est un serveur VNC basé sur le web et une solution d'accès à distance qui fournit une passerelle sécurisée pour accéder à des environnements de bureau distants via un navigateur web. Il implémente le protocole Remote Frame Buffer pour transmettre les données de pixels et sert de passerelle d'accès à distance sécurisée avec audit utilisateur et contrôles d'entrée intégrés.
Le projet se distingue par une accélération matérielle étendue, utilisant la capture d'images accélérée par GPU et l'accélération graphique pour prendre en charge les tâches gourmandes en graphismes avec une faible latence. Il emploie un pipeline de compression multi-thread et une négociation d'encodage dynamique pour adapter les capacités du serveur aux codecs supportés par le navigateur.
Le système couvre un large éventail de capacités, incluant la gestion de sessions multi-utilisateurs, la surveillance de sessions à distance et l'ajustement adaptatif de la qualité pour optimiser la bande passante. La sécurité est gérée via une gestion granulaire des permissions utilisateur, des contrôles d'accès au presse-papiers et une limitation du débit des entrées clavier.
Le comportement du serveur peut être personnalisé via des paramètres opérationnels globaux et par utilisateur définis dans des fichiers de configuration.
Features
- Browser-Based Remote Desktops - Provides a web-based interface for accessing and controlling remote desktop environments using VNC.
- Remote Desktop Streaming Servers - Implements a high-performance server that captures and streams desktop environments to web browsers using hardware acceleration.
- GPU Hardware Acceleration - Utilizes GPU acceleration with open source drivers to optimize frame capture and desktop task performance.
- Remote Desktop Streamers - Implements a remote access solution that uses hardware acceleration to increase performance for graphics-intensive tasks.
- Quality Encoding - Selects specific compression formats based on browser support and compute availability to balance quality and speed.
- Stream Bandwidth Optimizations - Reduces data transmission by prioritizing connection speed over image quality and using parallel compression threads.
- Hardware-Accelerated Captures - Uses GPU acceleration and optimized video codecs to stream high-performance desktops with low latency.
- Bidirectional WebSocket Streaming - Transmits desktop image updates from the server to the browser using a persistent bidirectional WebSocket connection.
- Remote Access Gateways - Provides a secure, authenticated gateway for routing external browser requests to remote desktop environments.
- Remote Desktop Streaming - Transmits desktop environments to a web browser using optimized video codecs for secure and efficient remote access.
- RFB Protocol Implementations - Implements the Remote Frame Buffer (RFB) protocol for transmitting pixel data between the server and browser.
- GPU-Accelerated Captures - Uses hardware graphics drivers to capture and encode screen buffers for lower CPU overhead and higher frame rates.
- Multi-Threaded Compression Engines - Distributes image encoding tasks across parallel processing threads to increase throughput for high-resolution displays.
- User Access Management - Provides centralized management for creating users and assigning granular access levels for system administration.
- Framebuffer Delta Updates - Minimizes bandwidth by sending only the modified portions of the screen framebuffer to the client.
- OS Native Input Translation - Translates browser-based keyboard and mouse events into native operating system inputs for remote desktop control.
- Runtime Format Negotiation - Selects the optimal image compression format by matching server capabilities with browser-supported codecs during the handshake.
- Encoding Mode Adaptation - Detects full-screen video and adjusts encoding modes dynamically to maintain smooth playback.
- Clipboard Synchronization - Allows transferring text and binary data between local and remote systems to share formatted text and images.
- Remote Session Recorders - Views and records live remote desktop sessions while analyzing performance metrics and frame timing.
- Video Quality Adjustments - Balances image fidelity and performance by adjusting resolution, frame rates, and compression levels.
- Dynamic Resolution Scaling - Detects high rates of screen change to trigger server-side downscaling and resolution adjustments.
- Network-Based Quality Scaling - Adjusts resolution and compression levels in real time based on network latency and frame timing to optimize bandwidth.
- Remote Access Permission Managers - Manages remote systems with audited user activity, restricted clipboard access, and granular permission controls.
- Clipboard Access Control - Restricts or disables the movement of text between local and remote systems to prevent data leakage.
- Multi-User Session Management - Handles multiple simultaneous users with individual permissions and shared remote control capabilities via a centralized interface.
- Session-Specific Permission Matrixes - Controls access to clipboard and input functions by validating user roles against a session-specific permission matrix.
- Input Event Logging - Records clipboard transfers and keyboard events at varying detail levels for security monitoring.
- User Action Audit Logging - Logs keystrokes and clipboard operations to create audit trails for security and compliance.
