kasmtech/KasmVNC
KasmVNC
KasmVNC is a web-based VNC server and remote access solution that provides a secure gateway for accessing remote desktop environments through a web browser. It implements the Remote Frame Buffer protocol to transmit pixel data and serves as a secure remote access gateway with integrated user auditing and input controls.
The project distinguishes itself through extensive hardware acceleration, using GPU-accelerated frame capture and graphics acceleration to support graphics-intensive tasks with low latency. It employs a multi-threaded compression pipeline and dynamic encoding negotiation to match server capabilities with browser-supported codecs.
The system covers a broad range of capabilities including multi-user session management, remote session monitoring, and adaptive quality scaling to optimize bandwidth. Security is handled through granular user permission management, clipboard access controls, and keyboard input rate limiting.
The server behavior can be customized via global and per-user operational parameters defined in configuration files.
Features
- Browser-Based Remote Desktops - Provides a web-based interface for accessing and controlling remote desktop environments using VNC.
- Remote Desktop Streaming Servers - Implements a high-performance server that captures and streams desktop environments to web browsers using hardware acceleration.
- GPU Hardware Acceleration - Utilizes GPU acceleration with open source drivers to optimize frame capture and desktop task performance.
- Remote Desktop Streamers - Implements a remote access solution that uses hardware acceleration to increase performance for graphics-intensive tasks.
- Quality Encoding - Selects specific compression formats based on browser support and compute availability to balance quality and speed.
- Stream Bandwidth Optimizations - Reduces data transmission by prioritizing connection speed over image quality and using parallel compression threads.
- Hardware-Accelerated Captures - Uses GPU acceleration and optimized video codecs to stream high-performance desktops with low latency.
- Bidirectional WebSocket Streaming - Transmits desktop image updates from the server to the browser using a persistent bidirectional WebSocket connection.
- Remote Access Gateways - Provides a secure, authenticated gateway for routing external browser requests to remote desktop environments.
- Remote Desktop Streaming - Transmits desktop environments to a web browser using optimized video codecs for secure and efficient remote access.
- RFB Protocol Implementations - Implements the Remote Frame Buffer (RFB) protocol for transmitting pixel data between the server and browser.
- GPU-Accelerated Captures - Uses hardware graphics drivers to capture and encode screen buffers for lower CPU overhead and higher frame rates.
- Multi-Threaded Compression Engines - Distributes image encoding tasks across parallel processing threads to increase throughput for high-resolution displays.
- User Access Management - Provides centralized management for creating users and assigning granular access levels for system administration.
- Framebuffer Delta Updates - Minimizes bandwidth by sending only the modified portions of the screen framebuffer to the client.
- OS Native Input Translation - Translates browser-based keyboard and mouse events into native operating system inputs for remote desktop control.
- Runtime Format Negotiation - Selects the optimal image compression format by matching server capabilities with browser-supported codecs during the handshake.
- Encoding Mode Adaptation - Detects full-screen video and adjusts encoding modes dynamically to maintain smooth playback.
- Clipboard Synchronization - Allows transferring text and binary data between local and remote systems to share formatted text and images.
- Remote Session Recorders - Views and records live remote desktop sessions while analyzing performance metrics and frame timing.
- Video Quality Adjustments - Balances image fidelity and performance by adjusting resolution, frame rates, and compression levels.
- Dynamic Resolution Scaling - Detects high rates of screen change to trigger server-side downscaling and resolution adjustments.
- Network-Based Quality Scaling - Adjusts resolution and compression levels in real time based on network latency and frame timing to optimize bandwidth.
- Remote Access Permission Managers - Manages remote systems with audited user activity, restricted clipboard access, and granular permission controls.
- Clipboard Access Control - Restricts or disables the movement of text between local and remote systems to prevent data leakage.
- Multi-User Session Management - Handles multiple simultaneous users with individual permissions and shared remote control capabilities via a centralized interface.
- Session-Specific Permission Matrixes - Controls access to clipboard and input functions by validating user roles against a session-specific permission matrix.
- Input Event Logging - Records clipboard transfers and keyboard events at varying detail levels for security monitoring.
- User Action Audit Logging - Logs keystrokes and clipboard operations to create audit trails for security and compliance.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
