m1k1o/neko
Neko
Neko is a virtual desktop infrastructure platform that provides containerized browser isolation and remote desktop environments. It enables users to host secure, ephemeral browser instances that can be accessed and managed through a standard web browser, ensuring consistent execution across different host systems.
The platform distinguishes itself through its collaborative capabilities, allowing multiple users to view and interact with a single shared browser session in real time. It synchronizes keyboard, mouse, and gamepad inputs from multiple participants while providing integrated tools for real-time chat and file exchange. To maintain performance, the system utilizes hardware-accelerated rendering and adaptive bitrate control, which dynamically adjusts media quality based on real-time network throughput.
The project covers a broad range of administrative and operational requirements, including identity management, session persistence, and granular access control. It supports complex network environments through configurable STUN and TURN integration, reverse proxy support, and customizable firewall traversal settings. Users can further extend the platform by customizing browser environments, applying administrative policies, and offloading graphics processing to dedicated hardware.
The software is distributed as container images with multi-architecture support, and its configuration is managed through a comprehensive framework that includes URL-based parameters and persistent storage mounting for user data.
Features
- Virtual Browser Hosting - Deploys containerized web browser instances that multiple users can access and interact with simultaneously.
- Remote Desktop Infrastructure - Deploys containerized graphical desktop environments that allow users to access and manage remote applications through a standard web browser.
- Remote Desktop Environments - Runs full graphical desktop environments within containers for remote application management.
- Collaborative Browsing Environments - Provides a shared, containerized web browser that multiple users can view and interact with simultaneously in real time.
- Browser Session Management - Enables multiple users to view and interact with a single remote browser instance simultaneously.
- WebRTC Facilitators - Provides WebRTC-based real-time media streaming for remote browser access.
- Low-Latency Streaming - Transmits high-quality audio and video output from a remote virtual environment to clients using low-latency WebRTC streaming protocols.
- WebRTC Configurations - Encodes and transmits virtual display feeds to clients using low-latency WebRTC streaming protocols.
- Containerized Execution Environments - Encapsulates graphical desktop environments within containers for consistent remote execution.
- Private Infrastructure Hosting - Deploys self-contained browser instances within private networks to ensure data privacy and controlled access.
- Self-Hosted Deployment Platforms - Deploys self-contained browser instances on private infrastructure to ensure data privacy and controlled access.
- Media Streaming - Transmits visual and audio output from the virtual browser to clients using adaptive streaming protocols.
- Infrastructure and Tools - Virtual browser running inside a Docker container.
- Multi-User Input Synchronizers - Coordinates keyboard, mouse, and gamepad interactions from multiple users to enable collaborative control within a shared remote session.
- Hardware Acceleration - Configures container images to utilize host hardware graphics acceleration for improved rendering performance.
- Hardware-Accelerated Rendering - Offloads graphics processing and video encoding to dedicated hardware for low-latency remote rendering.
- Panel Access Controls - Restricts user interaction, login, and viewing permissions to ensure administrators maintain authority over the shared browser session.
- Credential-Based Access Controls - Validates user credentials against local or external providers to control access.
- Multi-Architecture Images - Builds and distributes container images compatible with both x86 and ARM hardware architectures.
- External Processor Offloading - Offloads browser graphics and video encoding tasks to a dedicated graphics card to improve overall system performance.
- Synchronous Audio Streams - Captures server-side system audio output for real-time streaming to connected clients.
- Network Connectivity Configurations - Configures STUN and TURN server settings to establish direct peer-to-peer connections and relay traffic through firewalls.
- Stateful Session Persistence - Maintains user login states and session progress across server restarts.
- Session Lifecycle Management - Manages the lifecycle, persistence, and cleanup of ephemeral browser sessions.
- Input Controls - Manages input priority and interaction rules for multiple users in a shared session.
- Browser Data Persistence - Persists browser history, bookmarks, and settings across session restarts via directory mounting.
- Real-time Monitoring - Monitors network throughput to dynamically adjust media quality for stable streaming.
- Remote File Transfers - Enables file uploads and downloads between local clients and remote browser environments.
- Network Security Configurations - Configures network bindings, encryption, and proxy settings to secure traffic for the browser instance.
- Reverse Proxies - Routes external web traffic to the browser instance through web servers to manage encryption and network access.
- Webcam Input Sharing - Transmits local client webcam feeds to the server as virtual video devices.
- Microphone Input Sharing - Transmits local client microphone feeds to the server as virtual audio devices for real-time interaction.
- Network Access Control - Manages network settings to enable remote browser access across local and public network environments.
- Real-Time Network Monitors - Measures network conditions between client and server to dynamically adjust media quality based on real-time throughput capacity.
- Event-Driven Input Handlers - Synchronizes keyboard, mouse, and gamepad inputs from multiple users into a shared session.
