Termix

Termix is a centralized web-based gateway for managing remote SSH connections and terminal sessions. It provides a browser-based interface that enables users to access, control, and monitor remote servers, containerized applications, and file systems from a single, unified dashboard.

The platform distinguishes itself through robust security and session management capabilities. It integrates with external identity providers for single sign-on and enforces role-based access control to manage user permissions. To ensure reliable administration, it maintains stateful session persistence, allowing users to recover terminal states after disconnects, and supports advanced connectivity features such as SOCKS5 proxy routing, port knocking, and Wake-on-LAN functionality.

Beyond basic terminal access, the platform offers comprehensive infrastructure observability. Users can visualize network topologies, track real-time system performance metrics, and manage Docker containers directly through the interface. It also includes productivity tools like a keyboard-driven command palette and automated terminal session management to streamline administrative workflows.

The system is designed for flexible deployment, supporting containerized installation and configuration within diverse cloud or local environments. It allows for custom URL base paths and provides options for reverse proxy integration to facilitate secure network routing.

Features

Web-Based Terminal Gateways - A centralized platform for managing remote SSH connections, file systems, and terminal sessions directly through a browser interface.
Web-Based Remote Terminals - The platform provides a web-based terminal emulator to execute commands and manage remote environments directly from a browser window.
Remote Management Gateways - The platform links local devices to a centralized gateway to provide secure remote terminal access across multiple platforms.
SSH Connection Managers - Provides a backend server that acts as a unified web interface for managing and accessing multiple remote SSH connections.
SSH-Based Infrastructure Managers - Access and control remote servers directly from your browser using a centralized interface for managing SSH connections and terminal sessions.
Remote Monitoring Dashboards - A management interface for monitoring server performance, visualizing network topology, and controlling containerized applications across multiple remote hosts.
WebSocket Synchronization Protocols - Transmits bidirectional terminal input and output streams over persistent WebSocket connections to enable real-time interaction within a browser.
Terminal Session Persisters - The platform restores open terminal tabs and connection states automatically after a page refresh or browser restart to prevent work loss.
Container Management Dashboards - The platform enables inspecting and controlling containerized applications running on remote hosts using a centralized dashboard interface.
Container Orchestration Dashboards - Inspect and manage containerized applications on remote hosts through a unified dashboard without needing direct command line access.
SSH Tunneling - The platform supports establishing secure port forwarding and network tunnels to bridge local and remote services for private communication.
OIDC Identity Integrations - A secure access layer that authenticates users via external identity providers and enforces role-based permissions for remote server management.
Single Sign-On Integrations - Authenticate users through external identity providers to enforce secure access policies and role-based permissions across your remote management infrastructure.
System Health Monitors - Track real-time resource usage and system health metrics for multiple connected servers from a single, consolidated web interface.
Stateful Session Persistence - Maintains terminal connection metadata and process states in a backend database to allow seamless recovery after browser disconnects.
OIDC Authentication Plugins - Supports verifying user identities by connecting to external identity providers through standard protocols to manage secure access to the application.
Remote Access Management - Deploy a centralized gateway to manage server credentials, network tunnels, and SOCKS5 proxies for secure and organized remote system administration.
Role-Based Access Control - Controls user permissions and administrative capabilities by assigning specific roles to individual accounts to enforce security policies.
Metric and Performance Monitors - The platform displays real-time system metrics and resource usage statistics for connected remote hosts to track overall health.
Graphical Interfaces - The platform provides a graphical interface to browse, upload, and download files on remote systems to simplify file system navigation.
Stealth Port Knocking - Supports executing a sequence of connection attempts to specific ports to trigger firewall access before establishing an SSH session.
JWT Session Management - Validates user sessions by verifying signed tokens to ensure secure access control across the web interface and backend services.
Topology Visualizers - The platform provides a graphical representation of connected hosts and their network relationships to help users understand infrastructure layout.
Cloud Deployment Platforms - Supports hosting the backend and web interface on various platforms including containers or cloud providers to enable remote management.
Containerized Deployments - Packages the management backend as a portable container image to ensure consistent deployment across diverse cloud and local environments.
Reverse Proxy Configurations - Allows adjusting web server settings to enable WebSocket support for remote connections through common proxy software like NGINX or Traefik.
Network Proxy Configurations - Supports SOCKS5 and reverse proxy configurations to tunnel traffic through restricted network environments and secure infrastructure boundaries.
SOCKS5 - The platform allows proxying terminal traffic through a SOCKS5 server to bypass network restrictions or enhance connection privacy during remote sessions.
Bearer Token Authentication - Validates incoming requests by verifying JSON Web Tokens in the authorization header to ensure secure access to the interface.
SSH Key Management - Distributes authentication keys to remote hosts to establish secure, automated access without requiring manual key entry.
Terminal Session Managers - Enables launching and managing terminal multiplexer sessions automatically whenever a connection to a remote host is established.

quarkusio/quarkus

15,479View on GitHub

Quarkus is a Kubernetes-native Java framework designed for building high-performance, memory-efficient applications. It utilizes ahead-of-time native compilation to transform Java code into standalone, optimized binaries that eliminate the need for a virtual machine, enabling rapid startup and reduced memory consumption. By performing code augmentation during the build phase, it shifts heavy processing tasks away from runtime, ensuring that applications are optimized for cloud-native environments. The framework distinguishes itself through a unified approach to reactive and imperative program

fosrl/pangolin

21,255View on GitHub

Pangolin is a zero-trust remote access platform designed to provide secure, identity-aware connectivity to private network resources. It functions as a cloud-native network controller that orchestrates encrypted tunnels, traffic routing, and access policies across distributed environments. By leveraging WireGuard for secure data transport, the platform enables authenticated access to internal web applications, terminal sessions, and remote desktops without exposing services to the public internet. The platform distinguishes itself through a declarative infrastructure model that synchronizes n

amidaware/tacticalrmm

4,161View on GitHub

TacticalRMM is a remote monitoring and management platform designed for overseeing endpoints and automating IT administration. It functions as an endpoint management tool and IT automation framework, providing a centralized dashboard for executing scripts, monitoring system health, and managing remote devices across multiple tenants. The platform distinguishes itself through a comprehensive remote administration suite that includes real-time shell access, remote file management, and registry editing. It integrates with third-party remote desktop software and provides a hierarchical policy inh

apify/crawlee

24,002View on GitHub

Crawlee is a web scraping framework designed for building scalable, reliable, and distributed data extraction pipelines. It provides a unified interface for managing headless browser automation and lightweight HTTP requests, allowing developers to handle complex web navigation, dynamic content rendering, and large-scale data collection within a single, modular architecture. The project distinguishes itself through its resource-aware concurrency controller, which dynamically scales task execution based on real-time CPU and memory usage to prevent host machine exhaustion. It also features a rob

Termix-SSHTermix

Features