Termix-SSH/Termix
Termix
Termix is a centralized web-based gateway for managing remote SSH connections and terminal sessions. It provides a browser-based interface that enables users to access, control, and monitor remote servers, containerized applications, and file systems from a single, unified dashboard.
The platform distinguishes itself through robust security and session management capabilities. It integrates with external identity providers for single sign-on and enforces role-based access control to manage user permissions. To ensure reliable administration, it maintains stateful session persistence, allowing users to recover terminal states after disconnects, and supports advanced connectivity features such as SOCKS5 proxy routing, port knocking, and Wake-on-LAN functionality.
Beyond basic terminal access, the platform offers comprehensive infrastructure observability. Users can visualize network topologies, track real-time system performance metrics, and manage Docker containers directly through the interface. It also includes productivity tools like a keyboard-driven command palette and automated terminal session management to streamline administrative workflows.
The system is designed for flexible deployment, supporting containerized installation and configuration within diverse cloud or local environments. It allows for custom URL base paths and provides options for reverse proxy integration to facilitate secure network routing.
Features
- Web-Based Terminal Gateways - A centralized platform for managing remote SSH connections, file systems, and terminal sessions directly through a browser interface.
- Web-Based Remote Terminals - The platform provides a web-based terminal emulator to execute commands and manage remote environments directly from a browser window.
- Remote Management Gateways - The platform links local devices to a centralized gateway to provide secure remote terminal access across multiple platforms.
- SSH Connection Managers - Provides a backend server that acts as a unified web interface for managing and accessing multiple remote SSH connections.
- SSH-Based Infrastructure Managers - Access and control remote servers directly from your browser using a centralized interface for managing SSH connections and terminal sessions.
- Remote Monitoring Dashboards - A management interface for monitoring server performance, visualizing network topology, and controlling containerized applications across multiple remote hosts.
- WebSocket Synchronization Protocols - Transmits bidirectional terminal input and output streams over persistent WebSocket connections to enable real-time interaction within a browser.
- Terminal Session Persisters - The platform restores open terminal tabs and connection states automatically after a page refresh or browser restart to prevent work loss.
- Container Management Dashboards - The platform enables inspecting and controlling containerized applications running on remote hosts using a centralized dashboard interface.
- Container Orchestration Dashboards - Inspect and manage containerized applications on remote hosts through a unified dashboard without needing direct command line access.
- SSH Tunneling - The platform supports establishing secure port forwarding and network tunnels to bridge local and remote services for private communication.
- OIDC Identity Integrations - A secure access layer that authenticates users via external identity providers and enforces role-based permissions for remote server management.
- Single Sign-On Integrations - Authenticate users through external identity providers to enforce secure access policies and role-based permissions across your remote management infrastructure.
- System Health Monitors - Track real-time resource usage and system health metrics for multiple connected servers from a single, consolidated web interface.
- Stateful Session Persistence - Maintains terminal connection metadata and process states in a backend database to allow seamless recovery after browser disconnects.
- OIDC Authentication Plugins - Supports verifying user identities by connecting to external identity providers through standard protocols to manage secure access to the application.
- Remote Access Management - Deploy a centralized gateway to manage server credentials, network tunnels, and SOCKS5 proxies for secure and organized remote system administration.
- Role-Based Access Control - Controls user permissions and administrative capabilities by assigning specific roles to individual accounts to enforce security policies.
- Metric and Performance Monitors - The platform displays real-time system metrics and resource usage statistics for connected remote hosts to track overall health.
- Graphical Interfaces - The platform provides a graphical interface to browse, upload, and download files on remote systems to simplify file system navigation.
- Stealth Port Knocking - Supports executing a sequence of connection attempts to specific ports to trigger firewall access before establishing an SSH session.
- JWT Session Management - Validates user sessions by verifying signed tokens to ensure secure access control across the web interface and backend services.
- Topology Visualizers - The platform provides a graphical representation of connected hosts and their network relationships to help users understand infrastructure layout.
- Cloud Deployment Platforms - Supports hosting the backend and web interface on various platforms including containers or cloud providers to enable remote management.
- Containerized Deployments - Packages the management backend as a portable container image to ensure consistent deployment across diverse cloud and local environments.
- Reverse Proxy Configurations - Allows adjusting web server settings to enable WebSocket support for remote connections through common proxy software like NGINX or Traefik.
- Network Proxy Configurations - Supports SOCKS5 and reverse proxy configurations to tunnel traffic through restricted network environments and secure infrastructure boundaries.
- SOCKS5 - The platform allows proxying terminal traffic through a SOCKS5 server to bypass network restrictions or enhance connection privacy during remote sessions.
- Bearer Token Authentication - Validates incoming requests by verifying JSON Web Tokens in the authorization header to ensure secure access to the interface.
- SSH Key Management - Distributes authentication keys to remote hosts to establish secure, automated access without requiring manual key entry.
- Terminal Session Managers - Enables launching and managing terminal multiplexer sessions automatically whenever a connection to a remote host is established.
