Guacamole

Apache Guacamole provides browser-based access to remote desktops without installing any client software. It acts as a gateway between your users and their target machines, translating standard remote desktop protocols into HTTP traffic. This means administrators can manage servers, workstations, or kiosks from anywhere using just a modern browser.

Guacamole supports SSH, VNC, RDP, Telnet, and Kubernetes connections. It stores connection configurations in a central database or LDAP, and offers session recording, clipboard sync, and two-factor authentication via TOTP. The server stack consists of guacd (the proxy daemon) and a Java servlet running on Tomcat. A JavaScript client renders the remote display in the browser using Canvas and WebSocket. It integrates with any identity provider that speaks LDAP or SAML.

This project suits sysadmins, MSPs, and helpdesk teams who need zero-install remote access across heterogeneous networks. It is open source under the Apache 2.0 license, hosted by the Apache Software Foundation. Many organizations run it as a hardened jump box behind VPNs. Installation requires a Linux server, but the client works on Windows, macOS, and mobile devices equally well.