Apache Guacamole is a clientless remote desktop gateway that lets you access desktops and servers from any web browser — no client software or plugins to install on the end user’s machine. It brokers connections to VNC, RDP, SSH, Telnet, and Kubernetes-based infrastructure, making it ideal for locked-down networks and browser-only workstations.

Key Features

• Clientless access — No software to install on the client; everything runs in a standard web browser.
• Multi-protocol support — Connect to VNC, RDP, SSH, Telnet, and Kubernetes deployments through one gateway.
• Centralised access — Users authenticate once to Guacamole and get a single portal to all their remote resources.
• Session recording — Audit and replay user sessions for compliance and troubleshooting.
• Extension architecture — Add SSO, LDAP/Active Directory, or database-backed user management through extensions.
• HTML5 interface — Full remote desktop experience rendered via the browser with clipboard integration.
• Server-side deployment — Apache-licensed components run on your own server, giving the gateway a central, auditable position.
• Self-hosted — Deploy the gateway in your DMZ or internal network to broker access without exposing endpoints directly.

Why Use Apache Guacamole?

Guacamole turns any browser into a full remote desktop client, which removes the need to install and update client software across a fleet of machines. Because all connections originate from the central gateway, you can restrict outbound access and keep detailed audit logs of what users connected to and when.

Use Cases

• Help desks granting browser-based access to end-user desktops over RDP or VNC.
• Self-hosters exposing SSH and web consoles to their homelab through a single gateway.
• Organisations that need session recording and centralised authentication for remote staff.

Platform

Linux server · any modern web browser as the client

Licence

Apache License 2.0

Website

guacamole.apache.org