Develop the initial iteration of the GUI application, featuring seamless integration with the VNC console for local execution.

Subtasks

• Placeholder

Next project placeholder

Tasks

• Placeholder

Next

• #7
• Check out backlog (#9) for next project ideas

Construct the preliminary version of the mTLS VNC proxy, emphasizing secure and precise traffic navigation.

Subtasks

• Placeholder

Next project placeholder

Tasks

• Placeholder

Next

• #4
• Check out backlog (#9) for next project ideas

Welcome to the project backlog, the central repository for our new ideas and upcoming tasks. This space serves as the launchpad for work items that will be moved into active development for our projects.

Tasks

• #14
• #15
• #16
• #17
• #18
• #19
• #20
• #21
• #22
• #23
• #24
• #25
• #27

Secure mTLS Hosting Manager Project

We are embarking on the development of an x509 SSL-based zero-trust hosting service manager, initiating with a virtual server management application that incorporates VNC support. This early phase is designed to provide VNC console access to a singular virtual server, laying the groundwork for subsequent expansions. Future developments will encompass a broad range of functionalities, including support for multiple hosts, server management capabilities (stop, restart), DNS configuration, and streamlined virtual server provisioning.

The project will focus on the creation of two pivotal components:

1. Desktop GUI Application: This component will feature an integrated noVNC client within a standalone graphical user interface, complemented by an embedded local HTTP service. This service will act as a WebSocket proxy, forwarding traffic to a remote mTLS proxy component. Authentication will be secured through mTLS x509 client certificates, ensuring a trusted communication channel.
2. mTLS VNC Proxy: Situated on the server side, this proxy will authenticate client certificates, facilitating the appropriate routing of traffic to the designated VNC server on the remote end.

Both elements will be engineered using Go, drawing upon the successful prototypes previously developed in this language.

Development Strategy

Our project management approach categorizes work into three hierarchical levels: Project, Task, and (optional) Subtask. This document represents the project-level issue, the foundational tier in our structure. Each project is sequentially linked to its predecessor, ensuring a coherent and progressive development cycle.

Project Tasks

• #26
• #10
• #11
• #12
• #13
• #28

Next

This project signifies the initial step toward creating a comprehensive and secure hosting solution. By concentrating on these foundational aspects, we aim to construct a scalable and secure framework that caters to the dynamic requirements of zero-trust hosting services.

• #2
• Check out backlog (#9) for next project ideas.

Compile detailed documentation to facilitate user comprehension and engagement with the software.

Next project placeholder

Tasks

• Placeholder

Next

• #3
• Check out backlog (#9) for next project ideas

Next project placeholder

Tasks

• Placeholder

Next

• Check out backlog (#9) for next project ideas.

Proof of Concept: Integrated NoVNC, WebSocket Proxy, and GUI in a Single Binary

Overview

Our team has successfully developed a proof of concept (PoC) that combines several key functionalities into a single, efficient binary executable written in Go. This executable not only hosts an embedded HTTP server to serve NoVNC content from its GitHub repository but also features an integrated WebSocket proxy for securely directing traffic to a remote host via SSH port forwarding. Importantly, this solution includes a webview integration, presenting itself as a local GUI application, which significantly enhances user interaction and accessibility.

Key Features

• Unified Single Binary: Incorporates an HTTP server, WebSocket proxy, and webview GUI into one standalone executable for simplicity and ease of use.
• NoVNC Integration: Directly serves NoVNC from its official repository, enabling remote desktop access within the application.
• WebSocket Proxy: Facilitates secure traffic routing to remote hosts through SSH port forwarding, ensuring a secure connection for VNC sessions.
• Local GUI Application: Utilizes webview to provide a native GUI experience, allowing users to interact with the NoVNC session in a more intuitive and integrated manner. Required later for user friendly mTLS experience and possible hardware protected USB security tokens / smartcards.

Progress and Next Steps

With the core concept proven, the project is poised for further development and refinement:

• Security Improvements: Explore implementing mTLS for WebSocket connections to bolster security and trustworthiness.
• Performance and Scalability: Assess and enhance the performance of the embedded server, WebSocket proxy, and GUI responsiveness to support a broader range of use cases.
• GUI Enhancements: Focus on improving the GUI design and functionality for an even smoother user experience, including customization options and session management.
• Comprehensive Testing: Expand testing scenarios to cover various environments, network conditions, and user workflows to identify and address potential issues.

Conclusion

This PoC successfully demonstrates a novel approach to remote server management, integrating essential functionalities into a user-friendly, secure, and efficient application. As we move forward, we look to the community for feedback, insights, and contributions to further refine this solution, paving the way for a versatile tool in remote desktop access and server management.

• See #1 for what's next!

Implement a robust configuration system for server-side access control, enabling precise management of access permissions.

Subtasks

• Placeholder

Next project placeholder

Tasks

• Placeholder

Next

• #8
• Check out backlog (#9) for next project ideas

Next project placeholder

Tasks

• Placeholder

Next

• #6
• Check out backlog (#9) for next project ideas

Develop and test webview GUI application, featuring seamless integration with web based SSH terminal for remote command line access.

Subtasks

• Placeholder

Next project placeholder

Tasks

• Placeholder

Next

• #5
• Check out backlog (#9) for next project ideas