Skip to main content

Apache Guacamole

Apache Guacamole is a clientless remote desktop gateway (remote access / Virtual Desktop Infrastructure (VDI)) that provides browser-based access to remote desktops and servers using standard protocols.

  • HTML5-based remote desktop access from a web browser without client plugins (remote access)
  • Gateway for Remote Desktop Protocol (RDP), VNC, and Secure Shell (SSH) protocols to centralize remote connectivity (remote access / network connectivity)
  • Server-side architecture with a web application and a proxy daemon for protocol handling (application infrastructure)
  • Extensible authentication and integration via modules and APIs, including database and external identity systems (identity and access / extensibility)
  • Multi-user remote access management suitable for centralized administration of remote desktops and servers (IT operations / remote management)

More About Apache Guacamole

Apache Guacamole is a clientless remote desktop gateway (remote access) that enables users to access remote machines through a standard web browser using remote desktop protocols such as RDP, VNC, and SSH (network connectivity). The project focuses on removing the need for locally installed client software or browser plugins by delivering all remote desktop functionality through HTML5. Users connect to a Guacamole server over Hypertext Transfer Protocol (HTTP) or HTTPS, and the server manages the underlying protocol communication with remote systems.

The architecture of Apache Guacamole follows a tiered model (application infrastructure). At the core is guacd, a proxy daemon that implements the remote desktop protocols and maintains connections to target systems. A separate web application layer communicates with guacd using the Guacamole protocol and exposes an HTTP/HTTPS interface to end users. This separation allows the protocol handling component to run independently of the web front end and supports deployment models where guacd and the web application are hosted on different systems.

Apache Guacamole supports multiple remote access protocols including RDP, VNC, and SSH (remote access / network connectivity), which covers common use cases for remote administration of both graphical desktops and command-line environments. The web interface delivers remote sessions via HTML5 (web technology), enabling interaction through standard browsers on desktops, laptops, and mobile devices without additional client installations. Clipboard transfer, text input, and display rendering are handled within the browser using standard web technologies.

Enterprises and institutional environments deploy Apache Guacamole as a central remote access gateway (IT operations / security access). Administrators define connections to remote systems on the server, manage user accounts and permissions, and provide controlled access to these connections through the web interface. This model allows central governance over which internal systems are exposed, how credentials are handled, and which users may initiate sessions, without distributing connection configurations to individual client devices.

The project provides pluggable authentication mechanisms (identity and access). In addition to simple configurations, Guacamole supports database-backed authentication and integration with external identity systems through extensions. These modules allow organizations to align remote desktop access with existing user directories and policies. The extension system also supports additional features and integrations documented by the project.

Apache Guacamole is developed within The Apache Software Foundation (open-source foundation) and released under the Apache License 2.0 (open-source licensing). It fits in enterprise directories as remote desktop gateway software, remote access middleware, and browser-based VDI-style access infrastructure. Its protocol support and web-based delivery align it with remote administration, secure access to internal desktops and servers, and centralized management of remote connections.