// PLATFORM

Apache Guacamole

[ OPERATOR MFA ]

Clientless remote-desktop gateway

Open & authenticate

guacamole.bluelayersystems.com/guacamole

Operator access only. Runs on a separate, isolated hardened host; every session is authenticated before any target is reachable. Never on the recruiter PIN path.

Apache Guacamole is a clientless remote-desktop gateway: RDP, VNC and SSH sessions rendered entirely in the browser, with nothing to install on the client. It is an operator-only surface, never on the recruiter path.

Guacamole runs on its own hardened, isolated host, deliberately separate from the k3s cluster. Every session is gated by Cloudflare Access and authenticates before any target is reachable — defense in depth, not perimeter-only.

Stack

GuacamoleRDPVNCSSH