No active terminal session
Double-click a saved session on the left or click Session above to start.
Double-click a saved session on the left or click Session above to start.
Enter connection string: e.g. ssh root@192.168.1.100:22 or telnet 192.168.1.1:23
Connect any OpenAI or Ollama compatible endpoint (/v1/chat/completions) for intelligent task generation and AI evaluation. If not configured or unreachable, GoXterm falls back seamlessly to its built-in rule engine.
Running safe, typed security checks concurrently
Secure Remote Network Access
Verifying browser integrity to protect against automated brute-force attacks.
Access web services running on your workstation (e.g. Vite, React, Flask, Go) through GoXterm's reverse proxy without manual SSH tunnels.
Generate an instant, secure remote assistance session. Send the invitation link to your customer to view their screen, provide real-time chat guidance, or remotely control their desktop.
https://.../support/?pin=...
Configure outbound SMTP to receive Two-Factor Authentication (2FA) verification codes and support notifications.
Manage HTTPS security certificates for GoXterm without requiring an external reverse proxy. Supports self-signed fallback, custom enterprise certificates, and automated Let's Encrypt (ACME) with zero-downtime hot-reloading.
Use the built-in 10-year self-signed certificate generated automatically on boot. Best suited for internal LAN testing or when GoXterm is deployed behind a TLS-terminating reverse proxy (such as Caddy, Nginx, or AWS ALB).
| Username | Type | Role | 2FA | Recording | Groups | Email / Phone | Action |
|---|---|---|---|---|---|---|---|
| Loading users... | |||||||
| Token ID | Description | Allowlist | Uses | Status | Action |
|---|---|---|---|---|---|
| No tokens generated yet. | |||||
| Group Name | Description | Members Count | Action |
|---|---|---|---|
| Loading groups... | |||
Integrate GoXterm with corporate LDAP or Microsoft Active Directory to authenticate domain users with their central enterprise credentials.
Enter domain user credentials to test directory search, filter matching, and password verification.
Review terminal sessions recorded in lightweight Asciicast v2 (.cast) format. Recordings are enabled per user.
| Date & Time | User | Session / Target | Protocol | Format | Duration | Size | Actions |
|---|---|---|---|---|---|---|---|
| Loading recordings... | |||||||
When unchecked (recommended zero-trust hardening), mutation operations (POST, PUT, DELETE on vault workloads, sessions, containers, users, groups, settings) can strictly be modified through the interactive web console. Direct automated curl/script mutations without interactive session context receive 403 Forbidden. Headless secret reveals (/reveal) and AI completions are always exempt.
Immutable activity records for logins, MFA events, brute-force bans, and permission changes.
| Timestamp | Status | User | Client IP | Action | Resource | Details |
|---|---|---|---|---|---|---|
| Loading audit logs... | ||||||
All enterprise gateway capabilities (multi-user RBAC, 2FA, corporate LDAP, AI Proxy Gateway) are fully active during your trial. Single-user administrative access is always 100% free forever.
GOX-HOST-LOADING
โน๏ธ This Host ID is anchored in your persistent database volume. It remains permanent across VM reboots, crashes, hypervisor migrations, and snapshot restores.
Copy your Server Host ID above and visit https://goxterm.com/license to order, renew, or generate your official Enterprise Gateway license key.
Enter your cryptographically signed Ed25519 license key. Once activated, all enterprise features are permanently unlocked (offline capable, zero telemetry).
Configure upstream LLM providers (OpenAI, Gemini, Ollama, DeepSeek, Custom). Map each client-side Alias to a target model and route.
https://<host>:8443/v1
{"model": "<alias>"}
| Client Alias | Provider | Target Model | Upstream Base URL | API Key | Status | Actions |
|---|---|---|---|---|---|---|
| Loading configured AI routes... | ||||||
Configure upstream package repositories for Python, Node.js, Go, and Debian/Ubuntu, and enforce real-time CVE blocking.
Repositories are queried sequentially in priority order until the requested package is found, or responds with 404 after all repos have been checked.
| Priority | Ecosystem | Name / Alias | Index / Registry URL | Files / Binary URL | Status | Actions |
|---|---|---|---|---|---|---|
| Loading upstream repositories... | ||||||
/repository/pypi/simple/
/repository/npm/
/repository/go/
/repository/apt/debian/
/repository/apt/ubuntu/
When enabled, any package request containing known CVE vulnerabilities is dropped with HTTP 403 Forbidden.
| Ecosystem | Package | Version | Action | Reason | Delete |
|---|---|---|---|---|---|
| Loading custom package rules... | |||||
Active-Standby clustering with Keepalived Virtual IP (VIP) and real-time SQLite replication.
GoXterm is running in lightweight standalone mode with zero clustering overhead. You can dynamically scale to an Active-Standby high availability cluster without reinstalling or database migration.
Copy this cryptographic token and paste it into Node 2 or Node 3's Join Cluster dialog:
/api/ha/health (200 OK)Virtual IP: 192.168.1.100 (VRRP ID: 51, Interface: eth0). Download Keepalived configurations for your cluster nodes:
Deploying 3 nodes provides automatic tie-breaking during any network split. In a 2-node deployment, verify that physical network links between the nodes are redundant to prevent split-brain conditions.
Customize your public-facing About page (served on /about or /) with structured company bio, service cards, contact details, and a botnet-protected inquiry form.
Configure downloadable packages served via /download/<filename> and featured in your public Download Catalog. Files are managed directly on the host filesystem in the downloads directory.
| Package / Title | Filename & Link | Platform / Category | Storage / Size | Public | Hits | Actions |
|---|---|---|---|---|---|---|
| Loading download packages... | ||||||
Configure payment processor credentials for customer online checkout, automated Ed25519 license issuance, and Stripe webhooks.
/api/hub/payment-webhook.
SSH keys provide military-grade cryptographic security that is immune to brute-force attacks and password phishing.
Open PowerShell, Command Prompt, or Terminal on your local machine and run:
ssh-keygen -t ed25519 -C "goxterm-key"
๐ก Ed25519 is faster, more compact, and more secure than RSA. If legacy compatibility is needed, use ssh-keygen -t rsa -b 4096.
Install your public key (id_ed25519.pub) onto the remote server:
ssh-copy-id username@remote-server-ip
Or manually append it on the server:
~/.ssh/id_ed25519) in Notepad or any text editor, or click Load key from local file.-----BEGIN OPENSSH PRIVATE KEY----- and ending with -----END OPENSSH PRIVATE KEY-----.Your key is protected inside the SQLite database with AES-256-GCM encryption tied specifically to your user account.
Select target container:
Configure global default font family, font size, colors, and cursor style for all SSH, Telnet, and Local Shell terminal sessions. Individual sessions set to "Default" automatically inherit these settings.
proxy.pac.
Target web appliances (e.g. VMware ESXi, Proxmox, iLO, router UIs, and SSO IdP redirects) route through GoXterm with 100% native TLS certificates and cookies preserved, while your normal internet browsing stays completely direct.
Manage logged-in devices and remote panic kill-switch
Update your local account password
Compare any two remote SFTP files or editor tabs with live syntax highlighting, continuous scroll synchronization, 1-click chunk porting (โ / โ), and independent remote saving (Ctrl+S).
For shared accounts, we highly recommend deploying GoXterm as a centralized Bastion Server and obtaining a multi-user license so that team members can access shared sessions securely.
๐ฅ Group and ๐ Public containers with fine-grained access control. When a host password rotates, all authorized engineers seamlessly retain access without manual password sync..gxbkp file is safe to store in public cloud storage (Google Drive, iCloud, Dropbox, OneDrive).
This backup archive is encrypted. Please enter the master passphrase used when this backup was created to decrypt and restore your sessions:
Because you are connected to GoXterm over a web browser, the Network Scanner executes on the GoXterm host server, probing the server's own local subnets and internal LAN/VPC. It cannot reach or discover devices on your client laptop's local Wi-Fi (such as an airport, hotel, coffee shop, or guest network).
.exe, macOS binary, or Linux .tar.gz). Zero installation, drivers, or prerequisites required.
./goxterm on your laptop and open http://localhost:8080 in your browser.