JumpServer

JumpServer is an open-source Privileged Access Management (PAM) platform and bastion host. It provides IT and DevOps teams with a centralized system to manage and secure access to remote infrastructure through a web browser. By acting as a secure gateway, it eliminates the need for administrators to distribute and manage individual credentials across a wide array of target machines.

The software is deployed as a server on 64 bit Linux environments. It allows users to authenticate once and then access a variety of backend systems without exposing the target servers directly to the public internet. This setup is typically used in corporate environments where auditing and controlling privileged access to production servers is a requirement for security compliance.

Key features

• Browser based access to SSH and RDP endpoints
• Management of Kubernetes cluster access
• Integrated web database client for remote DB connections
• Support for RemoteApp endpoints
• Centralized authentication and access control
• Dedicated web terminal for command line operations
• Graphical protocol connectors for remote desktops
• Integration with Grafana for monitoring dashboards

The architecture is modular, consisting of several specialized components that handle different protocols and interfaces. Lina serves as the web user interface, while Luna provides the web terminal functionality. Protocol connectivity is managed by KoKo for character based protocols and Lion for graphical protocols. For database interactions, the system utilizes the Chen component. The platform is built using Python and the Django framework, providing a structured environment for managing user permissions and session logging.

For Windows environments, the system includes the Tinker Remote Application Connector, while Linux environments can utilize the Panda connector. The platform also supports various proxy connectors for RDP, VNC, and database traffic to ensure that all administrative traffic is routed through the bastion host for monitoring and security purposes.

JumpServer serves as a security intermediary for managing privileged accounts across diverse server environments, providing a single point of entry for infrastructure administration.