Hello,

I stopped using TeamViewer a very long time ago. Since then, I’ve been using DWService and I’m quite happy with it. I like the fact that I can access to the terminal without launching any graphical component on the machine (which is handy for my headless servers, and allows me not to open SSH port). I also like the fact that it works even if my VPN server is down, as I can access remote servers that aren’t accessible via the web when they’re no longer reachable through my VPN.

However, there are a few issues that are bothering me more and more. I’ve switched my mum’s computer to Fedora and, whilst it worked perfectly under Windows, remote control is very buggy under fedora because the connection isn’t great. Furthermore, it’s impossible to access the screen if the computer isn’t unlocked.

So, I’d really like to find a solution that meets my criteria:

  • Accessible via a web browser
  • Ideally open-source
  • Free
  • Ideally self-hostable, but I’m worried that if, for example, my reverse proxy or VPN crashes, I won’t be able to access my machines to debug them?
  • Allows access to servers without a monitor
  • Allows access to computers running Fedora without the need for prior unlocking

Thanks!

  • spaghettiwestern@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    1
    ·
    22 hours ago

    I had the same setup and the same problems with VPN (in my case Wireguard) server availability. While looking for a solution I realized I was trying to solve an architecture problem with software.

    Instead of trying to find a software solution to work around my WG server uptime issues, I moved the Wireguard endpoint to an OpenWRT router. Now if my router is up, my WG endpoint is up and my network is accessible. I’ve been running this configuration for years and it has been 100% accessible.

    I’m comfortable with the security of WG - open ports for WG endpoints are invisible to network scanners because they do not respond at all and appear closed unless they are sent the the correct key. Even if an attacker has some way of know a WG peer is listening on a specific port, cracking a 256-bit key would take trillions of years. I was then free to choose a remote access application without worrying about remote attackers gaining access to my servers because of some company’s failed security.

    FOSS VNC server apps work OK, but I found them somewhat limited so I added NoMachine as my primary option and run both. It’s a commercial app but it’s free, and is one of the only closed source app I use. It can be run 100% locally (although they have a paid option that uses their servers). It allows full control over your servers including file transfer and audio.

    Doesn’t check all your boxes, but it comes close.