Details of the inquiry
Because our company mainly undertakes cloud construction projects, we are looking for a way to build a remote testbed that can test the environments of various clients.
It would be even better if the method can be used without installing a program on the accessor’s device and can support various types of devices.
A VPN can be considered, but it does not seem suitable for this situation
A VPN ultimately requires installing a dedicated program or a browser plug-in program on the access device.
In addition, the cost burden of introducing an expensive VPN gateway cannot be avoided, and Open VPN has limitations such as speed and location.
Also, a VPN does not seem suitable as an environment for a simple remote testbed intended for only a small number of users.
We recommend Guacamelo, which is Apache open source
Because Guacamelo is open source developed through the Apache Project, it can be used without a cost burden. The environment can be prepared simply by building and configuring a Guacamelo server on Linux such as Ubuntu/CentOS. In addition, an accessor needs only a web browser and, after appropriate authentication, can use the system through an interface almost identical to an actual system access environment.
The Guacamelo architecture has the simple structure shown below
Install the Guacamelo Server according to the configuration above, and apply the settings that match what is needed on the server.
From their own devices, users connect to the Guacamelo Server with a web browser and, through authentication, can use equipment such as the servers on the internal network that are provided.
The target systems that each user or group can access can be configured according to the security policy.
If you want to strengthen Guacamelo user authentication, you can configure various additional user authentication methods such as Active Directory, LDAP, and OTP.
If you want to monitor and analyze accessor records, you can integrate the open source ELK-stack with the Guacamelo Server and, using Elasticsearch’s excellent APIs, build even a monitoring dashboard with only simple configuration.
Apache Guacamelo is used globally for a variety of purposes.
The various advantages of Guacamelo mean it is used globally for a variety of purposes.
An IoT Remote Training Platform built at a research institute in Japan operates a Remote Training Platform using Docker and Guacamelo on an Ubuntu server.
Our company has also built an access environment to an internal testbed using Guacamelo, so that engineers on external networks can freely perform security-measure tests, assessment/exploit tests, and similar work.
* Business and related inquiries: T) 02-322-4688, F) 02-322-4646, E) info@wikisecurity.net