feat: RDP profiles, sessions and viewer
- Protocol::Rdp with RdpConfig (domain, password mode, certificate policy, TLS-only fallback, fixed or tab-sized resolution, SOCKS5/HTTP proxy, SSH tunnel); migration 008 adds rdp_config and drops the protocol CHECK constraint so new protocols no longer need a rebuild. - Session manager: connect_rdp dials directly, via the shared proxy module (proxy password from the secret store) or an SSH tunnel; the server certificate goes through the known-hosts check (key type rdp-tls); a tab-sized desktop uses the tab's reported pixel size, and resizes wait until the server opens Display Control. Rejected NLA passwords count as auth failures, so a saved one is asked again. - The VNC viewer becomes DesktopView for both protocols; a small adapter turns its keysyms and pointer masks into RDP scancodes, Unicode keys, buttons and wheel events. For RDP, Paste Clipboard types the text. - Profile editor RDP section, Quick Connect, badges, docs. Verified against xrdp in the app: logon, desktop, input, and connections through SOCKS5 and HTTP CONNECT relays. Not verified here: Windows/NLA servers, the SSH tunnel route, and Display Control resizing (xrdp 0.9.24 never opened the channel).
This commit is contained in:
Andy Dixon
+13
-4
@@ -1,6 +1,6 @@
|
||||
# Nexus Terminal Overview
|
||||
|
||||
Nexus Terminal is a native desktop connection workspace for people who manage servers, network services, serial devices, remote desktops, chat networks and repositories every day. It brings SSH, Telnet, RAW TCP, Serial, VNC, IRC, GitHub and local shell sessions into one focused app with secure credential handling, multi-session organisation, file transfer, automation and recording built in.
|
||||
Nexus Terminal is a native desktop connection workspace for people who manage servers, network services, serial devices, remote desktops, chat networks and repositories every day. It brings SSH, Telnet, RAW TCP, Serial, VNC, RDP, IRC, GitHub and local shell sessions into one focused app with secure credential handling, multi-session organisation, file transfer, automation and recording built in.
|
||||
|
||||
It is a single Rust application drawn with egui: there is no webview, no bundled browser engine and no runtime to install. Terminal output goes straight from the network into the terminal emulator, so large outputs stay responsive.
|
||||
|
||||
@@ -25,7 +25,7 @@ Use Nexus Terminal when you need to:
|
||||
- **Telnet** for legacy devices and services.
|
||||
- **RAW TCP** for direct socket interaction, protocol testing and device troubleshooting.
|
||||
- **Serial** for USB-serial adapters, console cables, development boards and network gear.
|
||||
- **VNC** for remote desktop access, with a native viewer.
|
||||
- **VNC** and **RDP** for remote desktop access, with native viewers.
|
||||
- **IRC** for chat networks, with rooms, users and an optional SSH tunnel.
|
||||
- **GitHub** for repository browsing and download workflows.
|
||||
- **Local terminal** for opening a shell on the local machine.
|
||||
@@ -140,6 +140,15 @@ Use Nexus Terminal when you need to:
|
||||
- Clear hints for permission-denied and busy ports.
|
||||
- Works with everything a terminal session supports: recording, triggers, broadcast, snippets, find and split panes.
|
||||
|
||||
### RDP capabilities
|
||||
|
||||
- Native RDP viewer (IronRDP) with Network Level Authentication (CredSSP/NTLM) and optional TLS-only logon for servers such as xrdp.
|
||||
- Server certificate pinned by fingerprint in Known Hosts, checked before credentials are sent.
|
||||
- Direct, SOCKS5, HTTP CONNECT or SSH-tunnelled connections.
|
||||
- Scale-to-fit or 1:1, a fixed resolution or one that follows the tab (Display Control).
|
||||
- Keyboard (scancodes for keys and shortcuts, Unicode for text), mouse and wheel; Ctrl+Alt+Del; type the clipboard into the session.
|
||||
- Password storage modes and domain logon.
|
||||
|
||||
### VNC capabilities
|
||||
|
||||
- Native VNC viewer inside the Nexus Terminal workspace (RFB 3.3–3.8; Raw, CopyRect, Hextile, ZRLE and Tight encodings).
|
||||
@@ -227,7 +236,7 @@ Nexus Terminal: one native desktop workspace for SSH, files, sockets, serial con
|
||||
|
||||
### Suggested subheadline
|
||||
|
||||
Manage SSH, Telnet, RAW TCP, Serial, VNC, IRC, GitHub and local shell sessions from a fast tabbed interface with secure credentials, SFTP file transfer, split panes, snippets, recordings and automation built in.
|
||||
Manage SSH, Telnet, RAW TCP, Serial, VNC, RDP, IRC, GitHub and local shell sessions from a fast tabbed interface with secure credentials, SFTP file transfer, split panes, snippets, recordings and automation built in.
|
||||
|
||||
### Short product description
|
||||
|
||||
@@ -235,7 +244,7 @@ Nexus Terminal helps developers, operators, support engineers, network and hardw
|
||||
|
||||
### Product page feature bullets
|
||||
|
||||
- All-in-one connection workspace for SSH, Telnet, RAW TCP, Serial, VNC, IRC, GitHub and local shells.
|
||||
- All-in-one connection workspace for SSH, Telnet, RAW TCP, Serial, VNC, RDP, IRC, GitHub and local shells.
|
||||
- Native and fast: no webview, with a terminal that stays responsive under heavy output.
|
||||
- Multi-session interface with tabs, pinned sessions, split panes, reconnect and broadcast input.
|
||||
- Rich SSH support including agent auth and forwarding, TOTP, jump hosts, proxies, port forwarding, startup commands, login scripts and host key policies.
|
||||
|
||||
+5
-1
@@ -1,6 +1,6 @@
|
||||
# Nexus Terminal Quick Start
|
||||
|
||||
Nexus Terminal is a native desktop client for SSH, Telnet, RAW TCP, Serial, VNC, IRC, GitHub and local terminal sessions. This page is a shareable quick start for everyday use.
|
||||
Nexus Terminal is a native desktop client for SSH, Telnet, RAW TCP, Serial, VNC, RDP, IRC, GitHub and local terminal sessions. This page is a shareable quick start for everyday use.
|
||||
|
||||
## Get connected in minutes
|
||||
|
||||
@@ -32,6 +32,10 @@ Create a **Serial** profile, pick the device from the list (click refresh after
|
||||
|
||||
Create a **VNC** profile for remote desktop sessions. Use the SSH tunnel option when possible, especially outside trusted networks. Direct VNC is available for isolated or trusted networks, but classic VNC traffic is not encrypted, so Nexus Terminal asks before connecting without a tunnel.
|
||||
|
||||
## RDP remote desktops
|
||||
|
||||
Create an **RDP** profile with the host, your username and, if needed, a domain. Windows servers use Network Level Authentication by default; for xrdp and other servers without it, tick **Allow servers without NLA**. The first connection shows the server certificate's fingerprint to trust. Use the **Proxy** or **SSH Tunnel** sections to reach desktops behind a jump host or proxy.
|
||||
|
||||
## File transfers on SSH
|
||||
|
||||
Click the **folder** icon on an SSH tab to open the SFTP browser. You can browse, upload, download, rename and delete files, create folders and bookmark locations.
|
||||
|
||||
@@ -162,6 +162,19 @@ The viewer's toolbar shows the connection state and desktop size, and has button
|
||||
|
||||
Use SSH tunnelling for VNC whenever possible. If a VNC profile has no tunnel, Nexus Terminal warns that the traffic is unencrypted and offers **Connect Anyway**, **Edit Profile** or **Cancel**.
|
||||
|
||||
### RDP
|
||||
|
||||
- **RDP**: domain (optional), password storage mode, **Certificate Policy** and **Allow servers without NLA**. The username, host and port (3389) are the profile's own.
|
||||
- **Display**: **Scale to Fit**, a fixed **Width** and **Height** (0 × 0 fits the tab) and **Resize With Tab**.
|
||||
- **Proxy**: **SOCKS5** or **HTTP CONNECT**, with an optional username and password.
|
||||
- **SSH Tunnel**: carry RDP through SSH, as for VNC. Use either a proxy or a tunnel, not both.
|
||||
|
||||
Nexus Terminal logs on with Network Level Authentication (CredSSP, NTLM), so your password is checked before a session is set up. Servers without NLA, such as xrdp, need **Allow servers without NLA**; the password is then passed to the server's own logon. Kerberos and smart cards are not supported.
|
||||
|
||||
RDP servers usually present self-signed certificates, so the certificate is pinned like an SSH host key: its SHA-256 fingerprint is shown the first time and stored in **Known Hosts**, and a changed certificate offers Reject, Accept Once or Accept & Update. The check happens before any credentials are sent.
|
||||
|
||||
The viewer works like the VNC one: click the desktop to give it keyboard focus, **Ctrl+Alt+Del** sends the key combination, and **Paste Clipboard** types your clipboard's text into the remote desktop (clipboard sharing is not supported yet). With **Resize With Tab**, the remote desktop follows the tab's size on servers that support it (Windows); otherwise the picture is scaled.
|
||||
|
||||
### IRC
|
||||
|
||||
- **IRC**: nick, real name, **Use TLS** (port 6697 for most TLS networks) and an optional server password.
|
||||
|
||||
Reference in New Issue
Block a user