// the find
changkun/occamy
🖥️ a modern remote desktop proxy written in Go
Occamy is a Go-based remote desktop proxy that sits in front of Guacamole's protocol stack, collapsing the guacd daemon and servlet into a single Go binary. It translates between WebSocket clients and RDP/SSH/VNC backends. It's for teams who want Guacamole-style browser-based remote access without running a Java servlet container.
The architecture simplification is real — one Go binary replaces guacd plus the Java webapp, which cuts operational overhead meaningfully. JWT authentication is built in rather than bolted on after the fact. The protocol implementation is vendored C from upstream libguac so the protocol-level correctness isn't hand-rolled Go. Docker-first deployment with a working docker-compose demo lowers the barrier to actually trying it.
Dead since December 2021 — four years of no commits means it's running against an old libguac and none of the upstream Guacamole security fixes have landed here. The 'Occamy protocol' that was supposed to replace Guacamole is mentioned in the readme as future work and never shipped. The web client is a Vue 2 app with npm dependencies that are certainly vulnerable by now. 319 stars and 52 forks is thin for infrastructure you'd put in front of production remote access — there's essentially no community to absorb bugs you find.