What is GLKVM Cloud?

GLKVM Cloud is a self-deployed lightweight KVM cloud platform built on rttys that lets individuals and small businesses centrally manage KVM devices over the web. It provides web-based SSH terminals, remote desktop control (VNC/WebRTC), batch command execution, script-based device onboarding, HTTP/HTTPS web proxy for embedded devices, and enterprise authentication via LDAP and OIDC. The platform runs in Docker containers (x86_64 and arm64) with a coturn TURN server for WebRTC, and can be installed via a one-line script (x86_64) or manual Docker Compose. It requires at least 1 CPU core, 1 GB RAM, 40 GB storage, and 3 Mbps bandwidth. The software is licensed under Business Source License 1.1 (converting to GPLv3 in 2030), with production use requiring a commercial license.

Should you self-host GLKVM Cloud?

GLKVM Cloud scores 42/100 on selfhost.directory (how scoring works) and ranks #20 of 23 in Remote Access. It has 343 GitHub stars.

It shipped 13 stable releases in the past year. The latest, v2.9.0, came out on 14 October 2026. New versions land roughly every 2 weeks.

Setup is moderate: expect some configuration beyond a single command. An official Docker image is available. It is Other-licensed and written mostly in Go.

Its closest alternative on selfhost.directory is Pangolin (76/100, 23 258 stars). It scores higher overall, so compare the two before you pick. See GLKVM Cloud vs Pangolin side by side.

Features

Batch Operations
Custom SSL Certificates
HTTP/HTTPS Web Proxy
LDAP Authentication
Multi-Platform Support
OIDC Authentication
Private Deployment
Remote Desktop Control
Remote SSH
Reverse proxy mode
Script-based Device Onboarding
TURN Server for WebRTC
User Groups and Device Groups

How to configure GLKVM Cloud

COTURN_IMAGEcoturn/coturn:edge-alpineDocker image for coturn TURN server
Docker image for coturn TURN server
DEVICE_ENDPOINT_HOSTDomain for device remote access (reverse proxy mode only)
Domain for device remote access (reverse proxy mode only)
GLKVM_ACCESS_IPGLKVM access IP seen by devices/users (auto-detect if empty)
GLKVM access IP seen by devices/users (auto-detect if empty)
GLKVM_IMAGEglzhitong/glkvm-cloud:latestDocker image for GLKVM Cloud
Docker image for GLKVM Cloud
LDAP_ADMIN_GROUPAdmin group CNs
Admin group CNs
LDAP_ADMIN_USERSAdmin usernames
Admin usernames
LDAP_ALLOWED_GROUPSComma-separated authorized groups
Comma-separated authorized groups
LDAP_ALLOWED_USERSComma-separated authorized users
Comma-separated authorized users
LDAP_BASE_DNSearch base for user queries
Search base for user queries
LDAP_BIND_DNService account distinguished name
Service account distinguished name
LDAP_BIND_PASSWORDService account password
Service account password
LDAP_ENABLEDfalseEnable LDAP authentication
Enable LDAP authentication
values: true,false
LDAP_PORT389LDAP server port
LDAP server port
LDAP_SERVERLDAP server hostname or IP
LDAP server hostname or IP
LDAP_USER_FILTER(uid=%s)LDAP query filter
LDAP query filter
LDAP_USE_TLSfalseEnable TLS for LDAP
Enable TLS for LDAP
values: true,false
OIDC_ADMIN_GROUPOIDC admin groups
OIDC admin groups
OIDC_ADMIN_USERSOIDC admin users
OIDC admin users
OIDC_ALLOWED_GROUPSAllowed OIDC groups
Allowed OIDC groups
OIDC_ALLOWED_SUBSAllowed OIDC subject IDs
Allowed OIDC subject IDs
OIDC_ALLOWED_USERNAMESAllowed usernames
Allowed usernames
OIDC_ALLOWED_USERSAllowed emails or domains
Allowed emails or domains
OIDC_AUTH_URLOIDC authorization endpoint
OIDC authorization endpoint
OIDC_CLIENT_IDOIDC client ID
OIDC client ID
OIDC_CLIENT_SECRETOIDC client secret
OIDC client secret
OIDC_ENABLEDfalseEnable OIDC authentication
Enable OIDC authentication
values: true,false
OIDC_ISSUEROIDC issuer URL
OIDC issuer URL
OIDC_REDIRECT_URLOIDC redirect callback URL
OIDC redirect callback URL
OIDC_SCOPESopenid profile emailOIDC requested scopes
OIDC requested scopes
OIDC_TOKEN_URLOIDC token endpoint
OIDC token endpoint
REVERSE_PROXY_ENABLEDfalseEnable reverse proxy mode (Nginx in front)
Enable reverse proxy mode (Nginx in front)
values: true,false
RTTYS_ADMIN_NAMEadminAdmin username (letters and digits only)
Admin username (letters and digits only)
RTTYS_DEVICE_PORT5912Device connection port
Device connection port
RTTYS_HTTP_PROXY_PORT10443HTTP proxy port
HTTP proxy port
RTTYS_PASSStrongP@ssw0rdWeb management password
Web management password
RTTYS_TOKENDeviceTokenYouCanChangeMeDevice connection token
Device connection token
RTTYS_WEBUI_PORT443Web UI port
Web UI port
SELFHOST_WEBUI_URLFull URL of the self-hosted cloud WebUI
Full URL of the self-hosted cloud WebUI
TURN_PASSAnotherS3cretTURN authentication password
TURN authentication password
TURN_PORT3478TURN server port
TURN server port
TURN_USERglkvmcloudwebrtcuserTURN authentication username
TURN authentication username
WEB_UI_HOSTRestrict platform access to specific domain
Restrict platform access to specific domain