需先在项目中配置 IAP 并授予访问权限,否则无法连接;连接依赖 Google Cloud 账号认证与 IAP 权限配置;项目非 Google 官方支持产品,问题需自行排查

iap-desktop
GoogleCloudPlatformApache-2.0活跃维护一款 Windows 桌面客户端,通过 Google Cloud 的 IAP 零信任通道连接 Linux 和 Windows 虚拟机,无需开放公网端口即可使用远程桌面和 SSH。
IAP Desktop is a Windows application that provides zero-trust Remote Desktop and SSH access to Linux and Windows VMs on Google Cloud.
下载并运行 IapDesktopX64.msi(x64);或 IapDesktopX86.msi(32 位)、IapDesktopARM64.msi(arm64)Windows 10 和 11,提供 x64、x86、arm64 安装包,无需管理员权限;README 未说明其他硬件要求
Windows 上通过 IAP 零信任访问 GCP 虚拟机的远程桌面与 SSH 客户端
一款 Windows 桌面客户端,通过 Google Cloud 的 IAP 零信任通道连接 Linux 和 Windows 虚拟机,无需开放公网端口即可使用远程桌面和 SSH。
核心能力
- 自动管理 IAP TCP 隧道并隔离其他用户访问
- 支持多标签页并行 RDP 与 SSH 会话
- 通过 SFTP 上传下载文件
- 自动生成 Windows 凭据并用 CNG 本地加密存储
- 自动创建并发布 SSH 密钥到 OS Login 或 metadata
容易踩的坑
- 2.50.1825最新正式版2026-06-24 · 2026-06-24 01:41 UTC
Release 2.50 introduces the following new features:
- Global connection settings: You can now configure connection settings that apply to all projects by right-clicking Google Cloud in the Project Explorer window and selecting Connection settings. Global connection settings are inherited across all projects, zones, and VM instances.
- SSH shortcuts: The terminal now additionally supports Ctrl+Shift+C and Ctrl+Shift+V for copying and pasting text.
- Connecting to databases: IAP Desktop now supports SQL Server Management Studio 22 and more versions of the MySQL, MariaDB, and PostgreSQL clients, including the latest ones.
In addition, the release includes several stability improvements and fixes for the following issues:
- Copying or pasting text to the terminal could work unreliably.
- Checking for updates sometimes failed because of rate limit exhaustion.
- Certain display scaling configurations could cause IAP Desktop to crash when initiating an RDP connection.
IAP Desktop is developed and maintained by jpassing.
- 2.49.17972026-03-25 · 2026-03-25 00:37 UTC
查看更新说明
Release 2.49 introduces several quality improvements, including the following:
- You can now create new profiles by using the Profile > New profile... menu item.
- When IAP Desktop can't connect to a Windows VM, the error message now includes more detailed information.
The release also contains fixes for the following issues:
- Sign-in: On some Windows machines, signing in to IAP Desktop failed with "access denied" or "connection refused" errors after applying the latest Windows updates. (#1696)
- Project Explorer: Loading the list of projects could fail when IAP Desktop wasn't able to determine the status of one or more VM instances. (433036592)
IAP Desktop is developed and maintained by jpassing.
- 2.48.17682025-12-02 · 2025-12-02 01:05 UTC
查看更新说明
Release 2.48 introduces several quality improvements and fixes, including the following:
- SSH bracketed pasting: When pasting text to a terminal, IAP Desktop now uses bracketed pasting only if the text spans multiple lines. This fixes an issue where bracketed pasting broke the ability to paste passwords to a
sudopassword prompt. - More resilient handling of metadata-based SSH keys: When uploading an SSH public key to the metadata of a Google Cloud project that contains invalid or malformed keys, IAP Desktop now ignores those keys and appends your new key. Previously, IAP Desktop validated existing keys, which could cause the key upload to fail.
- Remote Desktop: When connecting to the Remote Desktop of a VM fails, IAP Desktop now provides more detailed error information.
IAP Desktop is developed and maintained by jpassing.
- SSH bracketed pasting: When pasting text to a terminal, IAP Desktop now uses bracketed pasting only if the text spans multiple lines. This fixes an issue where bracketed pasting broke the ability to paste passwords to a
- 2.47.17522025-08-05 · 2025-08-05 01:46 UTC
查看更新说明
Release 2.47 introduces several improvements and fixes, including the following:
- OS Login for workforce identity users: This version restores the ability for workforce identity users to use OS Login. This feature was available before, but recently broke due to a breaking change in the way the OS Login v1beta API supports certificate signing.
- Hung SQL Server or HTTP connections: SQL Server or HTTP connections, when tunneled using IAP Desktop, could hang when attempting to perform larger downloads. (#1644)
- Unintended re-opening of RDP sessions: Selecting a VM in the Project Explorer could, under certain circumstances re-open a previously closed remote desktop session. (418214603)
IAP Desktop is developed and brought to you by jpassing.
- 2.46.17372025-04-29 · 2025-04-29 22:55 UTC
查看更新说明
Release 2.46 introduces a number of incremental improvements:
- Terminal copy/paste on click: You can now copy terminal output by selecting text and left-clicking the terminal. Similarly, you can use a right-click to copy the selected text and immediately paste it. The behavior is similar to what you might be used to from the Windows-builtin terminal.
- Terminal scrolling: You can now use Ctrl+PageUp/Ctrl+PageDown to scroll the terminal. These new shortcuts are active by default, but you can disable them under Tools > Options > Terminal. (#1611)
- Using microphones over RDP: When you connect to a Windows VM, you can now share your local microphone so that you can use it within the RDP session. Microphone sharing is disabled by default and you can enable it in the VM's connection settings.
In addition, the release includes several stability improvements and component updates.
IAP Desktop is developed and brought to you by jpassing.
用户点评
登录用户的真实使用记录,可按版本和硬件筛选还没有人点评。第一个说出真实体验的人最有价值。
IAP Desktop
IAP Desktop is a Remote Desktop and SSH client that lets you connect to your Google Cloud VM instances from anywhere.
Access Linux and Windows VMs from anywhere
IAP Desktop uses Identity-Aware-Proxy (IAP) to connect to VM instances so that you can:
- Connect to VM instances that don’t have a public IP address
- Connect from anywhere over the internet
Together, IAP Desktop and Identity-Aware-Proxy (IAP) let you apply zero-trust security to your VMs:
- Apply fine-grained access controls that define who can access which VM
- Use access levels to restrict access by time or location
- Use BeycondCorp Enterprise to limit access to trusted devices
The application automatically manages IAP TCP tunnels for you, and protects them so that no other users or programs can access them.
Connect to Windows VMs with Remote Desktop
IAP Desktop is a full-featured Remote Desktop client that lets you:
- Use multiple Remote Desktop sessions at the same time
- Switch between full-screen and tabbed Remote Desktop sessions
- Upload and download files over SFTP
To help you authenticate to Windows VMs, IAP Desktop can:
- Automatically generate Windows credentials by using the Compute Engine guest agent environment
- Encrypt and store your Windows credentials locally
:arrow_forward: Show screencast
Connect to Linux VMs with SSH
IAP Desktop includes an SSH client and terminal so that you can:
- Use multiple SSH sessions in parallel, and switch between them using tabs
- Upload and download files using SFTP
To help you authenticate to Linux VMs, IAP Desktop can:
- Automatically create and publish SSH keys to OS Login or metadata
- Use OS Login 2-factor authentication
- Store our SSH keys locally using Windows CNG
:arrow_forward: Show screencast
Manage VMs across projects
IAP Desktop gives you a consolidated view of your VMs and lets you:
- Connect to VMs across multiple projects and Google Cloud organizations
- View diagnostics information such as logs and serial port output
- Remotely join a VM to Active Directory
- Perform other common operations such as starting or stopping VMs
:arrow_forward: Show screencast
Connect to SQL Server and other server applications
You can use IAP Desktop to let client applications connect to your Google Cloud VMs through IAP: Right-click a VM, select the application to launch, and IAP Desktop automatically connects the application through an IAP TCP forwarding tunnel.
Supported client applications include:
- SQL Server Management Studio (supporting Windows authentication and SQL Server authentication)
- MySQL Shell
- Chrome (to connect to management portals and other internal websites)
- Custom applications
Learn more about IAP Desktop
Get started
- Install IAP Desktop
- Configure IAP in your project
- Connect to a Windows VM
- Connect to a Linux VM
- Connect to SQL Server
- Connect to VMs from within a web browser
Use the tool windows
Customize IAP Desktop
Administer IAP Desktop
IAP Desktop is an open-source project developed and maintained by the Google Cloud Solutions Architects team. The project is not an officially supported Google product.
All files in this repository are under the Apache License, Version 2.0 unless noted otherwise.