iap-desktop

GoogleCloudPlatformApache-2.0活跃维护

一款 Windows 桌面客户端,通过 Google Cloud 的 IAP 零信任通道连接 Linux 和 Windows 虚拟机,无需开放公网端口即可使用远程桌面和 SSH。

IAP Desktop is a Windows application that provides zero-trust Remote Desktop and SSH access to Linux and Windows VMs on Google Cloud.

2.50.1825发布于 2026-06-24 01:41 UTC880star181fork同步于 2026-11-07 07:34 UTC

怎么上手

由 README 提炼,执行前请确认
下载并运行 IapDesktopX64.msi(x64);或 IapDesktopX86.msi(32 位)、IapDesktopARM64.msi(arm64)
硬件要求按 README 说明

Windows 10 和 11,提供 x64、x86、arm64 安装包,无需管理员权限;README 未说明其他硬件要求

下载:源码 zip·GitHub Releases(安装包)本站不镜像安装包

项目说明

由 README 自动翻译提炼

Windows 上通过 IAP 零信任访问 GCP 虚拟机的远程桌面与 SSH 客户端

一款 Windows 桌面客户端,通过 Google Cloud 的 IAP 零信任通道连接 Linux 和 Windows 虚拟机,无需开放公网端口即可使用远程桌面和 SSH。

核心能力

  • 自动管理 IAP TCP 隧道并隔离其他用户访问
  • 支持多标签页并行 RDP 与 SSH 会话
  • 通过 SFTP 上传下载文件
  • 自动生成 Windows 凭据并用 CNG 本地加密存储
  • 自动创建并发布 SSH 密钥到 OS Login 或 metadata

容易踩的坑

需先在项目中配置 IAP 并授予访问权限,否则无法连接;连接依赖 Google Cloud 账号认证与 IAP 权限配置;项目非 Google 官方支持产品,问题需自行排查

内容由模型根据 README 生成,可能不完整或不准确,以官方文档为准。看原文 README

最近发版

5 个版本2.50.1825
  1. 2.50.1825最新正式版2026-06-24 · 2026-06-24 01:41 UTC

    Release 2.50 introduces the following new features:

    • Global connection settings: You can now configure connection settings that apply to all projects by right-clicking Google Cloud in the Project Explorer window and selecting Connection settings. Global connection settings are inherited across all projects, zones, and VM instances.
    • SSH shortcuts: The terminal now additionally supports Ctrl+Shift+C and Ctrl+Shift+V for copying and pasting text.
    • Connecting to databases: IAP Desktop now supports SQL Server Management Studio 22 and more versions of the MySQL, MariaDB, and PostgreSQL clients, including the latest ones.

    In addition, the release includes several stability improvements and fixes for the following issues:

    • Copying or pasting text to the terminal could work unreliably.
    • Checking for updates sometimes failed because of rate limit exhaustion.
    • Certain display scaling configurations could cause IAP Desktop to crash when initiating an RDP connection.

    IAP Desktop is developed and maintained by jpassing.

  2. 2.49.17972026-03-25 · 2026-03-25 00:37 UTC
    查看更新说明

    Release 2.49 introduces several quality improvements, including the following:

    • You can now create new profiles by using the Profile > New profile... menu item.
    • When IAP Desktop can't connect to a Windows VM, the error message now includes more detailed information.

    The release also contains fixes for the following issues:

    • Sign-in: On some Windows machines, signing in to IAP Desktop failed with "access denied" or "connection refused" errors after applying the latest Windows updates. (#1696)
    • Project Explorer: Loading the list of projects could fail when IAP Desktop wasn't able to determine the status of one or more VM instances. (433036592)

    IAP Desktop is developed and maintained by jpassing.

  3. 2.48.17682025-12-02 · 2025-12-02 01:05 UTC
    查看更新说明

    Release 2.48 introduces several quality improvements and fixes, including the following:

    • SSH bracketed pasting: When pasting text to a terminal, IAP Desktop now uses bracketed pasting only if the text spans multiple lines. This fixes an issue where bracketed pasting broke the ability to paste passwords to a sudo password prompt.
    • More resilient handling of metadata-based SSH keys: When uploading an SSH public key to the metadata of a Google Cloud project that contains invalid or malformed keys, IAP Desktop now ignores those keys and appends your new key. Previously, IAP Desktop validated existing keys, which could cause the key upload to fail.
    • Remote Desktop: When connecting to the Remote Desktop of a VM fails, IAP Desktop now provides more detailed error information.

    IAP Desktop is developed and maintained by jpassing.

  4. 2.47.17522025-08-05 · 2025-08-05 01:46 UTC
    查看更新说明

    Release 2.47 introduces several improvements and fixes, including the following:

    • OS Login for workforce identity users: This version restores the ability for workforce identity users to use OS Login. This feature was available before, but recently broke due to a breaking change in the way the OS Login v1beta API supports certificate signing.
    • Hung SQL Server or HTTP connections: SQL Server or HTTP connections, when tunneled using IAP Desktop, could hang when attempting to perform larger downloads. (#1644)
    • Unintended re-opening of RDP sessions: Selecting a VM in the Project Explorer could, under certain circumstances re-open a previously closed remote desktop session. (418214603)

    IAP Desktop is developed and brought to you by jpassing.

  5. 2.46.17372025-04-29 · 2025-04-29 22:55 UTC
    查看更新说明

    Release 2.46 introduces a number of incremental improvements:

    • Terminal copy/paste on click: You can now copy terminal output by selecting text and left-clicking the terminal. Similarly, you can use a right-click to copy the selected text and immediately paste it. The behavior is similar to what you might be used to from the Windows-builtin terminal.
    • Terminal scrolling: You can now use Ctrl+PageUp/Ctrl+PageDown to scroll the terminal. These new shortcuts are active by default, but you can disable them under Tools > Options > Terminal. (#1611)
    • Using microphones over RDP: When you connect to a Windows VM, you can now share your local microphone so that you can use it within the RDP session. Microphone sharing is disabled by default and you can enable it in the VM's connection settings.

    In addition, the release includes several stability improvements and component updates.

    IAP Desktop is developed and brought to you by jpassing.

用户点评

登录用户的真实使用记录,可按版本和硬件筛选
共 0 条

    还没有人点评。第一个说出真实体验的人最有价值。

    README 原文

    未翻译

    IAP Desktop

    IAP Desktop is a Remote Desktop and SSH client that lets you connect to your Google Cloud VM instances from anywhere.

    Access Linux and Windows VMs from anywhere

    IAP Desktop uses Identity-Aware-Proxy (IAP) to connect to VM instances so that you can:

    • Connect to VM instances that don’t have a public IP address
    • Connect from anywhere over the internet

    Together, IAP Desktop and Identity-Aware-Proxy (IAP) let you apply zero-trust security to your VMs:

    The application automatically manages IAP TCP tunnels for you, and protects them so that no other users or programs can access them.

    Connect to Windows VMs with Remote Desktop

    IAP Desktop is a full-featured Remote Desktop client that lets you:

    • Use multiple Remote Desktop sessions at the same time
    • Switch between full-screen and tabbed Remote Desktop sessions
    • Upload and download files over SFTP

    To help you authenticate to Windows VMs, IAP Desktop can:

    • Automatically generate Windows credentials by using the Compute Engine guest agent environment
    • Encrypt and store your Windows credentials locally

    :arrow_forward: Show screencast

    Connect to Linux VMs with SSH

    IAP Desktop includes an SSH client and terminal so that you can:

    • Use multiple SSH sessions in parallel, and switch between them using tabs
    • Upload and download files using SFTP

    To help you authenticate to Linux VMs, IAP Desktop can:

    :arrow_forward: Show screencast

    Manage VMs across projects

    IAP Desktop gives you a consolidated view of your VMs and lets you:

    • Connect to VMs across multiple projects and Google Cloud organizations
    • View diagnostics information such as logs and serial port output
    • Remotely join a VM to Active Directory
    • Perform other common operations such as starting or stopping VMs

    :arrow_forward: Show screencast

    Connect to SQL Server and other server applications

    You can use IAP Desktop to let client applications connect to your Google Cloud VMs through IAP: Right-click a VM, select the application to launch, and IAP Desktop automatically connects the application through an IAP TCP forwarding tunnel.

    Supported client applications include:

    Learn more about IAP Desktop

    Get started

    Use the tool windows

    Customize IAP Desktop

    Administer IAP Desktop

    IAP Desktop is an open-source project developed and maintained by the Google Cloud Solutions Architects team. The project is not an officially supported Google product.

    All files in this repository are under the Apache License, Version 2.0 unless noted otherwise.