PAM

Transparent Sessions Client

The transparent session client is a user-space TCP proxy that intercepts outbound connections to configured targets and routes them through the CoreLink session broker. Users run their normal ssh, psql, or mongosh commands unchanged -- the proxy transparently obtains JIT approval, injects ephemeral credentials, and tees the session to the recording pipeline.

No TUN/TAP interface, no kernel extension, no root privileges required. The client reads a simple TOML config file listing which host:port tuples should be intercepted and presents a system tray UI for approval prompts.

Transparent Sessions Client screenshot

Key Configuration

  • Interception rules (host, port, protocol)
  • Local listener address
  • Approval prompt style (tray, CLI, browser)
  • Fallback behavior when broker unreachable
All documentation Question about this? Talk to us