Beagle OSBeagle OS
LoginCreate Account
USB Passthrough

USB over hardened reverse SSH, not open usbip

Beagle secures USB passthrough by tunneling local device export from the endpoint into the host and then into the assigned VM. The design avoids open usbip ports and relies on per-VM tunnel keys and reverse tunnel ports.

Flow

  1. The thin client exports a local USB device.
  2. A hardened reverse SSH tunnel carries the USB control path back to the host.
  3. The host maps the device to the assigned VM.
  4. The VM receives the device through the attach workflow.

Per-VM tunnel keys and ports

Each VM gets its own SSH tunnel keys and dedicated reverse tunnel ports. This avoids shared trust across the fleet and keeps USB control scoped to the exact streaming target.

Attach and detach operations

Trigger USB attach or detach from the Proxmox UI or through the control plane REST API.

GET  /beagle/usb/status
POST /beagle/usb/attach
POST /beagle/usb/detach

Supported device classes

  • Webcams
  • Printers
  • Security keys
  • Storage devices