Ostgate

Ostgate opens SSH terminals, Windows Remote Desktop, an SFTP browser and TCP tunnels to Google Compute Engine VMs that have no public IP. It connects through Google's Identity-Aware Proxy, the way IAP Desktop does on Windows, and needs no gcloud install.

• Sign in with Google in your own browser; several Google accounts work side by side.
• SSH tabs with user keys generated in the Secure Enclave.
• Remote Desktop to Windows VMs with clipboard, a shared folder and resize, built on FreeRDP.
• SFTP with folder uploads and ZIP downloads.
• Tunnels and forwards through a bastion VM to internal load balancers, Cloud SQL private IPs, and ports 443 or 22 under a host name.
• A menu bar panel with live and failed connections.

Traffic goes from the Mac to Google, with no Ostgate server in the path.

Apple Silicon, macOS 26.3 or later. 7-day trial without sign-up.