RADIUS integration
Connect FreeRADIUS authentication to MFA and configurable identity backends.
OPEN SOURCE / v1.1.4
RoXX
RADIUS authentication infrastructure for the networks you already operate.
Bring VPN access, identity providers, MFA, and daily operations together in one open-source service.
One applicationServer, setup, and operations
MFA readyTOTP, WebAuthn, and gateways
Cross-platformWindows, Linux, and macOS
ONE POLICY POINT
Your network access, under one roof.
Through FreeRADIUS, RoXX connects RADIUS clients to identity sources, adds multi-factor checks, and gives operators a web console for configuration, users, logs, and service health.
ARCHITECTURE
Follow an authentication request.
FreeRADIUS receives network requests; RoXX provides authentication integration and administration behind it.
01 / NETWORK EDGEVPN and RADIUS clients via FreeRADIUSSend authentication requests
02 / ROXXPolicy, MFA, auditRoute and verify each request
03 / IDENTITYDirectories and backendsLDAP, AD, SQL, and more
Admin portal
Manage operators, providers,
tokens, and logs through the web interface.
Service operations
Readiness, liveness,
metrics, rotating logs, and audit export support deployment.
CAPABILITIES
Built for real access workflows.
Identity integrations
Connect LDAP and Active Directory, SAML 2.0, Entra ID, and supported external providers.
Multi-factor access
Offer TOTP, WebAuthn, and configured push or SMS gateway integrations.
Operator console
Manage users and roles, inspect logs, and configure providers from the admin portal.
Migration tools
Use the NPS migration assistant and FreeRADIUS integration guidance.
Observable service
Use health probes, Prometheus metrics, rotating logs, and JSONL audit export.
DEPLOY
Choose your host.
Release assets are built and smoke-checked on their target platforms. Verify the published SHA256 file before installation.
WINDOWS / SINGLE APPLICATION
One roxx.exe for every mode.
Download the executable directly or use the archive with PowerShell install, upgrade, and uninstall scripts.
PowerShell / first run
.\roxx.exe setup
.\roxx.exe serverLINUX / STANDALONE OR PACKAGES
Run the binary or install a package.
Use the standalone x86_64 executable, the Debian package, or the RPM package. Packages include a systemd unit.
Linux / standalone
chmod +x roxx-linux-x86_64
./roxx-linux-x86_64 setup
./roxx-linux-x86_64 serverMACOS / APPLE SILICON
A standalone application for macOS.
Check the release asset name for its architecture. Current tagged builds target the architecture of the GitHub macOS runner.
macOS / first run
chmod +x roxx-macos-arm64
./roxx-macos-arm64 setup
./roxx-macos-arm64 serverOPERATOR GUIDE
From first boot to day two.
Start with the short path below, then use the maintained guides for production detail.
01 / BOOTSTRAP
Initialize RoXX
Run roxx setup or the equivalent command for your
downloaded application. Setup generates a unique initial
administrator password under ROXX_CONFIG_DIR.
02 / SECURE
Rotate and connect
Sign in over HTTPS, change the initial password, then configure identity providers, RADIUS backends, and MFA for your environment.
Deployment guide ↗
03 / OPERATE
Watch the service
Use /livez, /readyz, logs, metrics,
and audit export. Back up configuration and data before
upgrades.
OPEN PROJECT
Build it. Run it. Tell us what breaks.
Bug reports, deployment feedback, and focused improvements help shape RoXX.