A modern AAA platform for Wi-Fi, VPN, and network access—available self-hosted or as a forever-free, full-feature SaaS tenant with no restrictions.
Built for managing Wi-Fi access points, remote access VPNs, and network appliance logins. RadiusStack gives you feature-rich monitoring and total control over users, usage plans, and custom profile attributes directly from your browser. Designed for absolute security and simplicity.
Choose the deployment model that fits: self-host the complete Docker stack, or create a full-feature SaaS tenant in minutes—forever free with no feature restrictions.
Deployment & isolation
Run the complete Docker stack on your own infrastructure, or use the hosted service. SaaS organisations receive isolated tenants, tenant-scoped administrators, settings, NAS clients, users, and operational data.
Secure transport
Encrypt RADIUS with TLS and mutual certificate authentication. Provision tenant CAs, issue client credentials, download trust material, rotate, and revoke certificates.
Live access control
Send Change of Authorization or Packet of Disconnect actions to supported NAS devices for per-device session control.
Identity & security
TOTP for administrators and RADIUS users, tenant administrator MFA enforcement, scoped permissions, and API-first management.
AAA operations
Manage users, NAS clients, plans, profiles, custom attributes, dynamic VLAN policies, MAC authentication, and EAP/WPA-Enterprise access.
Visibility & resilience
Review active sessions, authentication and accounting activity, administrative audit records, reports, JSON backup/restore, certificates, and HA capabilities.
SaaS is forever free with no feature restrictions. Self-hosting is fully supported.
Instead of using custom bloated images, the platform is purposefully built using official container images. Initialization and configuration are performed during deployment across 5 containers within a single docker-compose stack. Upgrading is as simple as re-running the script.
Because it is fully contained in Docker, it runs anywhere. Bring up the entire stack with a single command.
# Clone the repository to your host
git clone https://github.com/deangoldhill/RadiusStack.git
cd RadiusStack
# Start the isolated AAA stack
docker-compose up -d