Forever Free. Forever Open Source.

RadiusStack

Ditch the steep learning curve of traditional FreeRADIUS. Deploy a complete, containerized AAA platform with a responsive Web UI and fully-documented REST API in seconds.

Easy to deploy - Easy to use

Built for managing Wi-Fi access points, remote access VPNs, and network appliance logins. RadiusStack gives you feature-rich monitoring and total control over users, usage plans, and custom profile attributes directly from your browser. Designed for absolute security and simplicity.

Enterprise Features Out of the Box

Complete Web Control

A polished frontend for managing NAS clients, users, profiles, and plans. You can even view live docker container logs directly within the WebUI.

Strict API-First Design

The management application is entirely an API server. The WebUI only interacts with the API, ensuring it never has direct access to the backend database.

WPA-Enterprise Ready

Supports EAP (PEAP + TTLS) with PAP, CHAP and MSCHAPV2 natively. Pre-configured to copy reply attributes from inner to outer packets for dynamic VLAN assignment.

Hardened Security (TOTP)

Protect your network edges. RadiusStack natively supports Time-Based One-Time Passwords (TOTP) for both radius users and WebUI administrators.

Automated Certificates

Say goodbye to complex EAP certificate generation. Generate custom self-signed SSL/EAP certificates with one click in the UI, or upload your own.

Live Analytics & Logging

Monitor active network sessions, query historical auth logs, view accounting data, and keep track of a detailed administration audit log instantly.

Official Images, Clean Architecture

Instead of using custom bloated images, the platform is purposefully built using official container images. Initialization and configuration are performed during deployment across 5 containers within a single docker-compose stack. Upgrading is as simple as re-running the script.

FreeRADIUS 3 Server MariaDB Backend Node.js API Server Dedicated WebUI PHPMyAdmin

Tested on Debian, Ubuntu, AlmaLinux & CentOS

Because it is fully contained in Docker, it runs anywhere. Bring up the entire stack with a single command.

# Clone the repository to your host

git clone https://github.com/deangoldhill/RadiusStack.git
cd RadiusStack

# Start the isolated AAA stack

docker-compose up -d