Admin access that exits where the client requires

The client's compliance policy is specific: administrative SSH to their servers, only from their approved egress proxy. For an outside operator, that has meant a VPN into their network or a dedicated workstation that lives there.

hoody-terminal is an HTTP-to-SSH bridge. Add ssh_host and ssh_user to the terminal URL, plus socks5_host pointing at the client's approved proxy, and the container opens the SSH session through it: the connection exits from the address their policy names, while your browser sits wherever you sit. The session persists across requests, and separate terminal_id values hold simultaneous sessions to several of their servers.

Their auditors see admin traffic from the approved address. You see a browser tab.

The session exits where the policy says; you connect from wherever you are.