Best Way to Expose iDRAC KVM or IPMI Console in Custom Web UI (Using MAAS)

Question

I’m building a custom web frontend to manage physical machines, and I want to allow users to access the machine console directly through the web UI — similar to how iDRAC or IPMI KVM consoles work.

We’re currently using Dell iDRAC for hardware management, and the infrastructure is orchestrated using MAAS (Metal as a Service).

I’m trying to figure out the best way to:

• Embed or proxy remote console (KVM/IPMI) access into the frontend

• Use tools like noVNC, Apache Guacamole, or other HTML5 solutions

• Ensure secure access (e.g., short-lived tokens, per-session authentication)

Key Questions:

1. What’s the recommended way to expose a machine’s remote console (e.g., iDRAC KVM or IPMI) through a web application?

2. Can iDRAC’s HTML5 console be securely embedded or proxied into a custom UI?

3. Is it better to use a centralized tool like Apache Guacamole to handle this?

4. Are there any examples or best practices for integrating console access into a MAAS-managed frontend?

5. What are the security considerations (e.g., avoiding exposing BMC or console ports directly)?

6. Any tips, tools, or guidance would be really appreciated!