rustdesk/rustdesk
Rustdesk
RustDesk is a cross-platform remote desktop client that enables users to initiate and receive remote sessions. It provides a complete infrastructure for self-hosted remote access, utilizing a signaling and relay server architecture to maintain connectivity when direct peer-to-peer links are unavailable. The software is designed to function across desktop and mobile environments, offering native remote control, screen sharing, and file management capabilities.
What distinguishes the platform is its centralized administrative control plane, which allows for granular management of security policies, user identities, and device access permissions. Administrators can define scoped roles, implement hierarchical permission logic, and enforce security strategies across large deployments. The system supports integration with external identity providers, including OIDC and LDAP, alongside multi-factor authentication methods like TOTP to secure access to the infrastructure.
The software provides extensive tools for managed environments, including automated deployment scripts, command-line configuration, and bulk policy management. It includes specialized mechanisms for handling system-level elevation, allowing remote operators to interact with administrative prompts on target machines. The server infrastructure is designed for flexibility, supporting containerized deployments and geolocation-based routing to optimize connection paths and minimize latency.
Documentation and installation support cover a wide range of operating systems, providing native packages, portable formats, and guidance for running server components as persistent background services.
Features
- Self-Hosted Server Architectures - The software utilizes a server architecture consisting of a signaling server and a relay server for traffic when direct peer-to-peer connections fail.
- Display and Control Settings - The software offers display and remote-control settings including view modes, toolbar behavior, cursor tracking, and image quality preferences.
- Remote Desktop Clients - The software provides a cross-platform remote desktop client enabling users to initiate or receive remote sessions via public or self-hosted infrastructure.
- Administrative Management Systems - The software provides centralized administrative management, identity integration, and policy control for self-hosted remote desktop infrastructure.
- Containerized Deployments - The software provides containerized deployment configurations for self-hosting signaling and registration servers.
- Control Planes - The software provides a centralized web console for managing users, devices, permissions, relay settings, and custom client configurations.
- Connection Security Policies - The software allows granular security policies for incoming connections, defining permissions for input, clipboard, file transfer, terminal, and peripheral access.
- Device Access Policies - The software supports assignment of devices to individual users or device groups to manage connection permissions via console or command line.
- Elevation Mechanisms - The software includes a mechanism to allow remote clients to interact with administrator-level system dialogs and prompts.
- Granular Permission Sets - The software provides granular permissions for managing specific remote device features like audio, camera, tunneling, and session recording.
- Access Control Systems - The software features an access control system that determines connection eligibility for users and groups to specific devices.
- OIDC Authentication Integrations - The software supports delegated user authentication via external identity providers for centralized identity management.
- Relay Server Management - The software supports deploying and configuring multiple relay servers with geolocation settings to optimize connection routing and reduce latency.
- Administrative Role Management - The software provides a delegated management system allowing administrators to assign global, individual, or group-scoped roles with defined scopes and permissions.
- Control Role Management - The software allows administrative definition of operator capabilities on remote devices, such as file transfer, clipboard access, terminal usage, and configuration modification.
- LDAP Authentication Integrations - The software supports authentication integration with external directory services, including automatic user account creation upon first login.
- TOTP Authentication Systems - The software supports time-based one-time password authentication, including backup codes for account recovery.
- Service Hosting Configurations - The software provides guidance on self-hosting server components on operating systems using service managers for persistent background execution.
- Server Installation Methods - The software supports multiple installation methods, including containerized deployments, system-service scripts, and native package management.
- Mobile Screen Sharing - The software supports screen sharing and system audio capture for mobile devices, requiring system-level permissions for capture and input control.
- Android Remote Control - The software provides remote control functionality for mobile devices, supporting mouse and touch input modes with configurable navigation shortcuts.
- Network Port Requirements - The software specifies network port requirements for signaling, relaying, web access, API, and proxy configurations.
- Command Line Interfaces - The software includes command-line parameters for silent installation, persistent credential setting, and programmatic ID management.
- Automated Deployment Scripts - The software provides automated client installation and setup scripts, including MSI packages, designed for large-scale rollouts and managed environments.
- API Token Management - The software supports API token generation for programmatic management of users, devices, groups, strategies, and audit logs.
- Client Configuration Settings - The software provides advanced client-side configuration options including address book presets, window behavior, service elevation, and network-level connection overrides.
- Platform Permission Requirements - The software details system-level permission requirements for remote control and input capture, including accessibility, screen recording, and input monitoring.
- Device Group Permissions - The software provides cumulative device group-based permissions that provide an additional layer for managing access to device collections.
- Role Creation and Assignment - The software provides a console interface for creating custom administrative roles and assigning multiple roles per user.
- User Group Access Settings - The software provides administrative configuration for cross-group access, defining which groups can access or be accessed by others.
- Bulk Policy Management - The software provides a policy layer for standardizing security and behavior settings across multiple devices and users without manual client-side configuration.
- Client Configuration Management - The software supports multiple configuration methods including custom binary generation, manual settings, import/export, and command-line automation for replicating connection settings.