Rustdesk

RustDesk is a cross-platform remote desktop client that enables users to initiate and receive remote sessions. It provides a complete infrastructure for self-hosted remote access, utilizing a signaling and relay server architecture to maintain connectivity when direct peer-to-peer links are unavailable. The software is designed to function across desktop and mobile environments, offering native remote control, screen sharing, and file management capabilities.

What distinguishes the platform is its centralized administrative control plane, which allows for granular management of security policies, user identities, and device access permissions. Administrators can define scoped roles, implement hierarchical permission logic, and enforce security strategies across large deployments. The system supports integration with external identity providers, including OIDC and LDAP, alongside multi-factor authentication methods like TOTP to secure access to the infrastructure.

The software provides extensive tools for managed environments, including automated deployment scripts, command-line configuration, and bulk policy management. It includes specialized mechanisms for handling system-level elevation, allowing remote operators to interact with administrative prompts on target machines. The server infrastructure is designed for flexibility, supporting containerized deployments and geolocation-based routing to optimize connection paths and minimize latency.

Documentation and installation support cover a wide range of operating systems, providing native packages, portable formats, and guidance for running server components as persistent background services.

Features

Private and Enterprise Infrastructure Management - Deploy custom signaling and relay servers to maintain full control over remote connectivity within private enterprise environments.
Display and Control Settings - Adjust image quality, cursor behavior, and viewing modes to optimize performance during active remote sessions.
Remote Desktop Clients - Initiate and manage secure remote desktop connections through either public or private self-hosted infrastructure.
Administrative Management Systems - Centralize administrative oversight and identity management across all self-hosted remote access infrastructure.
Container Orchestration - Bundle signaling and registration services into containerized deployments for streamlined orchestration within isolated environments.
Control Planes - Manage global user permissions, device configurations, and infrastructure settings through a unified web-based control plane.
Connection Security Policies - Configure granular security policies to restrict file transfers, peripheral access, and input permissions during remote sessions.
Elevation Mechanisms - Interact with protected system dialogs and administrative prompts remotely through specialized elevation handling.
Device Access Policies - Assign specific hardware assets to individual users or teams to enforce precise device access boundaries.
Access Control Systems - Enforce strict connection eligibility rules to determine which users or groups can access specific remote devices.
OIDC Authentication Integrations - Delegate user authentication to external OpenID Connect providers for seamless identity management.
Remote Access - Virtual remote desktop infrastructure.
Remote Access Tools - Simple, secure remote desktop and screen sharing software.
Remote Desktop - Virtual remote desktop infrastructure.
Developer Tools - Remote desktop and support software.
Media & Communication - Remote desktop software.
Remote Desktop - Open-source infrastructure for remote desktop access.
General Productivity Tools - Open-source remote desktop software.
General Utilities - Remote desktop software alternative.
Open Source Applications - Remote desktop and screen sharing application.
Personal Productivity and Utilities - Open-source remote desktop application for self-hosting.
Remote and Utility - Open source remote desktop software.
Relay Server Management - Deploy distributed relay nodes with geolocation settings to minimize latency and optimize connection routing.
Control Role Management - Define specific operator capabilities, such as clipboard access or terminal usage, on a per-device basis.
Administrative Role Management - Assign scoped administrative roles and permissions to users to delegate management of the remote access environment.
LDAP Authentication - Integrate with directory services for centralized authentication and automatic user account provisioning.
TOTP Authentication Systems - Secure user accounts with time-based one-time passwords and provide backup codes for account recovery.
Server Installation Methods - Support diverse installation methods including container images, native packages, and automated service scripts.
Self-Hosted Applications - Host server components on private infrastructure using service managers for persistent, background operation.
Mobile Screen Sharing - Capture and transmit mobile device screens and system audio using native mobile operating system permissions.
Android Remote Control - Navigate and control remote systems from mobile devices using touch input modes and custom shortcuts.
Network Port Requirements - Documents essential network ports for signaling, relaying, API traffic, and proxy communication.
CLI Tooling - Exposes command-line parameters for silent installation, persistent credential storage, and programmatic ID management.
Automated Deployment Scripts - Packages automated installation scripts and MSI installers for large-scale software rollouts.
API Token Management - Generates API tokens to facilitate programmatic management of users, devices, and audit logs.
Client Configuration Settings - Overrides default connection behavior through advanced settings like address book presets, window management, and service elevation.
Platform Permission Requirements - Details system-level requirements for screen recording, input monitoring, and accessibility permissions.
Bulk Policy Management - Standardizes security and behavioral settings across multiple managed environments to eliminate manual client-side configuration.
Device Group Permissions - Applies cumulative permission structures to regulate access across specific device collections.
Identity and Role Management - Governs cross-group access by defining which user roles can interact with specific device sets.
Client - Replicates connection settings using custom binary generation, import/export utilities, and command-line automation.

rustdesk/rustdesk-server

9,943View on GitHub

rustdesk-server is a self-hosted remote desktop server infrastructure designed to manage ID signaling and relay traffic for remote connections between peers. It provides the necessary backend environment to coordinate remote access sessions through rendezvous-based signaling and relay-based traffic forwarding. The system distinguishes itself with a remote access management console for organizing devices and enforcing security policies, as well as an identity integrator for OIDC-based federation and LDAP directory synchronization. It utilizes geolocation-aware routing to distribute traffic acr

fosrl/pangolin

21,255View on GitHub

Pangolin is a zero-trust remote access platform designed to provide secure, identity-aware connectivity to private network resources. It functions as a cloud-native network controller that orchestrates encrypted tunnels, traffic routing, and access policies across distributed environments. By leveraging WireGuard for secure data transport, the platform enables authenticated access to internal web applications, terminal sessions, and remote desktops without exposing services to the public internet. The platform distinguishes itself through a declarative infrastructure model that synchronizes n

elie222/inbox-zero

10,101View on GitHub

Inbox Zero is an AI-powered email automation platform and inbox organizer. It uses large language models to automatically categorize, label, and archive emails, while providing a conversational interface for managing workflows and drafting responses through natural language. The project distinguishes itself by integrating real-time calendar availability into its drafting process and generating AI-summarized meeting briefings. It supports a pluggable AI provider interface with model fallback chains, allowing it to connect to various cloud or local LLM providers. Users can also control their in

amidaware/tacticalrmm

4,161View on GitHub

TacticalRMM is a remote monitoring and management platform designed for overseeing endpoints and automating IT administration. It functions as an endpoint management tool and IT automation framework, providing a centralized dashboard for executing scripts, monitoring system health, and managing remote devices across multiple tenants. The platform distinguishes itself through a comprehensive remote administration suite that includes real-time shell access, remote file management, and registry editing. It integrates with third-party remote desktop software and provides a hierarchical policy inh

rustdeskrustdesk

Features