OmegaDesk — Sovereign Self-Hosted Remote Desktop in Pure Rust

Zero-Copy Hardware H.264/AV1 · QUIC TLS 1.3 + Built-in WireGuard/Disco Mesh · Zero-Trust HuJSON Policy & TOTP MFA · QuickSupport & Fleet RMM

Repository (README.md) · Detailed Engineering Plan (plan.md) · Projects & Roadmap (PROJECTS.md) · Community (COMMUNITY.md) · Wiki (wiki/Home.md) · Why Rust (language.md) · Reference Ecosystem (references.md) · Virtual Display Drivers (driver-references.md)

OmegaDesk Zero-Copy Capture, Hardware Video & Zero-Trust QUIC Mesh Pipeline

🌐 Overview (`EN` / `PT-BR`)

🇬🇧 English: OmegaDesk is an open-source (AGPL-3.0), self-hosted remote desktop, zero-trust mesh access, and fleet RMM platform written in 100% Rust (17 workspace crates). It combines DXGI + zero-copy D3D11 hardware H.264 encoding (NVENC/QuickSync/AMF, 60 FPS @ 24.5 ms E2E latency), QUIC (TLS 1.3) over a Tailscale-style magicsock STUN/Disco + DERP relay mesh (*.omega names), HuJSON zero-trust access policies with per-session TOTP MFA and .odrec recording, 9-digit QuickSupport, Windows LocalSystem unattended service + IddCx virtual displays, WebCodecs browser gateway, and built-in CLI RMM.
🇧🇷 Português (pt-BR): O OmegaDesk é uma plataforma aberta (AGPL-3.0) e auto-hospedada de acesso remoto de baixa latência, rede mesh Zero-Trust e RMM escrita em Rust puro (17 crates), projetada como alternativa soberana ao TeamViewer e AnyDesk.

Wiki Home (wiki/Home.md) — Executive overview, 17-crate map, and bilingual (EN / PT-BR) navigation.
Getting Started (wiki/Getting-Started.md) — Direct LAN mode, Mesh coordinator & relay deployment, QuickSupport, Browser gateway, and Windows service installation.
Architecture & QUIC Transport (wiki/Architecture-and-QUIC-Transport.md) — Protobuf framing, QUIC TLS 1.3 streams, Noise IK control channel, and omegadesk-magicsock.
Hardware Encoding & Capture (wiki/Hardware-Encoding-and-Capture.md) — DXGI Desktop Duplication, zero-copy D3D11VideoProcessor, NVENC/QSV/AMF Media Foundation, IddCx virtual displays, and adaptive video QoS.
WireGuard Mesh & Zero-Trust Security (wiki/WireGuard-Mesh-and-Zero-Trust-Security.md) — HuJSON policy/v2 ACLs, identity-filtered netmaps, per-session TOTP MFA, .odrec session recording, dynamic video watermark, and JSONL auditing.
Self-Hosting Relay & Server (wiki/Self-Hosting-Relay-and-Server.md) — Running omegadesk-relay (STUN + DERP) and omegadesk-server (Coordinator + WebCodecs Gateway + RMM Admin API).
Roadmap & Benchmarks (wiki/Roadmap-and-Benchmarks.md) — Latency breakdown (24.5 ms E2E at 1080p60) and Phases 0–7 status matrix.