WZ-IT installs and operates RustDesk with dedicated rendezvous and relay components. We configure clients and keys, integrate the solution into your access architecture and handle monitoring, backups and updates.
RustDesk is an open-source remote desktop solution with self-hostable rendezvous and relay components. Direct connections, clients, updates and connected services remain separate data and security boundaries.
As an experienced RustDesk integrator, we handle installation, configuration and operation of your self-hosted RustDesk server - on our infrastructure or on-premise at your location.
Your own ID/rendezvous and relay server (hbbs/hbbr) for controllable mediation and relay data flows.
End-to-End Encryption
Encrypted connections; the resulting security level depends on key distribution, clients, versions and server configuration.
Cross-Platform
Clients for Windows, macOS, Linux, iOS, Android and Web - all devices in one solution.
Modern Codecs
Support for multiple software and hardware codecs; available codecs and performance depend on client, hardware and version.
No Admin Rights Required
On Windows, no installation or admin rights required - privilege elevation on demand.
Easy to Use
Clear interface for quick remote connections without complicated configuration.
Infrastructure, integration and operations
RustDesk as part of your infrastructure
We do more than provide an application. WZ-IT designs the technical architecture, integrates network and identity, operates the agreed scope and develops integrations when the standard product is not enough.
Architecture and migration
Sizing, target environment, data transfer, cutover and recovery are resolved before production operations.
On-Premise
In your data center: Installation on bare-metal, VM or Docker · Integration with existing Active Directory/LDAP
Installation in your cloud
In your own cloud account, for example with AWS, Azure, GCP or Hetzner · Terraform/IaC setup (optional) · Kubernetes or Docker Compose · Capacity and scaling design
Enterprise Setup
Advanced architecture after technical and licence assessment: HA and recovery design where supported by the application and edition · Logging according to feature set and edition · Custom security policies
Network and identity
SSO, secure access, internal systems and existing security components are integrated appropriately.
VPN Access
WireGuard, NetBird, Tailscale, Headscale, OpenVPN, Cloudflare Tunnel · Easy client setup for all devices
SSO Integration
Directly or through an upstream identity layer
Multi-Factor Auth
Depends on application, edition and identity provider
Firewall & Hardening
Fail2Ban, Rate Limiting, IP Whitelisting
Monitoring and service level
Updates, backups, technical monitoring and response paths follow a transparent operational scope.
24/7 proactive monitoring
Updates and patches
Regular updates, CVE monitoring and prioritised patches for critical vulnerabilities
Daily backup with 7-day retention
Personal technical contact
Integration and development
APIs, automation and custom extensions can be delivered beyond basic deployment.
Server REST API
The server API enables device management: Register clients, assign groups, control access rights - all automatable.
Connection Webhooks
A webhook can be triggered on every connection: Audit log, ticket creation, approval workflow.
Custom Client
As open source project, the client can be customized: Own branding, preconfigured servers, additional security features.
Full-service installation with no hidden costs
What the RustDesk setup includes
Complete installation & configuration
SSL certificate & reverse proxy setup
Backup strategy & disaster recovery
Performance optimization & tuning
Security hardening following OWASP
Monitoring & logging setup
Documentation & best practices
Administrator training (remote)
30 days email support included
Dedicated contact person
Optional integration: LDAP/AD, SSO, MFA
Update strategy & patch management setup
The exact scope depends on the application, edition, infrastructure and criticality. Vendor licences and non-standard components are quoted separately.
Use Cases
RustDesk Use Cases
Versatile Applications Remote support, maintenance and more:
IT Support & Helpdesk
Remote support for employees and customers with self-hosted rendezvous and relay services. Direct and relayed connections are configured around network and privacy requirements.
Machine Remote Maintenance
Access to industrial PCs, controllers and embedded systems. With self-hosted server, also usable in isolated networks without internet access.
Home Office & Remote Work
Remote access to workplace computers with self-hosted mediation and relay components. Client policies, identities and network exposure are secured separately.
Use Cases
Using RustDesk in your organisation
IT Support & Helpdesk
Fast remote support for employees and customers without complicated VPN setups
Home Office & Remote Work
Secure access to office PCs from home with end-to-end encryption
TeamViewer Alternative
Open-source solution with your own rendezvous and relay server plus documentable data flows
Server Administration
Remote access to Windows, Linux and macOS servers with cross-platform support
Managed Service Provider
Scalable remote desktop solution for IT service providers with custom branding
Training & Presentations
Screen sharing and remote control for interactive trainings and demos
Concrete Use Cases
RustDesk Development & Integration
RustDesk offers TeamViewer alternative with own server. We integrate it into your IT service management processes.
Helpdesk Ticket Integration
Problem
Support staff must manually document which computers they accessed. Compliance risk.
Solution
Automatic linking: RustDesk session logged with ticket ID. Connection log appears in ticket.
CMDB Asset Sync
Problem
CMDB doesn't contain all devices because registration is manual. RustDesk knows all clients.
Solution
Sync service automatically transferring RustDesk clients to CMDB - incl. OS, version, last contact.
Secure Unattended Access
Problem
Maintenance at night requires access without user confirmation, but standard access is too open.
Solution
Time-window-based unattended access with hardware token authentication and automatic session recording.
Managed Hosting & Operations
How much does RustDesk hosting cost?
Compute, applications, storage and response are shown separately. You can see what ongoing operations include and which requirements need a technical assessment.
Five service levels for different operating requirements
Response target = initial technical response to critical incidents (P1) · Price and flexible operations allowance per customer environment and month · Hourly rate for additional work
Response within service hours24/7 on-call for P1
Essential
Next business dayby end of dayInitial technical response to critical incidents (P1) by the end of the next business day
Mon to Fri, 8 to 17 CET
includedin the base operations price
no allowance
Hourly rate
Standard rate
regular service hours
€120
outsideoutside regular service hours
€240
For less time-critical systems, staging and internal applications.
Business
Popular
4 hwithin service hoursInitial technical response to critical incidents (P1) within 4 service hours
Mon to Fri, 8 to 18 CET
+€99.90
0.5 h allowance
Hourly rate
5% below standard
regular service hours
€114
outsideoutside regular service hours
€228
For production systems without contractual night and weekend on-call coverage.
Priority
1 hwithin service hoursInitial technical response to critical incidents (P1) within 1 service hour
Mon to Fri, 8 to 18 CET
+€199.90
1 h allowance
Hourly rate
10% below standard
regular service hours
€108
outsideoutside regular service hours
€216
For business-critical systems requiring a fast response during the service window.
Production
60 minnights and weekends includedInitial technical response to critical incidents (P1) within 60 minutes, 24/7
P1 around the clock
+€349.90
1 h allowance
Hourly rate
15% below standard
regular service hours
€102
outsideoutside regular service hours
€204
24/7 P1 on-call coverage for business-critical production environments.
Critical
after audit
30 minnights and weekends includedInitial technical response to critical incidents (P1) within 30 minutes, 24/7
P1 around the clock
+€549.90
2 h allowance
Hourly rate
20% below standard
regular service hours
€96
outsideoutside regular service hours
€192
Available after audit, runbook and capacity approval.
Business, Priority, Production and Critical include the first covered workload in a customer environment. Further covered workloads cost €29.90, €39.90, €49.90 and €59.90 per month respectively. For monitoring-only servers, we notify within the level's window for €14.90, €19.90, €24.90 and €29.90 per server and month respectively; without a service level, during service hours.
The flexible operations allowance applies to planned work during regular service hours and expires at month end. Operations, monitoring, backups, maintenance and updates within the agreed scope do not reduce it. Additional work beyond the agreed operations and the allowance, as well as further incident work, is billed at the hourly rate of the service level of the affected environment. The standard rate applies to commissioned work without a service level. Hour packages and fixed prices have their own prices. All prices are net and exclude statutory VAT. The offers are addressed to businesses.
Integrate RustDesk into your infrastructure with clear controls
Remote access is designed as a combination of identities, control platform, gateways, routes and traceable access policies.
Users, devices and sites
Employees, service providers and systems receive only the access paths required for their task.
Secure access
TLS, firewall rules, reverse proxies or private network paths are designed around the platform's exposure.
Identity and permissions
Local accounts, SSO, directories, service accounts and emergency access are connected through clear roles.
RustDesk platform
Devices, connections, policies and administrative changes are managed centrally and traceably.
Gateways and routes
Sites, subnets, relays and outbound tunnels without unnecessarily exposed services.
Policies and device posture
Least-privilege rules, groups, key rotation and optional technical device criteria.
Target systems and audit
Controlled access to servers, applications, OT networks and documented events.
The diagram is a resilient target model. Its implementation depends on edition, data flows, load, availability objectives and existing infrastructure.
Role in the overall system
Related services for RustDesk
This page covers installation and the agreed platform operations for RustDesk. Custom code, the access layer and special confidentiality requirements remain clearly separated responsibilities that can be added when needed.
RustDesk Hosting with WZ-IT starts at €99.90 net per month. It includes a dedicated size XS instance (2 vCPU, 2 GB RAM, 40 GB NVMe SSD), updates, daily backups with 7 days of retention, 24/7 monitoring, 5 TB of outbound traffic and a first response to critical incidents by the end of the next business day. Larger instances and higher service levels cost extra; the configurator shows the total price.
The entry level is a dedicated size XS instance with 2 vCPU, 2 GB RAM, 40 GB NVMe SSD for €99.90; it suits lightweight applications as well as test and development environments. Size S with 2 vCPU, 4 GB RAM, 80 GB NVMe SSD costs €129.90. We check which size RustDesk needs in production before provisioning. Size M (4 vCPU, 8 GB RAM, 80 GB NVMe SSD) costs an extra €29.90 excl. VAT, L (8 vCPU, 16 GB RAM, 80 GB NVMe SSD) an extra €89.90 excl. VAT and XL (16 vCPU, 32 GB RAM, 80 GB NVMe SSD) an extra €199.90 excl. VAT, each per month. Additional storage costs €4.99 excl. VAT per 50 GB and month.
No. WZ-IT does not limit the number of users. How many users can work smoothly at the same time depends on usage and the chosen instance size XS to XL.
RustDesk Hosting can be cancelled monthly, with no minimum term and 30 days' notice to the end of the month.
Germany, Switzerland and Austria are available at the same prices. All three locations are data centres without US clouds that are ISO 27001 certified within the scope of the respective data centre operator; in Germany we additionally operate with a German provider whose data centres are BSI C5 attested. A confidentiality agreement under Section 203 German Criminal Code (StGB) is also available for app hosting on request, at the German location only; the separate Section 203 Managed Cloud for professional-secrecy holders is available in Germany only.
Yes. Besides Germany, Switzerland and Austria are available as locations, at the same prices in euros. The operator of the data centre in Switzerland is certified to ISO 27001, ISO 9001, ISO 14001 and ISO 50001 and sources electricity from renewable sources; the data centre in Austria is ISO 27001 certified. State the preferred location in your request; it is recorded in the proposal.
We typically provide a production instance within a few business days after signing. For a trial, we set up a test instance, usually on the next business day; it runs free of charge for 7 days and without payment details.
Yes. One .de domain is included with every hosting plan. Alternatively, connect your own domain or subdomain with a CNAME record.
General
RustDesk is a remote desktop and remote support solution that allows you to remotely maintain devices over the internet or LAN - including your own server option (self-hosted).
Self-hosting gives you control over connection setup/relay, infrastructure location and operational processes (firewall, updates, monitoring). This is particularly interesting for companies with data protection, latency or control requirements.
Typically two server services: hbbs = ID/rendezvous server (clients find each other through it) and hbbr = relay server (if no direct P2P connection is possible).
Installation & Configuration
In the client under Menu → Network, enter the ID Server (hbbs host/IP); the Relay Server refers to hbbr (typically port 21117).
For encrypted connections, clients need to know your server's public key. The key is generated on first start and is usually located as id_ed25519.pub in the working/data directory.
Yes. The RustDesk documentation describes several ways: manually, via import/export of server configuration, and automated deployment via scripts/config string.
The API server is only relevant for RustDesk Pro (e.g., web console/login). For classic open-source self-hosted setups, many teams leave it empty.
Network & Ports
The official documentation mentions TCP 21115-21119 and UDP 21116 (depending on use/setup). Also plan DNS/domain/reverse proxy according to your environment.
Both work. For productive setups, a domain is practical (clients, certificates, failover scenarios). In LAN/closed network environments, a fixed IP can also make sense.
Yes - but there's a common issue: NAT loopback. If server and clients are on the same LAN, they either need to use the local server IP or enable NAT loopback on the network.
This is a classic NAT loopback problem. The documentation mentions three solutions: NAT loopback on router, local DNS (e.g., AdGuard/Pi-hole) or hosts file rules.
Not necessarily. RustDesk attempts direct connections depending on network situation; if that doesn't work (firewall/NAT), hbbr can step in as relay.
Yes - a reverse proxy for domain/certificates/ingress policies is common. It's important to correctly map port and protocol requirements (TCP/UDP).
Security & Operations
With self-hosting, you control the infrastructure components (hbbs/hbbr). You should also define in your operations concept what you log (e.g., connection logs) and for how long.
For small environments, a lean VM/instance is often sufficient; bandwidth/latency (especially for relay usage) and clean firewall rules are decisive.
Best practice: Define maintenance windows, test versions in staging first, have a rollback plan (snapshots/VM backups), then deploy to production. With Docker: pin images instead of 'latest'.
Typical: minimal port openings, expose server only behind firewall/VPN (if possible), restrict admin access, enable logs/monitoring, regular updates & restore tests.
Scaling & Troubleshooting
Yes, depending on organizational structure: separate servers per location/tenant or a central server with clear policy. It's important to document data flows and responsibilities clearly.
The bottleneck is usually relay traffic (bandwidth/CPU), not the ID server. Scaling is done through better uplink capacity, separate relay servers, location proximity and clean network rules.
Most common: incorrectly opened ports/protocols (TCP vs. UDP), NAT loopback in LAN, missing key in client, and reverse proxy setups that don't correctly map UDP.
WZ-IT moved our studio infrastructure from decentralised individual devices to a central platform: every site is securely connected via VPN, new devices are onboarded automatically and an entire site is provisioned from a template, without manual steps on location. What impressed me most is the breadth and depth of their knowledge: Timo and Robin are not a typical IT provider who sets up a server and leaves. The two of them think their way into highly complex infrastructure and software topics, work through every requirement we put in front of them, and build networking, provisioning and operations so that everything fits together in the end. WZ-IT is an excellent partner for complex software, network and architecture projects.
Steve KirchnerManaging Director, nextGYM GmbHView project
International
Built in Germany's Ruhr Valley. Running worldwide.
WZ-IT designs, develops and operates infrastructure and software for clients in Germany and internationally. We deliver projects remotely and continue supporting them in ongoing operations after go-live.
