Catalog / Networking & remote access

RustDesk Server

Self-hosted remote desktop relay and rendezvous server

CIS Level 1 hardened Ubuntu 24.04 LTS image by Lynxroute · unique credentials at first boot · CVE-scanned · SBOM and CIS report inside

Availability and pricing
CloudVersionSoftware priceLast build
AWS Marketplace
EC2 AMI · all commercial regions
1.1.16$0.03/hr
Recommended instance: t3.small · 5-day free trial
2026-09-04Listing ↗
Azure Marketplace
VM image · plan payg-gen2 · Gen2
1.1.16$0.028/vCPU/hr
Recommended VM: Standard_D2s_v3
2026-07-22Listing ↗

Software price only; cloud infrastructure is billed separately by the provider. Prices in USD.

Image facts
Base OSUbuntu 24.04 LTS
HardeningCIS Level 1, Ubuntu 24.04 LTS (tailored)
LicenseAGPL-3.0
UpstreamPurslane Ltd.
Machine-readableproduct.json · catalog.json
What is RustDesk Server

RustDesk Server is the self-hosted backend for the RustDesk remote-desktop client - a pair of Rust binaries (hbbs rendezvous service and hbbr relay service) that coordinate peer-to-peer connections between RustDesk desktop and mobile clients without going through any public infrastructure. The rendezvous service assigns peer IDs, exchanges public keys and brokers NAT hole-punching; the relay service forwards the encrypted session when direct connections fail. End-to-end encryption is signed by an Ed25519 keypair generated per instance, so clients can verify they are talking to your server and not a public one. Local SQLite for peer ID registration. AGPL-3.0 license - community alternative to TeamViewer and AnyDesk SaaS, all session metadata stays inside your VPC.

What the Lynxroute image adds

Security hardening:

  • Ed25519 keypair generated per instance at first boot
  • Both hbbs and hbbr run as dedicated non-root system user
  • UFW firewall - only required ports (21115, 21116 TCP+UDP, 21117)
  • fail2ban, AppArmor

OS hardening (CIS Level 1):

  • CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown
  • auditd, SSH hardening, Kernel hardening, IMDSv2 enforced

Compliance artifacts:

  • SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json
  • CIS Conformance Report at /etc/lynxroute/cis-report.html
  • CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md
Deploy

Launch in one command

Credentials are generated at first boot and written to /root/rustdesk-server-credentials.txt.

# subscribe once on the AWS Marketplace listing, then:
aws ec2 run-instances \
  --image-id resolve:ssm:/aws/service/marketplace/prod-5uuqnqbcdxcss/latest \
  --instance-type t3.small --key-name my-key --security-group-ids sg-xxxxxxxx
# accept the plan terms once, then:
az vm image terms accept --publisher lynxroute --offer rustdesk-server --plan payg-gen2
az vm create -g my-rg -n rustdesk-server --size Standard_D2s_v3 \
  --image lynxroute:rustdesk-server:payg-gen2:latest --admin-username azureuser --generate-ssh-keys
Release notes

Latest release

The most recent release with notes; the full release history is in product.json.

RustDesk Server v1.1.16

AWS · 2026-09-04Azure · 2026-07-22
  • Re-release of RustDesk Server 1.1.16. The application version is unchanged; this build refreshes the underlying operating system image
  • Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build