Tailscale and RustDesk: Secure remote access to all your desktops

The article walks through how a Tailscale‑connected machine can run the open‑source RustDesk client in “direct IP access” mode, bypassing the need for RustDesk’s two‑server backend. By enabling the single checkbox in RustDesk’s security settings and feeding it the 100.x.x.x address assigned by Tailscale, users get a peer‑to‑peer desktop session that RustDesk still labels as “unencrypted” even though the underlying Tailscale link already encrypts traffic. This eliminates the usual steps of provisioning Docker containers, publishing public keys, and opening multiple TCP/UDP ports on a router, while preserving RustDesk’s feature set—file transfer, screen sharing, chat, and even camera streaming—without paying for AnyDesk‑style relays.

The move reflects a broader shift toward leveraging zero‑trust networking fabrics to simplify remote‑access workflows. Traditional VNC or RDP tools still rely on manual port forwarding or commercial relay services that charge per seat. Tailscale, built on WireGuard, has been positioning itself as a universal identity‑based network layer that can underwrite a variety of applications, from SSH to Kubernetes. By pairing it with RustDesk, a Rust‑written remote‑desktop solution that already stores data locally, the combination offers a “best‑of‑both‑worlds” alternative to heavyweight SaaS products such as TeamViewer and AnyDesk. It also sidesteps the brand‑recognition hurdle that has kept RustDesk in the niche, because the user experience now mirrors the familiar “just click a Tailnet IP” flow that many IT teams already use for internal tooling.

Looking ahead, the key risk is that RustDesk still advertises the connection as “direct and unencrypted,” which could confuse security‑aware users and potentially lead to misconfiguration. Moreover, the setup assumes every endpoint runs Tailscale, so organizations that must support legacy or non‑compatible devices may still need traditional relay paths. Watch for RustDesk to integrate native WireGuard support or for Tailscale to bundle a pre‑configured RustDesk client, which would tighten the user experience and reduce the reliance on manual toggles. Finally, as more remote‑work tools adopt mesh VPN back‑ends, vendors that lock users into proprietary relay infrastructures may see pressure to open APIs or lower pricing.