Remote Desktop WebRTC

Description of a typical Onprem Remote Desktop installation in WebRTC mode, providing ultra-fast access to physical or virtual Windows, Linux, or macOS workstations

Prerequisites

  • License & Ansible: Reemo API license key and access to the reemo-infra role.

  • DNS resolution:

    • Portal: url.domain.tld

    • Admin: admin.domain.local

  • SSL certificates: .pem files (Cert + Key) for Traefik.

  • Image access: valid account on the Reemo Docker registry.

Architecture

../../_static/images/infra/remotedesktop_webrtc.png

Overview of the infrastructure for a Remote Desktop installation in WebRTC mode

Sizing (10 concurrent sessions)

Machine

CPU

RAM

Disk

infra_manager1

4 vCPU

8 GB

100G SSD

Flow matrix

DESCRIPTION

TRANSPORT

SOURCE IP

SOURCE PORT

DESTINATION IP

DESTINATION PORT

SERVICES

INTERNET -> INFRA

TCP

WAN

1024:65535

192.168.10.66

443

HTTPS

INTERNET -> INFRA

UDP/TCP

WAN

1024:65535

192.168.10.66

58200

STUN/TURN

INFRA -> REGISTRY

TCP

192.168.10.66

1024:65535

registry.reemo.io, registry-auth.reemo.io

443

HTTPS

ReemoAgent -> INFRA

TCP

LAN

1024:65535

192.168.10.66

8443

HTTPS

ReemoAgent -> INFRA

UDP/TCP

LAN

1024:65535

192.168.10.66

58200

STUN/TURN

ReemoAgent -> Internet

UDP

LAN

58200:58400

WAN

1024:65535

Reemo

Ansible inventory file

all:
  vars:
    API_LICENSE: "< LICENSING_KEY >"
    REGISTRY_URL: "registry.reemo.io"
    REGISTRY_ENV: "reemoinfra"
    REGISTRY_USERNAME: "< username >"
    REGISTRY_PASSWORD: "< password >"
infra_manager:
  vars:
    TRAEFIK_SSL_CERTS:
      - cert_file: "/local/path/ssl/cert.pem"
        key_file: "/local/path/ssl/key.pem"
    PORTAL_URL: "url.domain.tld"
    PORTALADMIN_URL: "admin.domain.local"
    PORTALADMIN_URL_RESTRICT_IP: "10.3.1.2,10.3.2.0/24"
    PORTALADMIN_TYPE: "instadmin"
    PORTAL_TYPE: "orguser"
    TURN_ENABLED: true
    TURN_OVERRIDE: true
  hosts:
    infra_manager1:
      ansible_host: "192.168.10.66"

Ansible playbook file

reemo-infra.yml

- name: Installation Reemo Infra Server
  hosts: infra_manager
  gather_facts: "True"
  roles:
    - role: reemo-infra
      become: yes

Installation

# Initial deployment — run only once
ansible-playbook -i inventory.yml playbooks/reemo-infra.yml --extra-vars "INIT_DB=true" --extra-vars "INSTALL_DOCKER=true"

Update

ansible-playbook -i inventory.yml playbooks/reemo-infra.yml

Usage guides

widgets
Remote Desktop Configuration
Access setup
remotedesktop.html