Feature Request: Dynamic IP Whitelist API for Client Connections

[planitron]

Feature Request: Dynamic IP Whitelist API for Client Connections

Summary

Add automatic IP whitelist management for client remote desktop connections when using IP-restricted security.

Problem

To secure RustDesk ports (21116/21117) with IP whitelist, clients need static IPs. When client IPs change (mobile/travel/ISP changes), remote desktop connections fail until manual whitelist update.

Proposed Solution

Client-side automatic IP reporting:

• RustDesk client detects IP changes
• Authenticated API call to update server whitelist
• Automatic nginx/firewall rule updates

API Endpoint:

POST /api/whitelist/update-ip
Authorization: Bearer <client-cert-or-api-key>
Body: {
  "client_id": "admin-device-001",
  "current_ip": "1.2.3.4"
}

Benefits

• Security: Prevents brute force attacks on client ports while maintaining IP whitelist protection
• Usability: Zero manual intervention for dynamic IP changes
• Enterprise ready: Perfect for remote work scenarios with varying connection points
• Attack mitigation: Blocks unauthorized access attempts while allowing legitimate clients

Use Case

User scenarios:

• Home office (ISP dynamic IP)
• Mobile/travel connections
• 4G/public WiFi changes

Client automatically updates server whitelist, maintaining secure remote desktop access.

Implementation

1. Client IP change detection
2. Secure API authentication
3. Server whitelist update (nginx/ufw)
4. Optional: IP expiry/cleanup

This would significantly improve RustDesk Pro's enterprise security posture while maintaining ease of use.