RDP

RDP resources are opened using the built-in RDP client powered by FreeRDP.

Configuration

Field	Description
Name	Resource display name
Host	Remote Windows host address
Port	RDP port, default 3389
Username	Windows account username
Password	Windows account password
Domain	Optional. Active Directory domain
Use NLA / CredSSP	Toggle on by default. NLA (CredSSP) is the Windows default and far more secure than basic RDP security. Disable only if the target host requires legacy RDP authentication.
Color Quality	32-bit (default) or 16-bit. 16-bit saves bandwidth.
Graphics Pipeline	Default on (RDP8+ GFX, better quality). Turn off if a server disconnects during GFX negotiation to fall back to the compatible bitmap path.
H.264 Hardware Decode	Default off. When enabled, decodes H.264/AVC444 via Apple VideoToolbox for far lower bandwidth than the default RFX/ClearCodec. Requires the Graphics Pipeline to be on.
Audio Playback	Default on. Redirects Windows sound output to this device.
Microphone Redirection	Default off. Redirects this device's microphone to Windows (requires microphone permission on first use).
Shared Folder	Default off. Select a local folder to mount as a drive (named after the resource) in Windows Explorer with full read/write.
Desktop OS	Whether the remote system is Windows or Linux / Other (default Linux / Other). Only affects rendering on HiDPI (Retina) displays: Windows honors the RDP DPI handshake, so the framebuffer is requested at native backing resolution and the server draws at full resolution (sharpest text); Linux / Other (xrdp and the like ignore the DPI handshake) requests a 1× logical framebuffer that the client upscales, keeping text at the correct size. On non-HiDPI (1×) displays both behave identically. RDP only.

If the resource does not have a saved username or password, a credential input dialog will appear when opening. If authentication is rejected by the server, the dialog re-appears so you can correct the credentials — no silent retry loop.

Display

The RDP desktop scales to fit the screen proportionally. The soft keyboard area is automatically avoided — when the keyboard appears, the remote desktop shrinks above it.

In landscape mode, a floating real-time bandwidth meter is displayed in the top-right corner. In portrait mode the bandwidth meter remains visible and the soft keyboard auto-surfaces by default.

On iPhone, you can pinch to zoom the desktop up to 1×–4× (like zooming into a photo to inspect detail); once zoomed in, drag to pan. Rotating the screen or a desktop-size change resets to 1×.

Input

RDP supports touch gestures and both hardware and software keyboards. Touch gestures differ by device:

iPhone (virtual mouse pointer + zoom)

Because the iPhone screen is small, it uses a virtual mouse pointer: dragging moves the pointer, and clicks happen at the pointer location rather than where your finger lands. The pointer is shown as a small black dot.

• One-finger drag: Move the virtual pointer (no click). When zoomed in, the view scrolls to follow the pointer so it stays visible.
• Single tap: Left click at the pointer.
• Double tap: Double-click at the pointer.
• Two-finger tap: Right click at the pointer.
• Long press and drag (after ~0.08 s): Hold the left button and drag (text selection, moving objects, etc.).
• Pinch: Zoom the desktop (1×–4×), anchored at the pointer.
• Two-finger vertical swipe: Mouse wheel.

Two-finger swipes are prioritized as scroll; zoom requires a distinct pinch gesture to trigger, preventing accidental zoom during scrolling.

iPad / Mac

• Single tap: Left mouse click.
• Pan (single-finger drag): Left mouse drag (hold and move).
• Two-finger tap: Right mouse click.
• Two-finger vertical scroll: Mouse wheel.
• Hardware keyboard: Physical keys (including modifiers: Ctrl, Alt) are mapped to RDP scancodes and delivered to the remote host.
• Software keyboard: The iOS soft keyboard appears in portrait mode by default and can be toggled from the top-right cluster.

On Mac, trackpad scroll gestures are recognized as mouse wheel scrolling, and right-click comes from an external mouse or a two-finger trackpad click.

Keyboard

Special keys (arrow keys, function keys F1–F12, Home, End, PageUp, PageDown, Insert, Delete, Escape, Tab, Caps Lock, and modifier keys) are mapped via USB HID usage codes to RDP XT scancodes. Text characters are sent as Unicode keyboard events.

Authentication

OmniGate supports password-based and NLA/CredSSP authentication. NLA is enabled by default (recommended — most Windows hosts require it). The server's TLS certificate is auto-accepted for the session (equivalent to the "trust this certificate" behavior in desktop RDP clients).

Auto-Reconnect

When an RDP connection is unexpectedly disconnected (for example, due to network fluctuation), OmniGate will automatically attempt to reconnect with exponential backoff (up to 6 retries, capped at 30 seconds).

Auto-reconnect will not occur in the following cases:

• The user manually exits the RDP page.
• The server returns a permanent authentication failure (credentials rejected). The credential dialog re-appears instead.
• A non-existent or unreachable host.

During auto-reconnect, a "Reconnecting…" message is displayed.

Gateway Compatibility

Gateway	RDP Support
None (direct)	✓
FRP	✓ (via FRP visitor tunnel)
WireGuard	✓ (via local forwarder)
Tailscale	✓ (via local forwarder)
ZeroTier	Not yet supported

For FRP and SSH-jumphost resources, the launcher already provides a local forwarded port, so RDP connects to it directly. For WireGuard and Tailscale, OmniGate creates a local TCP forwarder that bridges the RDP client onto the proxy tunnel session.

Known Limitations

• GFX: The FreeRDP build supports the RDP8+ GFX graphics pipeline (RFX/ClearCodec software codecs).
• H.264/AVC444: Decoded via Apple VideoToolbox hardware acceleration (enable it per-resource; requires the Graphics Pipeline). Falls back to software decoding automatically when VideoToolbox is unavailable.
• ZeroTier gateways do not expose a raw TCP session needed for RDP and are not supported yet.