Systems Engineering

usbFabric

Native Rust remote desktop and peer sharing: authenticated screen and audio streaming, a multi-computer control workspace, approved file transfers, and opt-in clipboard sharing.

Remote desktop previeworiginal systempublic website / private application source

Project website ↗

ORIGINAL CONTRIBUTIONS

What I built.

Built an egui/eframe desktop with host, client and combined modes, persistent settings, and USB/display/audio enumeration.
Implemented authenticated QUIC screen/audio streaming with H.264 and Opus, embedded viewing, and remote keyboard/mouse control.
Added named LAN discovery, persistent peer identity, approve-first hybrid ML-KEM pairing, and per-peer capability permissions.
Built receiver-approved file/folder and text transfers, plus a saved workspace for up to eight computer streams with control on hover.
Added explicitly opted-in bidirectional clipboard sharing and an Android ARM64 single-computer companion preview.

usbFabric / SYSTEM MAP

How this system connects.

LAN discovery & pairing: Find and approve computers.
Peer permissions: Authorize individual capabilities.
QUIC media host: Capture screen and audio for authenticated viewers.
Desktop workspace: View and control selected computers.
Approved sharing: Send files, folders and text.
Device catalog: Inspect selected USB, display and audio metadata.

Directed connections

1 → 2: approve pairing (implemented)
2 → 3: authorize desktop session (implemented)
3 → 4: H.264 / Opus media (implemented)
2 → 5: authorize transfers (implemented)
2 → 6: authorize metadata access (implemented)

SYSTEMS DESIGN & OWNERSHIP

Engineering below the surface.

Streaming and device catalogs are separate

The authenticated QUIC media path carries H.264 video, Opus audio and remote input. The Noise-protected TCP catalog lists explicitly selected devices; selecting a USB peripheral does not attach it remotely.

Approval is per peer and per capability

Named LAN discovery leads to approve-first hybrid post-quantum pairing. Permissions govern desktop sessions and sharing; file and folder reception requires approval, and live clipboard sharing requires opt-in on both computers.

One workspace, multiple computers

The desktop control canvas supports up to eight streams, draggable and resizable tiles, saved layouts and hover-based control. The Android companion targets one computer with video, input and text clipboard.

EXPLORE THE ARCHITECTURE

Components. Contracts. Consequences.

Remote desktop and approved peer sharing preview. The USB catalog is metadata-only; forwarding and virtual devices remain planned.

LAN discovery & pairing

Find and approve computers.

Implementation

Persistent identities, named discovery and hybrid ML-KEM pairing.

Security & failure behavior

Explicit peer authorization; no automatic device attachment. Unsupported platform backends surface errors.

Tradeoff

Preview platform support; native acceptance remains scoped.

Peer permissions

Authorize individual capabilities.

Implementation

Per-peer roles and distinct credentials gate sessions.

Security & failure behavior

Explicit peer authorization; no automatic device attachment. Unsupported platform backends surface errors.

Tradeoff

Preview platform support; native acceptance remains scoped.

QUIC media host

Capture screen and audio for authenticated viewers.

Implementation

H.264 video, Opus audio and remote keyboard/mouse input.

Security & failure behavior

Explicit peer authorization; no automatic device attachment. Unsupported platform backends surface errors.

Tradeoff

Preview platform support; native acceptance remains scoped.

Desktop workspace

View and control selected computers.

Implementation

Up to eight streams; saved canvas and opt-in live text clipboard.

Security & failure behavior

Explicit peer authorization; no automatic device attachment. Unsupported platform backends surface errors.

Tradeoff

Preview platform support; native acceptance remains scoped.

Approved sharing

Send files, folders and text.

Implementation

Encrypted direct connections with receiver approval.

Security & failure behavior

Explicit peer authorization; no automatic device attachment. Unsupported platform backends surface errors.

Tradeoff

Preview platform support; native acceptance remains scoped.

Device catalog

Inspect selected USB, display and audio metadata.

Implementation

Noise-protected TCP catalog; no USB forwarding.

Security & failure behavior

Explicit peer authorization; no automatic device attachment. Unsupported platform backends surface errors.

Tradeoff

Preview platform support; native acceptance remains scoped.

Open full 2D architecture →

ENGINEERING SCOPE

Clear boundaries.

Independent Rust application; platform libraries retain their attribution.

USB export/import, virtual host controllers, virtual displays, and per-channel virtual audio routing remain planned. The selected-device catalog exchanges metadata only.
Windows capture, audio, input and startup require validation on Windows hardware; the optional VHF driver is unsigned.
Wayland host capture, measured streaming latency, automatic reconnect and signed installers remain work in progress.
Android is a preview; online trials, payments, accounts and entitled downloads require the planned service.