rustdesk 585d1fb3ca ws: decouple ICE policy from force_relay — full-ICE WebRTC over WebSocket ...

WebSocket support folds into force_relay because a ws tunnel kills
classic TCP/UDP punching — but that conflated transport necessity with
relay policy, and the WebRTC decisions keyed off the merged flag: a ws
client built no offerer at all without TURN, and only a Relay-only-ICE
one with it. ws deployments could never reach a direct WebRTC
connection, which is exactly the path they are supposed to live on.

Split the flag. LoginConfigHandler now tracks policy_relay (the
force-always-relay option, an explicit relay request — /r ids and
retry-via-relay included — and proxy) separately; force_relay stays
policy_relay || use_ws() and keeps governing the classic paths, so
non-ws behavior is unchanged everywhere:

- the offerer's existence and ICE policy follow policy_relay: under
  pure ws the offer gathers every candidate type and may go direct;
  under relay-by-policy it stays Relay-only ICE, TURN-gated, exactly
  as before;
- the RelayResponse race applies the prefer-P2P window under ws (a
  direct ICE path is worth delaying an already-ready relay for) while
  policy relay keeps first-success semantics;
- the request carries webrtc_all_ice (hbb_common 64b54ab) so the
  controlled side knows the offer is full-ICE: it answers with full ICE
  and no TURN requirement, while offers without the bit keep today's
  relay-only answer path on every version-skew combination.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01ExUfAkYbq8UC9pQCiLy8TQ

2026-09-05 15:04:12 +08:00

..

client

feat: WebRTC transport racing, DTLS identity binding, and pc-leak fixes

2026-09-05 15:04:11 +08:00

hbbs_http

refact(oidc): manually open the browser (#15706)

2026-08-04 12:35:04 +08:00

ipc

fix(linux): serve the Wayland login screen the DRM backend was built for (#15792)

2026-08-13 20:22:41 +08:00

lang

port forward shared conn (#16062)

2026-09-05 14:59:51 +08:00

platform

fix(custom client): msi update, preserve exe name (#16057)

2026-09-04 15:49:50 +08:00

privacy_mode

Refact/privacy mode 1 multi monitors (#15321)

2026-06-18 21:27:44 +08:00

server

port forward shared conn (#16062)

2026-09-05 14:59:51 +08:00

ui

refact: remove linux headless (#15866)

2026-08-18 15:02:50 +08:00

whiteboard

feat: cursor, linux, Xwayland (#12859)

2025-09-06 20:35:51 +08:00

auth_2fa.rs

trust this device to skip 2fa (#9012)

2024-08-12 18:08:33 +08:00

client.rs

ws: decouple ICE policy from force_relay — full-ICE WebRTC over WebSocket

2026-09-05 15:04:12 +08:00

clipboard_file.rs

fix(fuse): umount (#15426)

2026-06-26 16:17:44 +08:00

clipboard.rs

feat: optionally sync clipboard between connected sessions (#15934)

2026-09-01 10:47:26 +08:00

common.rs

fix: the KCP io throttle reset itself every cycle, so it never throttled

2026-09-05 15:04:12 +08:00

core_main.rs

refact: remove linux headless (#15866)

2026-08-18 15:02:50 +08:00

custom_server.rs

A=b, A case insensitive (#9976)

2024-11-20 19:44:24 +08:00

flutter_ffi.rs

fix: android: replace all-files access with scoped storage (#15602)

2026-08-31 16:29:51 +08:00

flutter.rs

feat: optionally sync clipboard between connected sessions (#15934)

2026-09-01 10:47:26 +08:00

hbbs_http.rs

fix: update download, force tls (#15529)

2026-07-09 15:05:49 +08:00

ipc.rs

fix(linux): a session logout should hand the peer to the login screen (#15905)

2026-08-26 18:26:26 +08:00

kcp_stream.rs

fix: the KCP io throttle reset itself every cycle, so it never throttled

2026-09-05 15:04:12 +08:00

keyboard.rs

refact: remove feature cli (#15524)

2026-07-06 16:17:32 +08:00

lan.rs

fix: check valid id (#15535)

2026-07-14 15:35:52 +08:00

lang.rs

Add Urdu language support for UI strings (#15961)

2026-08-25 09:19:37 +08:00

lib.rs

port forward shared conn (#16062)

2026-09-05 14:59:51 +08:00

main.rs

refact: remove feature cli (#15524)

2026-07-06 16:17:32 +08:00

naming.rs

fix: http/https proxy (#7821)

2024-04-25 11:46:21 +08:00

port_forward_mux.rs

port forward shared conn (#16062)

2026-09-05 14:59:51 +08:00

port_forward.rs

feat: WebRTC transport racing, DTLS identity binding, and pc-leak fixes

2026-09-05 15:04:11 +08:00

privacy_mode.rs

feat(macos): initial privacy mode support [a simple try] (#14102)

2026-01-27 16:38:37 +08:00

rendezvous_mediator.rs

ws: decouple ICE policy from force_relay — full-ICE WebRTC over WebSocket

2026-09-05 15:04:12 +08:00

server.rs

feat: WebRTC transport racing, DTLS identity binding, and pc-leak fixes

2026-09-05 15:04:11 +08:00

service.rs

feat(macos): silent auto-update with security hardening (#15550)

2026-07-23 00:22:10 +08:00

tray.rs

typo

2026-08-27 11:47:36 +08:00

ui_cm_interface.rs

fix: android: replace all-files access with scoped storage (#15602)

2026-08-31 16:29:51 +08:00

ui_interface.rs

feat(recording): add visibility and service storage options (#15662)

2026-07-25 15:21:13 +08:00

ui_session_interface.rs

ws: decouple ICE policy from force_relay — full-ICE WebRTC over WebSocket

2026-09-05 15:04:12 +08:00

ui.rs

refact: remove feature cli (#15524)

2026-07-06 16:17:32 +08:00

updater.rs

feat(macos): silent auto-update with security hardening (#15550)

2026-07-23 00:22:10 +08:00

virtual_display_manager.rs

fix: uninstall, idd (#13142)

2025-10-12 09:14:21 +08:00