RDP defined
RDP (Remote Desktop Protocol) is a proprietary protocol developed by Microsoft that gives users a graphical remote-desktop connection to another computer. It transmits over TCP port 3389 by default and supports a rich client experience including clipboard sharing, printer redirection, filesystem mapping, and multi-monitor support.
How RDP works
RDP uses a client-server architecture:
- The RDP client (Windows Remote Desktop, Remmina, FreeRDP) opens a connection to port 3389 on the target host
- The server side (Remote Desktop Services on Windows Server) verifies user credentials
- After an encrypted session is established, the client receives the server's graphical output
- The user's keyboard and mouse input is sent back to the server over the network
- The server only sends screen changes (delta compression), reducing bandwidth requirements
RDP security considerations
RDP is the most commonly used remote management protocol inside enterprises, and also the most commonly attacked:
- Never expose port 3389 to the public internet — must go through a VPN or bastion host
- Use Network Level Authentication (NLA) to force authentication before session establishment
- Disable NTLM fallback for RDP; enforce Kerberos or certificates
- Enable RDP session encryption (high encryption level)
- Log RDP login events and monitor for brute-force attempts
- Restrict source IPs allowed for RDP access (firewall rules)
RDP limitations and out-of-band channels
RDP depends on a working OS — when the server is down, the OS crashes, or the network driver fails, RDP cannot connect at all. This is why out-of-band management exists. Through IPMI/Redfish out-of-band channels, operators can remotely view hardware status, restart servers, mount ISO images, and access the serial console while the OS is down — rescue operations RDP cannot do. CloudSino DCOS integrates IPMI/Redfish out-of-band capabilities with in-band RDP management in one console, delivering full-stack remote operations.