260 likes | 618 Views
MeshCentral Technical Presentation. Based on a local peer-to-peer mesh of agents, this secure and scalable architecture solves the outside-in problem with no network setup. Peer-to-peer network. Meshcentral. Mesh Agent runs on: Microsoft Windows (32 bit & 64 bit ) Apple Mac OSX (x86)
E N D
Based on a local peer-to-peer mesh of agents, this secure and scalable architecture solves the outside-in problem with no network setup Peer-to-peer network Meshcentral
Mesh Agent runs on: • Microsoft Windows (32bit & 64bit) • Apple Mac OSX (x86) • Linux (x86, 64bit, MIPS, ARMv6) • Raspberry Pi & PogoPlug(ARMv6) • Xen (x86) • Google Android (x86, ARM) • Agent is open source.All Mesh Code is 100% Intel. VisualStudio Mesh Agent Source Code GCCCross-Compile Android SDK
- Agent Design WebRTCData Channel LocationWiFi reporting Web Browser R-WakeIntel® Remote Wake TLSClient Mesh Server Intel® Smart Connect Agent MESHP2PModule S-UDPServer / Multicast TCP10 Relay Sockets Intel® Remote Wake TCP ForwardIntel® AMT Forward UDP 16990 Wake-on-LAN Support WMIManagement HTTPSServer TCP 16990 LMS/MEIIntel® AMT STUNClient Intel® AMT Intel® Active ManagementTechnology UDP 16991 SR-UDPFirewall Buster DesktopRemoting GuardpostManagement Module TLSServer Files Remote Access TCP 16991 Terminal Command Shell SerialCOM Port TCP5 Relay Sockets Intel® AMTSerial-over-LAN TCP Forward SupportLibraries SQLite CryptoAPI Microstack OpenSSL AES Acceleration (AES-NI) Intel® IdentityProtection Technology Digital Random Generator (RDRAND) Trusted Platform Module
Mesh Agents are signed and self-updating from the server and from other agents. Scalable update and agents. Over 100 agents updates have been this way. Meshcentral
Mesh agents have their own messaging API application can use to unicast to a single agent, or multicast in the P2P network. In both cases, the message will “hop” from node-to-node. Hopping Multicast Message Hopping Unicast Message
Web based remote desktop encodes the desktop as JPEG images and sends them to a web or C# client. The web client uses an HTML5 canvas to display the decoded output and capture input. JPEG Images Input CommandsKeyboard, Mouse, Touch Windows, Linux, OSXMesh Agent HTML5 Browser
Secure Direct Connections Behind NAT’s • Agents have STUN support and a WebRTC data channel stack. • Management traffic can flow directly from a console to a relay agent within a network. • Use direct tunnel for any TCP traffic: KVM, Files, Intel® vPro… STUN Server Router NATBarrier Meshcentral Web Socket WebRTC / STUN WebRTC / TURN TURN Server
Mesh Server Direct Connections • If the Mesh server is installed in an intranet environment, a the server direct mode can be enabled. • Nodes are checked to see if they are directly routable. • Server initiates TCP connects to routable nodes. • No relay agents needed. Server and some clients are the same network Meshcentral Mesh Server initiates TCP connections
Intel® vPro support • Monitors Intel® vPro computers in sleep states • Solves four big deployment problems with Intel® vPro: Discovery, Credentials, Remote Access & Provisioning • Remote access to BIOS, boot repair OS… Meshcentral Out-of-bandCommunication Intel® vProP2P Monitoring
Remote access to private web pages. A routing cookie is sent to the browser along with a redirection to a different web port. Each HTTP request is forwarded over the P2P network. Routing Cookie& Redirect Meshcentral Relay Agent HTTP Traffic Target HTTPServer
Intel® vPro Fast Call for Help (CIRA) support • Built-in support for Intel® AMT remote access connections. • Traffic automatically routed to CIRA when possible. • All applications API’s stay the same, identical security model. Meshcentral Out-of-bandCommunication Intel®AMT 4.0+ Javascript WSMAN Stack(Used for Web Applications)
Intel®vPro traffic is routed 3 ways- Agent Relay, CIRA and Direct. CIRARouting NAT Meshcentral Proxy / NAT AgentRelay DirectRouting
Intel®vPro events- Correctly routed when coming over a CIRA channel Meshcentral NAT CIRARouting
The Meshcentral multi-display feature uses both Websockets and WebRTC for more efficient traffic handling. Efficient use of a single Web Socket to relayallof the desktop thru Meshcentral Meshcentral new Multi-Desktop feature. Monitor many computer’s screens at once. If the browser supports it, create many WebRTC connections to the target computer for even more efficiency & speed
Developer API’s are available for writing new usages on top of the mesh infrastructure. Web, agent and control API’s provide developers with flexibility. Meshcentral Online web APIEnumerate devicesRemote power controlRemote messagingRemote TCP streaming Agent API Inter-agent messaging Broadcast messagingCapability search Local Control APIEnumerate devicesLocal power controlLocal messaging
Main sitemeshcentral.com Information info.meshcentral.com