01
Native agent on your suite.
01 · Workstation
Connect to your workstations.
From anywhere.
VDO Workstation is remote desktop access for post and VFX. Connect in a supported browser or the native macOS Workstation client to control your macOS or Linux host. On supported Linux hosts, add a separate, colour-managed Blackmagic or NDI reference signal alongside your desktop. View it in picture-in-picture or send it to dedicated Blackmagic or NDI output from the native client.
02
Browser or native macOS client.
03
Input, displays and audio by qualified setup.
04
QUIC direct or relay. No VPN required.
02 · How it works
Four steps.
Then it’s your suite.
- 01Install the host agent: Apple Silicon macOS 13+, or x86_64 Rocky 8/9 GNOME/GDM X11 or Fedora 43/44 GNOME/GDM Wayland.
- 02Register the host with your team’s code. The agent connects out to VDO.
- 03Sign in from a supported browser or the native Workstation client on an Apple Silicon Mac with macOS 14+, then open an accessible ready host.
- 04The cursor, pen, displays and audio follow the host capability profile.
03 · How it feels
The workstation,
in a tab.
Keep editing, painting or compositing on the machine in the suite. Workstation carries mouse, pen and tablet input back to the host and sends its displays and audio to your browser. Available input and display features follow the host and client.
- 01VDO Remote Agent on macOS; exact GNOME/GDM distro pairings on Linux.
- 02macOS: 10-bit HEVC 4:2:0 / 4:4:4 with Display P3 on supported native paths. The browser desktop canvas is eight-bit output.
- 03Linux: 8-bit 4:2:0 / 4:4:4 on supported encoder paths, with NVIDIA for 4:4:4.
- 04Up to two display routes on supported host/client paths.
- 05Pen pressure, tilt, twist, eraser and barrel-button events where supported.
- 0648 kHz stereo Opus audio.
- 07Custom protocol over QUIC, with P2P or relay paths.
04 · Specs
Specs
Host agents
- macOS: Apple Silicon, macOS 13+
- Linux: x86_64 Rocky 8/9 GNOME/GDM X11
- Linux: x86_64 Fedora 43/44 GNOME/GDM Wayland
- Fedora requires normal host capture consent
- GPU and encoder workflows require physical qualification
- Single-tenant registration code
- Admin-controlled access groups
Input + display
- Input and display options follow published build capabilities
- Pen pressure, tilt, twist, eraser and buttons where supported
- macOS 10-bit HEVC 4:2:0 / 4:4:4 and Display P3 on supported native paths
- Browser desktop canvas: eight-bit output
- Linux: 8-bit 4:2:0 / 4:4:4 on supported encoders; 48 kHz stereo Opus audio
- Experimental X11 SDR ten-bit: opt-in, 30 fps cap; Wayland ten-bit prototype is not production
Network + transport
- Custom protocol, QUIC transport
- P2P and relay paths
- Managed relay access without permanent port forwarding
- Direct QUIC requires reachable peer UDP traffic
- Allow media traffic as well as HTTPS; outbound 443 alone is insufficient
- Optional region pinning
- Optional IP allow-list
Check your workflow.Latency depends on capture, encoding, decoding, display and network distance. Physical GPU, tablet, audible audio and multi-monitor qualification is separate from VM readiness. Read the Linux setup guide for the release's hardware and lifecycle qualification limits.
05 · Quick answers
What operators
ask first.
Check the host, input devices, displays and network path for the suite you need to reach.
- Do I need a VPN?No VPN is required. Allow HTTPS and the managed relay media ports; direct QUIC also needs reachable peer UDP traffic. Outbound HTTPS alone does not provide a predictable media path.
- What about colour fidelity?macOS can encode ten-bit HEVC on supported paths, but the browser desktop canvas outputs eight-bit. Linux desktop capture is eight-bit by default. Use a qualified native display path for ten-bit output and Sessions for collaborator picture review.
- Multi-monitor?Up to two display routes on supported host/client paths. Available routes follow the published builds; a basic Linux VM check is not physical multi-monitor acceptance.
- Pen pressure?Pressure, tilt, twist, eraser and barrel-button fields are forwarded where supported. Qualify the physical tablet and application with the installed host/client builds and permissions.
- What about audio?Workstation uses 48 kHz stereo Opus audio. A worker reporting audio-ready is not a substitute for audible playback qualification on the actual host and client.
- What if my colourist works on Linux?Use x86_64 Rocky 8/9 with GNOME/GDM X11 or Fedora 43/44 with GNOME/GDM Wayland. Fedora retains normal host capture consent. Read the setup guide for the exact release exceptions.
06 · Access
Managed access.
Run by your admin.
Hosts register with your team’s code and connect out to VDO. Your admin manages the access groups that decide who can reach each suite, and can review activity in the audit log.
Relay access.
No permanent port forwarding.
The host workstation initiates the connection to VDO. Allow the required HTTPS and relay media traffic. Relay access does not need permanent port forwarding to the suite; direct QUIC still depends on reachable peer UDP and the local firewall.
Admin-controlled.
Single-tenant registration.
Hosts register with your team’s registration code. Your admin manages the access groups for each suite and can revoke access when an operator no longer needs it.
Activity.
Review and export the audit log.
Filter workstation activity by machine, user or action, then export it as CSV. Entries include timestamps, actions and the available actor, machine and IP details.
Encrypted.
Encrypted transport.
Workstation carries media and input over encrypted transport. Access requires authentication and permission for the host; relay carries the traffic when a direct path is unavailable.
Connect to your workstations.
Access by request · macOS + Linux agents · direct onboarding