Infrastructure

    Streamlined Deployment

    Deploy your server and roll out agents across thousands of endpoints with enterprise-grade performance and security.

    High-Performance Backend

    Built for Enterprise Scale

    NetLock RMM uses a state-of-the-art high-performance backend architecture that sets new standards for RMM solutions.

    RAM-Based Package Delivery

    Unlike conventional RMM solutions that rely on disk-based delivery, NetLock RMM serves installation and update packages directly from memory.

    • All packages preloaded into RAM on server startup
    • Zero disk I/O bottlenecks during agent rollouts
    • Network bandwidth is the only limiting factor
    • Minimal resource impact during mass deployments
    • Eliminates wear and tear on storage hardware
    5,000+

    Devices per Instance

    Manage and monitor up to 5,000 devices with minimal server resources.

    2
    CPU Cores
    8 GB
    RAM
    Communication Architecture

    How Agents Communicate

    Understanding the secure communication flow between agents, backend, and web console.

    MySQL Server
    Database Storage
    NetLock RMM Backend
    Agent Proxy & API
    HTTPS & SignalR
    NetLock RMM Web Console
    Server-Side Rendered UI
    Comm Agent
    HTTPS
    Device sync & policies
    Remote Agent
    SignalR
    Real-time remote access
    Health Agent
    HTTPS
    Monitoring & sensors

    Local Communication

    Web Console and Backend communicate locally via HTTPS and SignalR for maximum security.

    SQL Proxy

    Backend and Web Console act as proxies between SQL Server and agents, ensuring data isolation.

    Outbound-Only

    Agents only perform outgoing connections – no port forwarding required on client networks.

    Server-Side Rendering

    Web Console uses SSR – clients only receive visual data, never sensitive technical information.

    Secure Tunneling

    Relay Server Architecture

    Establish secure end-to-end encrypted tunnels to target devices without port forwarding.

    Admin PC
    NetLock Relay App
    TLS
    Relay Server
    Connection Broker
    E2E Encrypted
    Target Device
    NetLock Agent
    TLS

    How It Works

    1

    Admin's Relay App establishes TLS connection to Relay Server

    2

    Backend instructs target device to connect to Relay Server

    3

    Target device establishes its own TLS connection

    4

    End-to-end encryption is established between Admin and Target

    5

    Bidirectional tunnel allows secure communication

    6

    Use native tools (RDP, SSH, DBeaver) through secure tunnel

    Key Benefit: No port forwarding required on either side. Both connections are outbound, allowing secure access even through strict firewalls.

    Server Deployment

    Flexible Server Architecture

    Deploy on-premises or in the cloud with Docker. Our modular role-based architecture scales from single-server to enterprise multi-node setups.

    Comm Server

    Handles agent communication, device sync, policy distribution and event synchronization

    Update Server

    High-speed RAM-based package delivery for agents, installers and updates

    Trust Server

    Cryptographic hash verification for supply chain attack protection

    Remote Server

    Real-time SignalR connections for remote shell and file browser

    Notification Server

    Third-party integrations: Email, Teams, Telegram, ntfy.sh

    File Server

    Centralized file storage for tools, scripts and deployments

    Agent Deployment

    1-Click Agent Installer

    Generate custom installation packages with your configuration baked in. Deploy agents across Windows, macOS, and Linux with a single click.

    Custom Install Builder

    Configure server address, tenant assignment, and default policies directly in the installer. No manual configuration needed on endpoints.

    Platform-Specific Scripts

    Download ready-to-use installation scripts for each platform and architecture. Perfect for mass deployment via GPO, Intune, or your preferred MDM.

    Concurrent Rollout Control

    Control simultaneous agent installations to prevent bandwidth saturation. Configure limits based on your network capacity for smooth mass deployments.

    Enterprise-Scale Deployment

    • RAM-based package delivery – no disk I/O bottlenecks
    • Packages preloaded on server startup
    • Network bandwidth is the only limiting factor
    • Minimal resource impact during mass rollouts
    • Enterprise-scale: thousands of agents simultaneously

    Ready to Deploy?

    Get started with NetLock RMM today. Cloud or self-hosted, we've got you covered.