One of the design goals for Peek was that you should never have to open a port on a machine just to reach it remotely. That ruled out the usual “forward 3389 and hope” approach most RDP managers assume.
Instead, Peek brokers a short-lived tunnel per session:
- The client authenticates with the broker.
- The broker hands back a scoped, single-use tunnel token.
- The connection tears down the moment the session ends — nothing lingers.
It’s more moving parts than a plain port-forward, but it means a laptop on a coffee-shop network is never one open port away from a bad day.