diff --git a/infra/security/cloudflare.md b/infra/security/cloudflare.md
index 6bc2850..fc92b7b 100644
--- a/infra/security/cloudflare.md
+++ b/infra/security/cloudflare.md
@@ -120,6 +120,7 @@ Syn 이 엣지 관점에서 소유. 일반 DNS 관리 협업은 Heimdall.
 | `git.inouter.com` | A | `52.79.45.166` | off | relay4wd Lightsail |
 | `teleport.inouter.com` | A | `52.79.45.166` | off | relay4wd Lightsail |
 | `twilio.jp.inouter.com` | A | `172.233.93.180` | off | |
+| `rustdesk.inouter.com` | A | `42.125.196.116` | off | jp1 RustDesk (raw TCP/UDP라 프록시 불가, DNS-only). [[../../services/rustdesk]] |
 | `bunny.mcp.inouter.com` | CNAME | `k3s.inouter.com` | off | |
 | `vl.inouter.com` | CNAME | `k3s.inouter.com` | off | [[victorialogs|VictoriaLogs]] |
 | `emulator.api.inouter.com` | CNAME | `k3s.inouter.com` | off | |
diff --git a/services/rustdesk.md b/services/rustdesk.md
index 40e3c63..a8dd1de 100644
--- a/services/rustdesk.md
+++ b/services/rustdesk.md
@@ -45,10 +45,12 @@ tazDfFELv4N7HOSNiCPPyJ7qG0Cx4K6byPEr33vBvUI=
 ## 클라이언트 설정 (고객/지원자 공통)
 
 RustDesk 앱 → 설정 → 네트워크 → ID/relay 서버:
-- **ID 서버**: `42.125.196.116`
-- **Relay 서버**: `42.125.196.116`
+- **ID 서버**: `rustdesk.inouter.com` (= 42.125.196.116, Cloudflare DNS-only/회색구름. raw TCP/UDP라 프록시 불가)
+- **Relay 서버**: `rustdesk.inouter.com`
 - **Key**: `tazDfFELv4N7HOSNiCPPyJ7qG0Cx4K6byPEr33vBvUI=`
 
+> DNS: `rustdesk.inouter.com` A → 42.125.196.116 (2026-06-11, proxied=false). 와일드카드 `*.inouter.com`(→k3s) 위에 특정 레코드로 우선 적용. 정본 [[../infra/security/cloudflare]].
+
 ## 운영
 
 - 로그/상태: `incus exec jp1:rustdesk --project default -- sh -c 'ps aux | grep hbb; ss -tulnp | grep 2111'`