USB passthrough

Local USB devices for the assigned VM

Beagle OS keeps USB forwarding tied to the endpoint and VM assignment instead of exposing generic device services.

  1. The endpoint detects local USB devices.
  2. The control plane decides whether the device can be forwarded for the assigned VM.
  3. A controlled tunnel path carries the device control channel.
  4. The VM attach/detach workflow applies the requested mapping.

Use cases

Webcams, printers, security keys, storage devices, and selected peripherals.

Scope

Forwarding is tied to VM assignment and endpoint identity.

Security

No unauthenticated public USB service should be exposed on the endpoint.