anderspitman/awesome-tunneling

List of ngrok/Cloudflare Tunnel alternatives and other tunneling software and services. Focus on self-hosting.

awesome-tunneling's Issues

Add teleport

I think https://github.com/gravitational/teleport would also be relevant to this list.

Add bore: https://news.ycombinator.com/item?id=30970720

https://github.com/fractalnetworksco/selfhosted-gateway

https://github.com/fractalnetworksco/selfhosted-gateway

Look into yggdrasil

https://yggdrasil-network.github.io/2018/07/15/remote-access.html

Consider https://github.com/cmars/onionpipe

onionpipe forwards ports on the local host to remote Onion addresses as Tor hidden services and vice-versa.

https://github.com/deepakkamesh/webtunnel

Please add srv.us

Would very much appreciate getting https://srv.us on the list.

boringproxy needs ssh

After some unsuccessful testing, I noticed boringproxy needs an ssh connection. So it does not work in private firewall protected networks allowing only http traffic

Look at https://github.com/larsbrinkhoff/httptunnel

You may add localxpose.io

Another localhost exposure service https://localxpose.io

There's a lot of overlap with this list: https://blackarch.org/tunnel.html

Tailscale now uses a BSD 3-clause license with a separate PATENTS file

Please consider updating Tailscale's entry to note the BSD license and PATENTS file:

https://github.com/tailscale/tailscale/blob/main/LICENSE
https://github.com/tailscale/tailscale/blob/main/PATENTS

Question: tunnelling suggestion for E2E tests

Hey! Thank you so much for collecting this awesome list!

I am currently using localtunnel, and it fits my usecase pretty well, although I have doubts about its stability. Can you suggest a service with the following requirements:

• (if paid) no limits on running tunnels
• randomly generated subdomains
• SSL
• relatively easy way to get generated URL outside of the terminal window with running client

I went through (most) of the services in this list, and unfortunately, I was not been able to find something that will fit my needs.

Thanks!

Inlets open source link leads to 404

The "open source" link found on this line:

awesome-tunneling/README.md

Line 85 in 710bf1e

* [inlets](https://inlets.dev/) - Used to be [open source](https://github.com/inlets/inlets-archived); now focused on a polished commercial offering. Designed to work well with Kubernetes.

leads to a non-existing repo. I believe the maintainer removed any official repos of the original open source code-base in early January of this year.

I did upload a detached fork of the code to my own GitHub account to retain for those that needed it:
https://github.com/ssddanbrown/inlets
This had the latest original commit history I could find at time of creation.

I didn't create a PR as wasn't sure if you'd want to link to a non-official repo or if you'd rather just remove the link.

Several new tools were mentioned in https://news.ycombinator.com/item?id=30443747

Schuko

For WebSockets, I created several years ago https://github.com/piranna/Schuko, and have been using it in multiple projects. It can be used with latests changes also as a WebRTC signaling channel.

Add TOR

Using the TOR network, you can setup Hidden Services which are bound to hosts which are in NAT restricted networks, example:

- Alice sets up a hidden service (called aliceshiddenservice.onion), which is bound to 192.168.1.2 (Alice's SSH server, which is only accessible from the local network)
- Bob will then connect to "aliceshiddenservice.onion" using software such as PuTTy with the TOR proxy (needed for the DNS lookups), which in turn will connect Bob to Alice's SSH server
- No port forwarding needed, and can be perfectly hosted on a small raspberry pi

add localtonet.com support http,tcp,udp

Look at iodine

https://github.com/yarrick/iodine

Maybe mention autossh to be used in combination with SSH-based solutions

Consider https://yaler.net/

Yaler - A relay infrastructure for secure Web and SSH access. Both, the YalerTunnel daemon and the Yaler relay server are open source, with hosted options.

just iptables?

When the self-hosted server at home already serves a trusted SSL certificate (letsencrypt wildcard via dns challenge), that it's sufficient just to do an SSH tunnel (via systemd) and do some iptables magic on the public VPS.

sysctl net.ipv4.ip_forward=1
iptables -t nat -A PREROUTING -i eth0 -p tcp -d <PUBLIC_SERVER_IP> --dport 443 -j DNAT --to  127.0.0.1:8443
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

while the client is just doing

ssh -R 8443:localhost:443 root@PUBLIC_SERVER_IP

Do any of these offer free domain usage like ngrok does?

I know this list is focused on self-hosting, but do any of the options offer free assigned URLs in case the user doesn't have their own domain registered?

Checkout out graviti

https://news.ycombinator.com/item?id=29809830#29810264

Change to table format

Probably auto-generate something like the following:

Name	Popularity	Tunneling Method	Language	License	Details
frp		Single or pooled TCP sockets	Go	Apache 2.0	Comprehensive open alternative to ngrok. Supports UDP, and has a P2P mode.
boringproxy		SSH	Go	MIT	Designed to be very easy to use. No config files. Clients can be remote-controlled through a simple WebUI and/or REST API on the server.

Look at https://github.com/dosgo/ngrok-c

Add CRProxy

https://crproxy.com

Look at https://greenhouse.server.garden/

Remove lynk.sh

lynk.sh now redirects to "Loophole Labs". I poked around a bit and wasn't able to see any mention of a tunneling solution. @Jspsun @ShivanshVij is there any reason you feel I should leave it on the list?

Consider https://github.com/openziti/ziti

I think you'd be happy with the project. I'm a dev on it - and i'd be happy to meet with you. I'd be happy to have you on ziti tv too if yoo wanted? :) a weekly livestream we do - generally about ziti but we could do a podcast sorta thing.

close this if i'm outta line :)

https://github.com/openziti/ziti

Kindly add KubeSail.com

Heyo! I'm the founder of https://kubesail.com - we do tunneling, dynamic DNS and other services for home-hosting with Kubernetes. We're a 2 person startup and it would mean loads to us to make it onto your list!

Thanks ❤️

GSocket

https://www.gsocket.io/
Global Socket allows two workstations on different private networks to communicate with each other. Through firewalls and through NAT - like there is no firewall.

Features:

• Uses the Global Socket Relay Network to connect TCP pipes
• End-2-End encryption (using OpenSSL's SRP / RFC 5054)
• AES-256 & key exchange using 4096-bit Prime
• No PKI required.
• Perfect Forward Secrecy
• TOR support (optional)

jprq not written in Golang

jprq - Another home-grown Golang solution. Proxies over WebSockets.

I think jprq was written in Python, not Golang.

Check out tsocket

https://www.metered.ca/tools/tsocket/

Add tunnel.pyjam.as

https://news.ycombinator.com/item?id=31511445

Consider adding go-http-tunnel

https://github.com/mmatczuk/go-http-tunnel

More ideas to add to your list

https://gist.github.com/SomajitDey/efd8f449a349bcd918c120f37e67ac00 is a nice list with some unique options, like gsocket.io

Add Teredo tunneling

The Teredo server at trex.fi is still alive, and you can get a public IPv6 address with it. Use miredo on Linux. Then, some dynamic DNS, and voila, you can reach your server from anywhere with IPv6 (or through another miredo) over a domain name. Yes, this is slow.

Cloudflare Argo Tunnel is now free

Cloudflare Argo Tunnel was renamed to Cloudflare tunnel and is now free.
https://blog.cloudflare.com/tunnel-for-everyone/

Look at https://github.com/proxytunnel/proxytunnel

Add Nebula

Because I can see both ZeroTier and Tailscale, I think adding Nebula is a safe bet.
https://github.com/slackhq/nebula

Kindly add sshreach.me

Hi, I've just seen your list mentioned on Hacker news. I see that you also list commercial tunneling solutions and I wonder if you could add https://sshreach.me to your list? I am a lead developer, we are a small software company from Serbia. We offer zero-configuration, remote controlled tunneling to any Linux, windows or mac based device. Our service is transparent (no third-party applications or binary executables, just a simple python script that runs on your device), private (uses proven ssh technology), cheap and portable.

Check https://github.com/benjamincburns/websockproxy

NPS

We are using a tool called NPS https://github.com/ehang-io/nps which is very handy and powerful. It is a bit different from other tools because with NPS we are actually managing all the client tunnel settings on the server (web).

Look at frwd

I started with frwd (aka forward) before I found your list.
However, still finished it, maybe you want to take a look at it:
https://github.com/Eun/frwd

Consider https://github.com/NabuCasa/snitun

Seems rather complicated, and maybe rolling their own crypto for some reason?

Add `rathole`

I developed rathole - A secure, stable and high-performance reverse proxy for NAT traversal, written in Rust. Benchmark shows that it has some advantages on the performance and memory consumption.

There's not much Rust stuff on the list. I hope rathole could be a good addition :)

Inlets is not open source

The open source version of inlets became inlets pro as far as I understand. There are some open source components, but I don't think you can use those without a subscription.

Ultrahook

Hi,
Another useful one: Ultrahook (runs on Ruby) offers a free fixed-subdomain option, so a good free alternative to ngrok.

EDIT: It only forwards HTTP POST requests, so not the same as ngrok. But still useful in testing webhooks, as it's name suggests.

Hope that helps,
Andy

Consider adding tunnel

https://github.com/koding/tunnel