List of ngrok/Cloudflare Tunnel alternatives and other tunneling software and services. Focus on self-hosting.

• frp

  113 80,430 9.0 Go

  A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

If you want to self-host, there are many options. For something production ready frp is probably what you want. If you're a developer, I'd recommend starting with my own SirTunnel project and modifying it for your needs. For non-developers and those wanting more of a GUI experience, I created boringproxy. It's my take on a comprehensive tunnel proxy solution. It's in beta but currently solves almost everything I want. Once the server is running this is a very easy tool to use and has some nice features.

• SirTunnel

  7 1,264 3.7 Python

  Minimal, self-hosted, 0-config alternative to ngrok. Caddy+OpenSSH+50 lines of Python.

If you want to self-host, there are many options. For something production ready frp is probably what you want. If you're a developer, I'd recommend starting with my own SirTunnel project and modifying it for your needs. For non-developers and those wanting more of a GUI experience, I created boringproxy. It's my take on a comprehensive tunnel proxy solution. It's in beta but currently solves almost everything I want. Once the server is running this is a very easy tool to use and has some nice features.

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• tunnel

  3 - -

tunnel.pyjam.as - No custom client; uses WireGuard directly instead. Written in Python. source code

• ngrok

  14 23,973 3.7 Go

  Unified ingress for developers

ngrok 1.0 - Original version of ngrok. No longer developed in favor of the commercial 2.0 version.

• localtunnel

  47 18,263 0.0 JavaScript

  expose yourself

  

localtunnel/localtunnel - Written in node. Popular suggestion.

• sshuttle

  40 11,182 7.8 Python

  Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.

  

sshuttle - Open source project originally from one of the founders of Tailscale. Server doesn't require root; client does. Explicitly designed to avoid TCP-over-TCP issues.

• chisel

  29 12,193 4.4 Go

  A fast TCP/UDP tunnel over HTTP

chisel - SSH under the hood, but still uses a custom client binary. Supports auto certs from LetsEncrypt. Written in Go.

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

• bore

  27 8,063 1.2 Rust

  🕳 bore is a simple CLI tool for making tunnels to localhost

bore - Minimal tunneling solution. MIT Licensed. Written in Rust.

• rathole

  57 7,773 6.6 Rust

  A lightweight and high-performance reverse proxy for NAT traversal, written in Rust. An alternative to frp and ngrok.

rathole - Similar to frp, including the config format, but with improved performance. Low resource consumption. Hot reload. Written in Rust.

• Expose

  12 4,160 4.4 PHP

  A beautiful, fully open-source, tunneling service - written in pure PHP (by beyondcode)

  

expose - ngrok alternative written in PHP.

• sish

  33 3,786 6.4 Go

  HTTP(S)/WS(S)/TCP Tunnels to localhost using only SSH.

sish - Open source ngrok/serveo alternative. SSH-based but uses a custom server written in Go. Supports WebSocket tunneling.

• localtunnel

  4 3,180 0.0 Go

  Expose localhost servers to the Internet (by progrium)

progrium/localtunnel - As far as I know this is the first ever tool of this kind, predating ngrok and the other localtunnel. No longer maintained, but here for posterity. MIT License. Written in Go.

• gost

  2 3,499 8.7 Go

  GO Simple Tunnel - a simple tunnel written in golang (by go-gost)

  

gost - Looks like a comprehensive option. TCP and UDP tunneling. TAP/TUN devices. Load balancing. Web API. Written in Go.

• go-http-tunnel

  1 3,179 3.6 Go

  Fast and secure tunnels over HTTP/2

go-http-tunnel - Uses a single HTTP/2 connection for muxing. Need to manually generate certs for server and clients.

• pgrok

  9 3,073 8.1 Go

  Poor man's ngrok - a multi-tenant HTTP/TCP reverse tunnel solution through SSH remote port forwarding

  

pgrok/pgrok - A multi-tenant HTTP reverse tunnel solution through SSH remote port forwarding.

• wstunnel

  14 3,199 9.6 Rust

  Tunnel all your traffic over Websocket or HTTP2 - Bypass firewalls/DPI - Static binary available

wstunnel - Proxies over WebSockets. Focus on proxying from behind networks that block certain protocols. Written in Rust with executables provided.

• tunnelto

  2 2,030 10.0 Rust

  Expose your local web server to the internet with a public URL.

tunnelto - Open source (MIT). Written in Rust.

• zrok

  18 2,085 9.7 Go

  Geo-scale, next-generation peer-to-peer sharing platform built on top of OpenZiti.

  

zrok - Aims for effortless sharing both publicly and privately. Supports multiple types of resources, including HTTP endpoints and files. Built on OpenZiti (see overlay section below). Apache 2 License. Written in Go.

• gsocket

  13 1,344 9.0 C

  Connect like there is no firewall. Securely.

  

gsocket/Global Socket - The Global Socket Tookit allows two users behind NAT/Firewall to establish a TCP connection with each other. Securely. Written in C.

• boringproxy

  10 1,131 2.8 Go

  Simple tunneling reverse proxy with a fast web UI and auto HTTPS. Designed for self-hosters.

  

boringproxy - Designed to be very easy to use. No config files. Clients can be remote-controlled through a simple WebUI and/or REST API on the server.

• jprq

  2 883 7.7 Go

  join public router. quickly.

jprq - Proxies over WebSockets. Written in Go.

• tunnelmole-client

  8 906 8.2 TypeScript

  Tunnelmole - Connect to local servers from anywhere

Tunnelmole - Open source and optionally self hostable. The client and server are both written in TypeScript.

• wiretap

  7 765 4.7 Go

  Wiretap is a transparent, VPN-like proxy server that tunnels traffic via WireGuard and requires no special privileges to run.

  

Wiretap - Transparent tunneling over WireGuard (UDP) using userspace network stack. Root not required on server. Supports multiple clients and servers. Written in Go.

• PyPagekite

  1 714 0.0 Python

  Python implementation of the PageKite remote front-end protocols.

PageKite - Comprehensive open source solution with hosted options.

• portr

  3 2,032 9.7 Python

  Open source ngrok alternative designed for teams

portr - Has a JavaScript/Python admin page and request inspection/replay features. AGPL-3.0 License. Tunneling implemented in Go.

• crowbar

  1 466 - Go

  Tunnel TCP over a plain HTTP session (warning: mediocre Go code) (by q3k)

Crowbar - Tunnels TCP connections over HTTP GET and POST requests.

• tunneller

  1 464 2.1 Go

  Allow internal services, running on localhost, to be accessed over the internet..

tunneller - Open source. Written in Go.

• onionpipe

  5 459 7.7 Go

  Onion addresses for anything.

onionpipe - Onion addresses for anything. onionpipe forwards ports on the local host to remote Onion addresses as Tor hidden services and vice-versa. Written in Go.

• tunnel

  1 315 0.0 Go

  Tunnel proxy package in Go (by koding)

  

tunnel - This one is a Golang library, not a program you can just run. However, it looks easy to use for creating custom solutions. Uses a single TCP socket, and yamux for multiplexing.

• yamux

  3 2,131 0.0 Go

  Golang connection multiplexing library

  

tunnel - This one is a Golang library, not a program you can just run. However, it looks easy to use for creating custom solutions. Uses a single TCP socket, and yamux for multiplexing.

• pgrok

  3 270 10.0 Go

  Discontinued Free Introspected tunnels to localhost, like ngrok but free and unlimited (by jerson)

jerson/pgrok - Fork of ngrok 1.0, with more recent commits. Archived.

• remotemoe

  2 268 3.7 Go

  tunnels to localhost and other ssh plumbing

remotemoe - SSH-based, with custom golang server. Does some cool unique things. Instead of just plain tunnels, it drops you into a basic CLI UI that offers several useful commands interactively, such as adding a custom hostname. Also allows end-to-end encryption for both HTTPS and upstream SSH. Doesn't appear to offer non-e2e HTTPS, ie no auto Let's Encrypt support.

• docker-tunnel

  1 241 - Shell

  A Docker-based self hosted alternative to Ngrok

docker-tunnel - Simple Docker-based nginx+SSH solution.

• hypertunnel

  1 226 - JavaScript

  ✨ Expose any local TCP/IP service on the internet.

hypertunnel - Public server appears to be down. MIT Licensed. Written in JavaScript.

• berstend-hypertunnel

  1 - -

hypertunnel - Public server appears to be down. MIT Licensed. Written in JavaScript.

• tunwg

  6 198 4.0 Go

  Secure private tunnel to your local servers

tunwg - Wireguard in userspace based. Offers end to end encrypted TLS with LetsEncrypt certificates generated automatically by clients, with support for custom domains. Server can be self-hosted and doesn't require storing any data.

• reverse-tunnel

  4 161 0.0 Go

  Reverse tunnel TCP and UDP

reverse-tunnel - Support TCP and UDP tunnels. Has docker images. Supports Let's Encrypt. MIT License. Written in Go.

• gt

  1 98 8.1 Go

  Fast WebSocket(s)/HTTP(s)/TCP relay proxy for making tunnels to localhost. (by ao-space)

  

gt - Supports peer-to-peer direct connection (P2P) and Internet relay. Focus on performance. Written in Go.

• holepunch

  1 54 - Python

  Holepunch API

  

holepunch - Has nice hosted solution. Uses SSH for muxing.

• bore

  1 58 5.6 Go

  Reverse HTTP/TCP proxy to help you expose a local server behind a NAT or firewall to the internet via secure SSH tunnels. (by jkuri)

jkuri/bore - Reverse HTTP/TCP proxy via SSH. Written in Go.

• cactus-tunnel

  4 40 4.9 TypeScript

  🌵 A charming TCP tunnel over WebSocket and Browser.

cactus-tunnel - 🌵 A charming TCP tunnel over WebSocket and Browser. Written in TypeScript.

• docker-wireguard-tunnel

  2 44 6.8 Shell

  Connect two or more Docker servers together sharing container ports between them via a WireGuard tunnel

docker-wireguard-tunnel - Connect two or more Docker servers together sharing container ports between them via a WireGuard tunnel.

• tnnlink

  1 23 - Go

  Discontinued Simple HTTP tunnel using SSH remote port forwarding

tnnlink - SSH-based. Golang. Not maintained.

• specter

  1 24 7.5 Go

  like ngrok, but more ambitious with DHT for flavor (by zllovesuki)

specter - Interesting approach utilizing a DHT. QUIC transport. MIT License. Written in Go.

• ngtor

  1 19 4.0 Java

  Easily expose local services via Tor

ngtor - Easily expose local services via Tor. Written in Java.

• punchmole

  1 8 5.8 JavaScript

  Punchmole is a simple tool to give your locally running HTTP servers a public URL and is an easy to self-host alternative to `ngrok` and/or `tunnelmole`.

Punchmole - Can be integrated directly into an existing Node.js project. Written in JavaScript.

• ephemeral-hidden-service

  1 3 3.2 Python

  Create ephemeral Tor hidden services from the command line

ephemeral-hidden-service - Create ephemeral Tor hidden services from the command line. Written in Python.

• cloudflared

  102 8,093 8.8 Go

  Cloudflare Tunnel client (formerly Argo Tunnel)

  

Cloudflare Tunnel - Excellent free option. Nicely integrates tunneling with the rest of Cloudflare's products, which include DNS and auto HTTPS. Client source code is Apache 2.0 licensed and written in Golang.

• inlets-archived

  9 8,407 8.0 Go

  Discontinued Cloud Native Tunnel

  

inlets - Used to be open source; now focused on a polished commercial offering. Designed to work well with Kubernetes.

• playit-agent

  11 218 8.1 Rust

  The playit program

  

playit.gg - Specifically marketed as tunneling for game servers. Client is open source. Server is not. Has a free tier. TCP and UDP supported. Custom domains and dedicated IPs available. Client written in Rust.

• tunnel-client

  1 43 -

  Agent for Connecting to Sarkaribabu Tunnel

StaqLab Tunnel - SSH-based. The client is open source. The server doesn't appear to be.

• headscale

  222 19,957 9.2 Go

  An open source, self-hosted implementation of the Tailscale control server

headscale - Open source implementation of Tailscale control server. Can be used with Tailscale's official open source client. Written in Go.

• tailscale

  1,006 16,862 9.9 Go

  The easiest, most secure way to use WireGuard and 2FA.

  

Tailscale - Built on WireGuard. Easy to use. Control server is closed source. Client code available with a BSD3 license + separate patents file.

• Gravitational Teleport

  62 16,705 10.0 Go

  The easiest, and most secure way to access and protect all of your infrastructure.

  

Teleport - Comprehensive control plane tool, but also supports accessing apps behind NATs. Written in Go.

• Nebula

  141 13,811 8.6 Go

  A scalable overlay networking tool with a focus on performance, simplicity and security

  

Nebula - Peer-to-peer overlay network. Developed and used internally by Slack. Similar to Tailscale but completely open source. Doesn't use WireGuard. Written in Go.

• slackhq

  1 - -

Nebula - Peer-to-peer overlay network. Developed and used internally by Slack. Similar to Tailscale but completely open source. Doesn't use WireGuard. Written in Go.

• ZeroTier

  344 13,500 8.7 C++

  A Smart Ethernet Switch for Earth

  

ZeroTier - Layer 2 overlay network. They take decentralization seriously, and like to say "decentralize until it hurts, then centralize until it works." Written in C++.

• Netmaker

  167 9,005 9.6 Go

  Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.

  

Netmaker - Layer 3 peer-to-peer overlay network and private DNS. Similar to Tailscale, but with a self-hosted server/admin UI. Runs kernel WireGuard so very fast. Not FOSS, but the source code is available. Written in Go.

• netbird

  108 9,304 9.7 Go

  Connect your devices into a single secure private WireGuard®-based mesh network with SSO/MFA and simple access controls.

  

NetBird - NetBird is an open-source VPN management platform built on top of WireGuard® making it easy to create secure private networks for your organization or home.

• firezone

  75 6,262 10.0 Elixir

  Open-source VPN server and egress firewall for Linux built on WireGuard. Firezone is easy to set up (all dependencies are bundled thanks to Chef Omnibus), secure, performant, and self hostable.

  

Firezone - Layer 3/4 overlay network. Runs on kernel WireGuard® and supports SSO using generic OIDC/SAML connectors. Distributed under Apache 2.0 license and written in Elixir/Rust.

• n2n

  10 5,936 7.7 C

  Peer-to-peer VPN

  

n2n - - Built on nodes and supernodes. GPL-3.0 license. Written in C.

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

Suggest a related project