Secure TCP Tunnels — Hosted or Self-Hosted
Expose local services to the internet in seconds. Run your own infrastructure or use our managed tunnels — no config needed.
Open source · No credit card required · Self-host for free
❯ gotunnel http 3000 --server tunnel.gotunnel.dev
❯
$ gotunnel deploy --mode [self-hosted|managed]
› resolving deployment target▊
Run GoTunnel Your Way
// two modes. same binary protocol. same stream multiplexing. same TLS.
// choose based on ownership preference — not capability.
Self-Hosted
Deploy the GoTunnel server binary on any Linux VPS. You own the infrastructure, the certs, the config, and the data. Built for teams who can't send traffic through third-party servers.
- Full TLS encryptionCustom certs or auto-generated
- Deploy on any Linux VPSUbuntu, Debian, CentOS, Alpine
- File-based configurationserver.yaml with env var support
- No vendor lock-inOpen source, self-contained binary
- Systemd service supportRun as a managed background service
- Prometheus metricsScrape live tunnel and stream stats
❯gotunnel server --config server.yaml
GoTunnel Server v1.1.0
Listening on :7000 (control)
Public port range :8000–9000
TLS enabled
Auth token
Waiting for clients...
Hosted
Connect to GoTunnel's managed infrastructure in one command. No server to provision, no certs to manage. Get a live public URL in under five seconds — perfect for demos, webhooks, and rapid iteration.
- Zero infrastructure setupOne command to connect
- Instant public URLstunnel.gotunnel.dev subdomains
- Managed TLS terminationHTTPS out of the box
- Real-time traffic dashboardMonitor requests and streams
- Custom domain supportBring your own domain
- Multiple auth methodsTokens, JWT, API keys
❯gotunnel http 3000 --server tunnel.gotunnel.dev
Connected to managed server
Forwarding https://xyz.tunnel.gotunnel.dev → localhost:3000
Status connected ✓
Latency 12ms
Streams 4 active
Uptime 00:04:31
Both modes use the same binary protocol with stream multiplexing and TLS encryption end-to-end.
$ gotunnel inspect --capabilities
› loading feature manifest▊
Built for Real-World Traffic
// engineered from the protocol layer up — not bolted on after.
// custom binary protocol · stream multiplexing · TLS 1.3 · single binary.
Stream Multiplexing
Handle multiple concurrent connections over a single secure tunnel without overhead.
TLS Encryption
End-to-end encrypted tunnel traffic using TLS. Custom certs or auto-generated.
Token Authentication
Gate tunnel access with secure token validation. Rate limiting and lockout built in.
Auto-Reconnect
Exponential backoff reconnect loop recovers from network drops without manual intervention.
Protocol Agnostic
Tunnel any TCP-based service — HTTP, HTTPS, SSH, Postgres, Redis, and beyond.
Metrics & Monitoring
Track latency, active streams, bandwidth, and connection health via Prometheus export.
Multi-Client Support
Run multiple tunnel clients simultaneously with independent stream pools and auth.
Zero Dependencies
Ships as a single compiled Go binary. No runtime, no containers, no package manager.
$ gotunnel trace --session current
› resolving packet path▊
How GoTunnel Works
// traffic enters the public internet and exits at your localhost.
// encrypted end-to-end. no port forwarding. no firewall rules.
Start the Client
Run the GoTunnel client and point it at your local service port. One command — no config files, no firewall rules.
❯gotunnel http 3000 --server tunnel.gotunnel.dev
› resolving tunnel.gotunnel.dev
$ gotunnel query --use-cases
› scanning workflow registry▊
Built for Real Development Workflows
// from webhook testing to remote debugging — GoTunnel keeps your development moving.
// 6 registered workflows · all environments · zero config.
Webhook Testing
Receive third-party callbacks from payment gateways, CI pipelines, or any external API without deploying your app.
Client Demos
Share working applications with clients instantly using secure public links — no staging environment needed.
Mobile App Testing
Connect iOS and Android apps to local APIs without cloud deployment or ngrok subscriptions.
Remote Debugging
Access services running behind firewalls securely from any remote location without VPN complexity.
IoT Device Access
Expose services running inside restricted, embedded, or air-gapped networks without opening firewall ports.
Internal Tool Sharing
Safely share dashboards, admin panels, and development tools across distributed teams in real time.
$ gotunnel benchmark --output metrics
› running perf suite▊
Engineered for Performance
// benchmarked on reference hardware under sustained load · single binary · no sidecar.
// optimized for speed, scalability, and reliable connections.
Minimal added latency across tunnel connections under sustained load.
High-speed data transfer across active tunnels.
Simultaneous connections per server instance.
Efficient resource usage per active session.
Automatic reconnection with exponential backoff — no manual restart.
$ gotunnel audit --security-model
› loading security manifest▊
Built with Security in Mind
// secure connections, controlled access, and reliable session protection.
// designed for production · no plaintext · no shared sessions.
TLS Encryption
All tunnel traffic is encrypted end-to-end using TLS 1.3. Custom certificates or auto-generated — zero plaintext in transit.
Token Authentication
Clients authenticate using secure access tokens before a tunnel session is established. Invalid tokens are rejected at the handshake layer.
Session Isolation
Each tunnel session runs in an isolated stream context. Traffic from one client cannot bleed into another session.
Heartbeat Monitoring
Persistent heartbeat checks detect dropped or stale connections. Dead sessions are terminated and cleaned up automatically.
Access Control
Define authentication policies per tunnel — token-based, JWT, or API key. Unauthorized connections are dropped before proxying begins.
Payload Protection
Configurable payload size limits and connection rate controls reduce exposure to abuse and bandwidth exhaustion attacks.
$ gotunnel billing --list-plans
› loading plan registry▊
Simple, Transparent Pricing
// start free with self-hosted tunnels, or use our managed infrastructure.
// no hidden fees · cancel anytime · open-source core.
Free
Full control. Deploy on your own infrastructure at zero cost.
- Self-hosted server binary
- Unlimited tunnel usage
- Full infrastructure control
- Open-source CLI
- Community support
- Custom domains
- Managed infrastructure
Starter
Managed tunnels for solo developers and side projects.
- Hosted managed tunnels
- Up to 2 active tunnels
- Random public URLs
- Basic metrics dashboard
- Email support
- Custom domains
- Reserved ports
Pro
Built for active developers who need reliable, persistent tunnels.
- Unlimited active tunnels
- Reserved ports
- Custom domain support
- Advanced metrics & logs
- Priority support
- Multiple auth methods
- Team accounts
Team
Shared infrastructure and access controls for engineering teams.
- Everything in Pro
- Multiple team members
- Role-based access control
- Usage limits & controls
- Team dashboards
- Audit logs
- Dedicated support
$ gotunnel http 3000▊
Start Tunneling in Seconds
Run GoTunnel your way — connect to our managed infrastructure instantly, or deploy the server binary on your own VPS. Same binary. Same protocol.
open source · no credit card required · self-host for free
❯gotunnel http 3000
Connected to managed server
Forwarding https://xyz.tunnel.gotunnel.dev → localhost:3000
Status connected ✓ latency: 11ms