Tunnel providers

The gold standard for tunneling. Excellent features but closed source commercial product.

SSH-based tunnels with no downloads required. Rich terminal interface and web debugger included.

Popular Node.js based tunneling solution. Easy to use with npm, no account required.

Written in JavaScript with a focus on being lightweight and easy to configure.

Uses WireGuard directly instead of a custom client. Simple and secure approach.

Public SSH jump server for forwarding. No software or registration needed, just anonymous SSH.

Original open source version of ngrok. No longer developed but code is available for learning.

Fully self-hostable tunnel management server with identity control, auto SSL, and dashboard UI.

SSH tunneling under the hood with custom binary. Supports auto certs from Let's Encrypt.

From a Tailscale founder. Server needs no root, client does. Designed to avoid TCP-over-TCP issues.

Similar to frp with improved performance. Low resource consumption with hot reload support.

Minimal tunneling solution. MIT licensed, written in Rust for performance.

ngrok alternative written in PHP. Great for PHP developers and Laravel users.

Open source ngrok/serveo alternative. SSH-based with WebSocket tunneling support.

Proxies over WebSockets. Focus on bypassing networks that block certain protocols.

Comprehensive tunneling with TCP/UDP, TAP/TUN devices, load balancing, and Web API.

Effortless sharing publicly and privately. Supports HTTP endpoints and files. Built on OpenZiti.

JavaScript/Python admin page with request inspection and replay features.

Simple tunneling solution written in Rust with MIT license.

Open source ngrok alternative designed for production traffic, especially on Kubernetes.

Allows two users behind NAT/Firewall to establish TCP connections securely.

Open source and optionally self-hostable. Both client and server written in TypeScript.

Proxies over WebSockets. Simple and lightweight.

Transparent tunneling over WireGuard using userspace network stack. Root not required on server.

Comprehensive open source solution with hosted options. One of the original tunnel solutions.

WireGuard userspace based with E2E encrypted TLS. Auto LetsEncrypt certs generated by clients.

Zero-dependency, self-hostable, cross-platform HTTP tunnel that exposes localhost to public URL.

Simple hosted SSH option. Supports custom domains for a cost.

SSH-based service with optional signup. Offers HTTP(S) and TCP tunneling plus SSH jump host.

Good for dev work but shows warnings on URLs. No custom domains, integrated with VS Code.

E2E TLS with auto LetsEncrypt certs. QR codes for URL sharing, WebDAV support.

Comprehensive ngrok alternative with HTTP Inspector, Let's Encrypt, and Linux repos.

Solid paid option with limited free tier. Good for professional use cases.

Marketed for game servers. TCP/UDP support, custom domains and dedicated IPs available.

Previously open source, now polished commercial offering. Works well with Kubernetes.

Built on WireGuard. Easy to use VPN mesh. Control server closed source but client is open.

Open source Tailscale control server. Use with Tailscale's official client.

P2P overlay network by Slack. Similar to Tailscale but completely open source. Doesn't use WireGuard.

Layer 2 overlay network. Decentralized approach with "decentralize until it hurts" philosophy.

Layer 3 P2P overlay with admin UI. Similar to Tailscale but self-hosted. Kernel WireGuard for speed.

Open source VPN management on WireGuard. Easy secure private networks for organizations.

Layer 3/4 overlay on kernel WireGuard. Supports SSO with OIDC/SAML connectors.

P2P VPN daemon for arbitrary node counts. Auto-connects and routes through intermediate nodes.

Zero trust network overlay. Extends zero trust into your application, not just network.