Search Results for "nat"

Tailscale is an open-source zero-configuration VPN and networking solution that makes it simple to create secure, private networks across devices by leveraging WireGuard under the hood. It lets users connect computers, servers, mobile devices, and cloud instances together with peer-to-peer encrypted tunnels without dealing with complex firewalls, NAT rules, or key distribution headaches. Instead of traditional VPN server infrastructure, Tailscale uses a coordination service to authenticate devices and exchange connection information, enabling automatic NAT traversal and minimal manual setup. The project includes a daemon (tailscaled) and a CLI tool that run on major operating systems, and it also forms the basis for the official clients on platforms like iOS and Android, though those have GUI wrappers not fully in this repository.

Anywherelan (AWL) is a peer-to-peer mesh VPN solution designed to securely connect devices across diverse networks without relying on centralized servers. By leveraging WireGuard tunneling and built-in NAT traversal, AWL facilitates seamless device connectivity at the IP level, enabling users to access services like SSH, RDP, or self-hosted applications without complex configurations. Its decentralized architecture ensures that traffic flows directly between devices, enhancing privacy and reducing latency. AWL is particularly beneficial for scenarios such as remote work, gaming, or accessing geographically restricted content.​

The GoProxy is a high-performance http proxy, https proxy, socks5 proxy, ss proxy, websocket proxies, tcp proxies, udp proxies, game shield, game proxies. Supports forward proxies, reverse proxy, transparent proxy, internet nat proxies, https proxy load balancing, http proxy load balancing , socks5 proxies load balancing, socket proxy load balancing, ss proxy load balancing, TCP / UDP port mapping, SSH transit, TLS encrypted transmission, protocol conversion, anti-pollution DNS proxy, API authentication, speed limit, limit connection. Reverse proxy to help you expose a local server behind a NAT or firewall to the internet so that you or your visitors can access it directly and easily. ...

...Hence, it adopts the design goals of the WireGuard project, to be simple and easy to use. Thanks to Interactive Connectivity Establishment (ICE), cunīcu is capable of establishing direct connections between peers that are located behind NAT firewalls such as home routers. In situations where ICE fails, or direct UDP connectivity is not available, cunīcu falls back to using TURN relays to reroute traffic over an intermediate hop or encapsulate the WireGuard traffic via TURN-TCP.

frp stands for exactly what it is: a fast reverse proxy. It helps you expose a local server behind a NAT or firewall to the Internet. It is currently under development, but already supports TCP and UDP, as well as HTTP and HTTPS protocols where requests can be forwarded to internal services by domain name. It also has a P2P connect mode and many other nifty features. These include configuration files, environment variables, a dashboard that shows you frp's status and proxies' statistics information, an Admin UI that helps you check and manage frpc's configuration, and many others.

Weron is a peer-to-peer overlay network built using WebRTC and WebSockets, enabling remote access and tunneling between machines behind NATs without the need for centralized servers. It uses Golang on the backend and supports secure connections using WireGuard-compatible encryption. Weron allows developers to create scalable mesh or point-to-point networks for applications like remote desktop, Kubernetes access, or collaborative tools—all without requiring public IPs or complicated port...

zrok is a secure sharing platform for exposing web services, files, and network resources across the internet or private networks. It is built on OpenZiti, a zero-trust networking overlay that allows sharing without inbound connectivity, firewall changes, or port forwarding. The tool can publish resources publicly or share them privately with other zrok users, depending on the workflow. It supports use cases such as temporary web previews, file sharing, private service access, testing,...

GOST, or GO Simple Tunnel, is a flexible tunneling and proxy tool written in Go for building secure traffic forwarding chains. It supports proxying, port forwarding, reverse proxying, and tunnel-based access to services behind NAT or firewalls. The project is designed around protocol composition, allowing users to combine multiple protocols into multi-level forwarding chains. It can handle TCP and UDP forwarding, transparent proxying, DNS proxying, TUN/TAP workflows, and tun2socks scenarios. GOST also includes operational features such as load balancing, routing control, admission control, rate limiting, dynamic configuration, Prometheus metrics, and a Web API. ...

...It lets upstream services open outbound-only connections to Piko, then routes incoming traffic back through those established tunnels. This design is useful for services that are private, behind NAT, firewalled, or otherwise not publicly routable. Piko is built for production-oriented hosting rather than only short-lived development demos. It supports a server and agent model, with the agent running near the upstream service and forwarding traffic from named endpoints to local ports. The project also includes Kubernetes-oriented deployment guidance, clustering behavior, and a single binary that can run in both server and agent modes.

WebTTY is a terminal-sharing tool that lets a user share an interactive shell session over WebRTC. It is useful for pair programming, collaborative debugging, remote help, or accessing systems behind NAT without setting up a traditional proxy server. The project includes a command-line workflow and an in-browser client, so a session can be joined through a static web page when needed. It supports custom commands, allowing users to share a shell, a tmux session, or another terminal-based process. The tool also includes non-interactive and one-way connection options for specialized workflows such as attaching to a build server session. webtty is experimental but practical, combining Go, WebRTC, and browser-based terminal access into a lightweight collaboration tool.