Skip to content

Tunnels for anything you run.

A persistent public URL for your app, API, local LLM or game server, over HTTP, TCP or TLS.

Get started Read the docs

HTTP, TCP and TLS tunnels.

HTTP & HTTPS

Web apps, APIs and local LLMs, with automatic HTTPS.

  • Trusted certificates
  • Webhooks and OAuth
  • Demos and previews
https://myapp.eu.localport.dev
Learn more

TCP

Databases, SSH and game servers.

  • Any TCP service
  • Reserved port
  • Unlimited session time
tcp://myapp.eu.localport.dev:47266
Learn more

TLS

Encrypted all the way to your service.

  • TLS passthrough
  • Your own certificates
  • Not decrypted in transit
tls://myapp.eu.localport.dev:47266
Learn more

Get your tunnel running in three steps.

  1. Create a tunnel in the dashboard.

    Give it a name and pick a region.

  2. Install the agent.

  3. Run the command from the dashboard.

    Your tunnel's token is already in it.

Get started Quickstart guide

Every plan starts with a trial. Cancel any time.

localport
$
  • macOS
  • Linux
  • Windows
  • Docker
  • Raspberry Pi

One webhook URL for your whole team.

Change any HTTP tunnel's delivery mode to Fanout. Every developer on the team receives each webhook on their own machine.

  1. Open the tunnel's settings and set Delivery mode to Fanout.
  2. Add the tunnel's URL to your webhook provider.
  3. Each developer runs the connect command on their own machine.
Delivered to every device
Each connected device receives every request
One primary device
Its response goes back to the sender
HTTP protection
Signatures, header rules and basic auth
How Fanout works
POST /webhooks/payment
https://mywebhook.eu.localport.dev Disconnect all
alice-mac Disconnect
bob-pc Set Primary Disconnect
chad-linux Set Primary Disconnect
localport
Alice's terminal Webhook received
localport
Bob's terminal Webhook received
localport
Chad's terminal Webhook received

Built on security and privacy.

Traffic content is not logged, the agent is open source and each tunnel stays in its region.

Traffic content is not logged

Your traffic is forwarded and not stored.

  • No payload logging
  • No training on your data
  • TLS passthrough
Security overview

Open-source agent

Read the code that runs on your machine.

  • Public on GitHub
  • Build from source
  • Signed releases
View on GitHub

Region per tunnel

Traffic stays in the region you set.

  • EU, US or Asia Pacific
  • Change it in settings
  • EU account data
See regions

A persistent URL on every tunnel.

Use the address assigned to your tunnel, your own subdomain or your own domain.

Custom subdomain

Set your own subdomain name.

Reserved ports

A fixed port for TCP and TLS tunnels.

Custom domains

Your own domain, with wildcard support.

Automatic SSL

Certificates issued and renewed for you.

Control who can reach your tunnel.

Access checks you turn on in the dashboard, with no change to your app.

Basic auth

Password protection for HTTP tunnels.

Header authentication

Set header rules every request must match.

IP allowlist

Limit access to the IP addresses you list, on every protocol.

Webhook verification

Verify Stripe, GitHub, Shopify and Slack webhooks.

Force HTTPS

Redirect HTTP requests to HTTPS.

Common questions.

The docs go deeper, or talk to us.

Does my URL change when I restart?

No. Every tunnel has a persistent address. You can also set your own subdomain or use your own domain.

Does it work behind CGNAT, NAT or a firewall?

Yes. The agent makes outbound connections on port 443 only, so no port forwarding or router change is needed.

Is there a time limit on a tunnel?

No. Session time is unlimited on every plan. A tunnel stays online for as long as the agent is running.

Which protocols can I tunnel?

HTTP and HTTPS for web apps and APIs, TCP for databases, SSH and game servers, and TLS passthrough for services that hold their own certificates.

What is Fanout?

Fanout is a delivery mode that sends every request to every connected device, so each developer on a team receives the same webhook. Any HTTP tunnel can use it. Fanout carries HTTP only.

Who can open my tunnel URL?

By default anyone with the URL can reach it. You can restrict it with an IP allowlist on any protocol, and with basic auth, header rules or webhook signature verification on HTTP tunnels.

Do you log my traffic?

No. Traffic content is not logged or stored, and it is not used to train models. On a TLS tunnel the traffic stays encrypted all the way to your service.

Can I use my own domain?

Yes. Add your domain in the dashboard and point it at your tunnel. The SSL certificate is issued and renewed automatically, and wildcard domains are supported.

Can I expose a local LLM such as Ollama?

Yes. A tunnel gives a local model server such as Ollama a persistent public URL, and you can restrict access with an IP allowlist, basic auth or header rules.

Can I host a game server?

Yes. A TCP tunnel gives a game server such as Minecraft Java Edition a public address and a reserved port.

Is the agent open source?

Yes. The agent that runs on your machine is open source under Apache 2.0 on GitHub, and every release is signed.

Put your first tunnel online.

Create a tunnel and run one command.

Get started Read the security overview