Expose HTTP/SSH/TCP services through SSH port forwarding. A self-hosted ngrok / Cloudflare Tunnels / localhost.run alternative.
Check out the Sandhole book for a full guide.
- Reverse proxy that just works with an OpenSSH client. No extra software required!
- Automatic HTTPS support (with dnsrobocert and/or ACME).
- Easily load-balance by pointing multiple services to the same domain/port.
- Bring your own custom domains and authorize them via DNS records.
- Random subdomain assignment by default, with options for deterministic assignment.
- Option to connect with SSH via the HTTPS port, if your network blocks outbound connections to SSH ports.
- A terminal-based admin interface to view current connections.
- Written in Rust, with comprehensive testing of most features.
Sandhole is in active development. Contributions are welcome, but try it in production at your own risk.
- sish - Main inspiration for this project. Written in Golang.
- rlt - Uses localtunnel's protocol instead of SSH. Written in Rust.
- rathole - A highly configurable reverse proxy with NAT traversal and a great name. Written in Rust.
- sshuttle - A smarter proxy service, also based on SSH. Written in Python.
