Open source Self-hostable reverse tunnels

Expose anything.
Own everything.

RC-Tunnel is a self-hosted control panel for reverse tunnels. Bring any local service online with HTTPS, custom subdomains and a full audit trail — running entirely on your own infrastructure.

Try the demo Star on GitHub
$git clone https://github.com/AlexLuzik/rc-tunnel && cd rc-tunnel && sudo bash rctunnel-panel/deploy/install-server.sh
rc-tunnel.com/dashboard
Agents 3 online · 4 total
edge-proxy-01 linux/amd64 42 ms online
office-nas linux/arm64 180 ms online
build-runner windows/amd64 320 ms online
home-pi linux/arm offline
Every action recorded · live fleet uptime
Runs on your infra HTTP/S, TCP & UDP mTLS + full audit log No inbound ports OTA agent updates
Everything in one panel

A control plane for your whole fleet

From a single SSH tunnel to hundreds of devices across teams — manage protocols, subdomains, quotas and audit from one place.

Any protocol

HTTP, HTTPS, TCP and UDP — expose web apps, SSH, databases and game servers from a single agent.

Custom subdomains

Map any service to a clean subdomain, up to several levels deep, with automatic HTTPS on every node.

Live logs & uptime

Watch every request and connection in real time, with availability history and uptime tracking per device.

Teams & quotas

Group devices into teams, set bandwidth quotas, and suspend or scale them without touching a config file.

Full audit trail

Every create, update, delete and login is recorded with actor, target and source IP — exportable on demand.

One-line install

Drop a single curl command on any box and it self-registers. OTA keeps the whole fleet on the latest agent.

From zero to live

Three steps to your first tunnel

No inbound firewall rules, no static IPs. Agents dial out over one secure connection.

1

Deploy the panel

Run the installer on your own server and point a wildcard DNS record at it. That is your ingress.

sudo bash deploy/install-server.sh
2

Install the agent

Paste the one-line install on any machine you want to reach. It dials out — no inbound ports.

curl -fsSL rc-tunnel.com/dl/install.sh | bash
3

Open a tunnel

Pick a protocol, a local address and a subdomain. Your service is live with HTTPS in seconds.

http → 127.0.0.1:8080
Any service, any protocol

Four tunnel types out of the box

Web apps over HTTP/HTTPS with custom subdomains and automatic TLS. SSH, databases and game servers over raw TCP and UDP — all from a single agent.

Open a tunnel
http
Web apps with subdomains
https
Auto-TLS on every node
tcp
SSH, databases, raw ports
udp
DNS, game & realtime
Super admin

Know exactly who did what, and when

Every create, update, delete and login is recorded with the actor, target and source IP. Drill into a per-device audit trail across the entire fleet — and export it whenever compliance asks.

100%
actions logged
mTLS
end to end
CSV
one-click export
14:32 tunnel.delete db @ edge-proxy-01
14:18 quota.update Team Globex → 150 GB
13:50 tunnel.create web @ office-nas
13:12 agent.connect build-runner
11:59 user.create dan@acme.com (member)
Pricing

Free and open source, forever

The whole control plane is yours to run. No seats, no metering, no vendor lock-in.

Self-hosted

Run it on your own infrastructure.

$0/ MIT licensed
Get started on GitHub
Unlimited agents & tunnels
HTTP/HTTPS, TCP & UDP
Teams, quotas & full audit log
Live request & connection logs
OTA fleet updates, full source under MIT

Questions, answered

Bring your first service online today

One agent, one command, full control. Spin up RC-Tunnel and open a tunnel in under five minutes.

Try the demo Read the docs