jpillora/chisel
Chisel
Chisel is a network tunneling tool that facilitates secure communication by encapsulating TCP and UDP traffic within HTTP requests. It functions as a connection multiplexer, consolidating multiple logical network streams into a single persistent connection to improve throughput and reduce overhead. By leveraging standard web protocols, the system enables firewall traversal and provides a mechanism for remote port forwarding and proxying.
The project distinguishes itself through its focus on resilient connectivity and granular access control. It maintains persistent network sessions across unstable environments using automatic reconnection strategies with exponential backoff. Security is enforced through TLS-secured tunnels and credential-based authentication, which allows administrators to restrict access to specific network destinations or port ranges based on user identity.
Beyond its core tunneling capabilities, the software supports SOCKS5 proxy integration, allowing applications to route traffic through remote endpoints as if they were connected to a local network. It is designed for broad compatibility, offering support for cross-platform binary distribution and containerized deployment to ensure consistent operation across diverse infrastructure.
Features
- Connection Multiplexing - Consolidates multiple logical network streams into a single persistent connection to improve throughput and reduce overhead.
- HTTP Tunnels - Encapsulates arbitrary TCP and UDP traffic within standard HTTP requests to bypass restrictive firewalls.
- SOCKS5 - Routes application-level traffic through a remote tunnel endpoint to provide seamless access to private network services.
- Reverse Tunnels - Exposes local services to remote networks by establishing persistent, encrypted tunnels through restrictive firewalls.
- Secure Remote Access - Exposes local services to remote networks through encrypted tunnels over standard web connections.
- Traffic Tunneling - Transports network traffic over standard web connections to bypass restrictive firewalls and provide secure remote access.
- Tunneling Proxies - Creates secure TCP and UDP tunnels over HTTP connections to bypass firewalls and provide remote access.
- Remote Access Tunnels - Exposes local services to remote networks or accesses private infrastructure through encrypted tunnels.
- HTTP Request Utilities - Wraps arbitrary TCP and UDP network traffic inside standard HTTP requests to traverse restrictive firewalls.
- Connection Resilience Layers - Maintains persistent network access by automatically reconnecting dropped sessions using exponential backoff strategies.
- Port Forwarding Tools - Maps remote network ports to local machine ports to enable direct service access through secure tunnels.
- SOCKS5 Servers - Routes traffic through secure HTTP tunnels to allow local applications to access remote services as if connected locally.
- Traversal Tools - Bypasses restrictive network firewalls by encapsulating traffic within secure web connections to maintain persistent remote access.
- Network Security - Encrypts tunneled traffic using standard security protocols to ensure data remains private across untrusted segments.
- Secure Tunneling - Encrypts all tunneled network traffic using standard security protocols to ensure data remains private.
- Traffic Encryption - Protects data privacy by encrypting all network traffic using standard protocols during transmission.
- Connection Authentication Mechanisms - Validates incoming client requests against local configuration files to ensure only authorized users gain access.
- Credential-Based Access Controls - Validates incoming client requests against local configuration files to restrict network access to authorized users.
- Network Access Controls - Restricts access to the server by requiring valid credentials before establishing a secure network connection.
- Network Utilities - Fast TCP/UDP tunneling over HTTP.
- Tunneling and Proxying - SSH-based tunnel with support for automatic Let's Encrypt certificates.
- Network Tunneling - Fast TCP/UDP tunneling over HTTP secured via SSH.
- Pivoting and Tunneling - Fast TCP/UDP tunneling over HTTP.
- Connection Reconnection Policies - Automatically restores dropped network sessions using exponential backoff strategies to maintain persistent connectivity.
- Network Access Restrictions - Limits user access to specific network destinations or port ranges to maintain strict security.
- Network Connection Security - Encrypts network traffic using secure shell protocols to prevent unauthorized interception of data.
- Cross-Platform and Native Compilation - Generates native executables for diverse operating systems and hardware architectures to ensure consistent deployment.
- Cross-Platform Build Systems - Automates the compilation and packaging of software for multiple target operating systems and architectures.
