awesome-repositories.comCategoriesBlog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
·
rapiz1 avatar

rapiz1/rathole

0
View on GitHub↗

Rathole

Rathole is a high-performance reverse proxy and NAT traversal tool written in Rust. It functions as a secure tunneling server and client architecture designed to expose local services to the internet by forwarding traffic from a public IP to a private device behind a firewall.

The system establishes encrypted tunnels between a public server and a private host to ensure private communication. It utilizes token-based authentication to validate identities between the server and client for each individual service.

The project provides TCP and UDP port forwarding and manages private tunnels to facilitate remote service exposure. It includes capabilities for multiplexing multiple local services over a single network tunnel and supports dynamic configuration reloading to update active services without restarting the process.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI

Features

  • Network Tunneling - Creates secure tunnels that wrap network traffic into persistent connections to bypass firewalls and NAT.
  • Connection Multiplexing - Routes traffic for multiple distinct local services over a single established network tunnel.
  • Remote Access Proxies - Creates encrypted tunnels between a public server and a private device for remote access to internal services.
  • NAT Traversal Mechanisms - Exposes local services to the internet by routing traffic through a public server to bypass firewalls.
  • Tunnel Managers - Establishes and maintains authenticated, encrypted connections between clients and servers to forward traffic.
  • Reverse Proxy Tunneling Tools - Provides a high-performance system for exposing local services via a secure reverse proxy and NAT tunnel.
  • Secure Tunnels - Provides a server-client architecture that encrypts traffic streams for private communication between hosts.
  • Service Exposure - Makes internal home or office network services accessible from the web without a public IP address.
  • Service Tunnels - Creates secure tunnels from a public server to a local machine to grant external access to private services.
  • TCP and UDP Forwarders - Forwards incoming TCP and UDP network traffic from a public IP to a private device.
  • Data Encryption - Wraps raw byte streams in a standardized encryption layer to secure data moving between nodes.
  • Encrypted Tunneling - Encrypts the data stream between server and client using standardized protocols to ensure privacy.
  • Remote Service Authentication - Validates connections between clients and servers using unique, service-specific tokens.
  • Token-Based Authentication - Validates identity between the server and client using pre-shared secrets for each individual service.
  • Configuration Hot-Reloading - Allows updating active services by refreshing configuration files without restarting the process.
  • Tunneling Implementations - Implements a lightweight and efficient network tunnel using the Rust programming language.
  • Event-Driven I/O - Implements a high-performance non-blocking event loop to handle thousands of concurrent network connections.
  • Tunneling and Proxying - High-performance tunneling solution with hot-reload capabilities.
13,777 stars·784 forks·Rust·Apache-2.0·18 views

Star history

Star history chart for rapiz1/ratholeStar history chart for rapiz1/rathole

Frequently asked questions

What does rapiz1/rathole do?

Rathole is a high-performance reverse proxy and NAT traversal tool written in Rust. It functions as a secure tunneling server and client architecture designed to expose local services to the internet by forwarding traffic from a public IP to a private device behind a firewall.

What are the main features of rapiz1/rathole?

The main features of rapiz1/rathole are: Network Tunneling, Connection Multiplexing, Remote Access Proxies, NAT Traversal Mechanisms, Tunnel Managers, Reverse Proxy Tunneling Tools, Secure Tunnels, Service Exposure.

What are some open-source alternatives to rapiz1/rathole?

Open-source alternatives to rapiz1/rathole include: fosrl/pangolin — Pangolin is a zero-trust remote access platform designed to provide secure, identity-aware connectivity to private… rathole-org/rathole — Rathole is a reverse proxy tunneling tool designed to expose local services behind firewalls and network address… go-gost/gost — Gost is a Go-based network tunnel and multi-protocol proxy server. It functions as a gateway for routing TCP and UDP… erebe/wstunnel — wstunnel is a tool that tunnels arbitrary TCP traffic through WebSocket connections, enabling communication across… ginuerzh/gost — gost is a multi-protocol proxy tunnel and secure tunneling server designed to route network traffic through encrypted… octelium/octelium — Octelium is a zero-trust network access platform and identity-aware proxy designed to secure private HTTP, SSH, and…

Open-source alternatives to Rathole

Similar open-source projects, ranked by how many features they share with Rathole.
  • fosrl/pangolinfosrl avatar

    fosrl/pangolin

    21,255View on GitHub↗

    Pangolin is a zero-trust remote access platform designed to provide secure, identity-aware connectivity to private network resources. It functions as a cloud-native network controller that orchestrates encrypted tunnels, traffic routing, and access policies across distributed environments. By leveraging WireGuard for secure data transport, the platform enables authenticated access to internal web applications, terminal sessions, and remote desktops without exposing services to the public internet. The platform distinguishes itself through a declarative infrastructure model that synchronizes n

    TypeScriptcrowdsecdockerhome-lab
    View on GitHub↗21,255
  • rathole-org/ratholerathole-org avatar

    rathole-org/rathole

    12,845View on GitHub↗

    Rathole is a reverse proxy tunneling tool designed to expose local services behind firewalls and network address translation to the public internet. It functions as a secure tunneling infrastructure that enables remote access to private network resources without requiring manual router port forwarding configurations. The system utilizes a client-server architecture where a public-facing gateway coordinates with a private-network agent. It distinguishes itself by multiplexing multiple logical service connections through a single persistent TCP stream, which reduces the overhead of maintaining

    Rustfirewallfrphttp
    View on GitHub↗12,845
  • go-gost/gostgo-gost avatar

    go-gost/gost

    6,972View on GitHub↗

    Gost is a Go-based network tunnel and multi-protocol proxy server. It functions as a gateway for routing TCP and UDP traffic, creating secure network tunnels between remote endpoints, and acting as a DNS proxy server to resolve domain name queries. The project is distinguished by its ability to implement multi-hop proxy chaining, which links multiple network nodes in a sequence to route traffic through specific paths. It also provides transparent proxying by integrating with virtual network interfaces to intercept system-level traffic without requiring manual client configuration. The system

    Godnsdtlsgolang
    View on GitHub↗6,972
  • erebe/wstunnelerebe avatar

    erebe/wstunnel

    6,424View on GitHub↗

    wstunnel is a tool that tunnels arbitrary TCP traffic through WebSocket connections, enabling communication across restrictive firewalls and proxies. It operates as both a client and server, encapsulating TCP data within WebSocket binary frames and multiplexing multiple connections over a single WebSocket link. The tool supports mutual TLS authentication, requiring clients to present signed certificates for verification before establishing a tunnel, and provides shared secret access control and tunnel forwarding restrictions for additional security. The project distinguishes itself by offerin

    Rusthttp2reverse-tunnelsocks
    View on GitHub↗6,424
See all 30 alternatives to Rathole→