ehang-io/nps
Nps
nps is an intranet penetration proxy server that exposes internal network services to the public internet via secure TCP and UDP tunnels. It functions as a traffic forwarder and reverse proxy, enabling external access to local services, remote desktops, and internal APIs.
The project is distinguished by a centralized web-based administration interface used to configure tunnels, manage user accounts, and monitor real-time bandwidth metrics. It supports domain-based request routing and provides a mechanism to secure public services using HTTPS encryption through digital certificates.
The system covers a broad range of networking capabilities, including SOCKS5 and HTTP proxying, internal DNS resolution, and layer-4 traffic forwarding. It also incorporates traffic management tools for bandwidth limiting, data compression, and multiplexed stream tunneling to optimize network performance.
The tool includes a remote client lifecycle management system for registration, startup command generation, and deployment as system services.
Features
- Intranet Penetration Tools - Exposes local servers and services to the public internet by forwarding TCP and UDP traffic through a proxy.
- Bi-Directional Traffic Tunneling - Establishes a two-way data path between a public gateway and a remote client to enable transparent internal network access.
- Local Resource Exposure - Provides a mechanism to expose local services to the public internet via secure encrypted tunnels.
- Domain-Based Routing - Directs external domain requests to internal hosts using URL routing, custom headers, and wildcards.
- Proxy Managers - Provides a centralized administrative tool to manage network proxy settings and active tunnels.
- Proxy Servers - Functions as a proxy server exposing internal network services via secure TCP and UDP tunnels.
- SOCKS5 Servers - Implements a SOCKS5 proxy server to establish secure tunnels for accessing internal network resources.
- Web Administration Interfaces - Provides a centralized web-based administration interface for orchestrating proxy tunnels and managing permissions.
- Reverse Proxies - Acts as a reverse proxy mapping public domains to internal hosts using URL routing and custom headers.
- Service Port Forwarding - Routes raw network packets between public ports and internal addresses using layer-4 port forwarding.
- TCP and UDP Forwarders - Provides a mechanism to forward TCP and UDP traffic from a public address to local services for remote access.
- UDP Proxies - Supports forwarding UDP traffic to enable internal DNS resolution and other datagram-based communications.
- Bandwidth Management - Implements real-time upload and download speed limits to manage network traffic throughput.
- Connection Multiplexing - Bundles multiple TCP and UDP streams into a single persistent connection to bypass firewalls.
- Network Traffic Optimization - Optimizes performance through bandwidth limiting and data compression for proxy tunnels.
- Lifecycle Management - Manages remote clients through registration, startup command generation, and deployment as system services.
- TLS Termination - Handles SSL/TLS decryption at the public edge proxy before forwarding traffic to internal services.
- Traffic Rate Limiters - Implements mechanisms to restrict bandwidth and traffic volume for specific connections to prevent congestion.
- Security & HTTPS - Enables HTTPS encryption for public services using digital certificates to secure data in transit.
- Proxy Authentication - Implements registration and authentication to restrict who can create and manage proxy tunnels.
- User Access Management - Provides administrative controls for multi-user account registration and proxy server configuration permissions.
- Administrative Interfaces - Includes a web-based dashboard for managing system configurations and monitoring real-time bandwidth metrics.
- Proxy Management Interfaces - Ships a visual interface for configuring reverse proxy settings, tunnels, and access controls.
- HTTP Routing - Implements a routing mechanism to direct incoming HTTP traffic to internal servers for API and webhook testing.
- Network Tunneling and Proxying - Lightweight, high-performance proxy server.
- Tunneling and Proxying - Lightweight, high-performance proxy and tunneling server.
