rapiz1/rathole
Rathole
Rathole is a high-performance reverse proxy and NAT traversal tool written in Rust. It functions as a secure tunneling server and client architecture designed to expose local services to the internet by forwarding traffic from a public IP to a private device behind a firewall.
The system establishes encrypted tunnels between a public server and a private host to ensure private communication. It utilizes token-based authentication to validate identities between the server and client for each individual service.
The project provides TCP and UDP port forwarding and manages private tunnels to facilitate remote service exposure. It includes capabilities for multiplexing multiple local services over a single network tunnel and supports dynamic configuration reloading to update active services without restarting the process.
Features
- Network Tunneling - Creates secure tunnels that wrap network traffic into persistent connections to bypass firewalls and NAT.
- Connection Multiplexing - Routes traffic for multiple distinct local services over a single established network tunnel.
- Remote Access Proxies - Creates encrypted tunnels between a public server and a private device for remote access to internal services.
- NAT Traversal Mechanisms - Exposes local services to the internet by routing traffic through a public server to bypass firewalls.
- Tunnel Managers - Establishes and maintains authenticated, encrypted connections between clients and servers to forward traffic.
- Reverse Proxy Tunneling Tools - Provides a high-performance system for exposing local services via a secure reverse proxy and NAT tunnel.
- Secure Tunnels - Provides a server-client architecture that encrypts traffic streams for private communication between hosts.
- Service Exposure - Makes internal home or office network services accessible from the web without a public IP address.
- Service Tunnels - Creates secure tunnels from a public server to a local machine to grant external access to private services.
- TCP and UDP Forwarders - Forwards incoming TCP and UDP network traffic from a public IP to a private device.
- Data Encryption - Wraps raw byte streams in a standardized encryption layer to secure data moving between nodes.
- Encrypted Tunneling - Encrypts the data stream between server and client using standardized protocols to ensure privacy.
- Remote Service Authentication - Validates connections between clients and servers using unique, service-specific tokens.
- Token-Based Authentication - Validates identity between the server and client using pre-shared secrets for each individual service.
- Configuration Hot-Reloading - Allows updating active services by refreshing configuration files without restarting the process.
- Tunneling Implementations - Implements a lightweight and efficient network tunnel using the Rust programming language.
- Event-Driven I/O - Implements a high-performance non-blocking event loop to handle thousands of concurrent network connections.
- Tunneling and Proxying - High-performance tunneling solution with hot-reload capabilities.
