Description
The NAS at home, the staging site on the office network, the web service running on your laptop: you want people outside to reach them, but there is no public IP and the router cannot forward ports. Anyone who self-hosts runs into this wall sooner or later.
Orbien is a NAT traversal tool written in Rust, and the whole program is only about 5MB. Put the server on any machine with a public address, write a few lines of TOML on the client side, and your local ports are exposed to the internet. Compared with frp, it uses less memory under heavy concurrency and keeps it steady, with no GC pauses.
The server ships with a web admin console, and besides the command line the client has a native desktop app, so anyone who would rather not edit config files can get going in a few clicks. The download link points to GitHub Releases so you can pick your platform.
Many tunnel protocols: TCP, UDP, HTTP, HTTPS and SOCKS5, enough to bring SSH, websites and game servers out.
Many transports: choose TCP, KCP, WebSocket or QUIC underneath, with TCP multiplexing, so lossy networks stay usable.
Authentication and encryption: token-based tunnel auth, TLS and mTLS; HTTPS can be forwarded untouched or terminated on the client.
Web admin console: the server shows client counts, tunnel distribution and traffic trends so you can see which tunnel is carrying what.
Desktop client: a native GUI with start, stop, logs and settings in one window, plus live CPU and memory readouts.
Hot reload and certificates: change the config without restarting, and let ACME issue and renew certificates automatically.
Cross-platform: ready-made binaries for Windows, Linux, macOS and FreeBSD.
Orbien is a NAT traversal tool written in Rust, and the whole program is only about 5MB. Put the server on any machine with a public address, write a few lines of TOML on the client side, and your local ports are exposed to the internet. Compared with frp, it uses less memory under heavy concurrency and keeps it steady, with no GC pauses.
The server ships with a web admin console, and besides the command line the client has a native desktop app, so anyone who would rather not edit config files can get going in a few clicks. The download link points to GitHub Releases so you can pick your platform.
Features
Many tunnel protocols: TCP, UDP, HTTP, HTTPS and SOCKS5, enough to bring SSH, websites and game servers out.
Many transports: choose TCP, KCP, WebSocket or QUIC underneath, with TCP multiplexing, so lossy networks stay usable.
Authentication and encryption: token-based tunnel auth, TLS and mTLS; HTTPS can be forwarded untouched or terminated on the client.
Web admin console: the server shows client counts, tunnel distribution and traffic trends so you can see which tunnel is carrying what.
Desktop client: a native GUI with start, stop, logs and settings in one window, plus live CPU and memory readouts.
Hot reload and certificates: change the config without restarting, and let ACME issue and renew certificates automatically.
Cross-platform: ready-made binaries for Windows, Linux, macOS and FreeBSD.
