rathole

★ 14.5k

A self-hosted alternative to Ngrok

Apache License 2.0Open Source — No PaywallBinary · Docker · Source1 active committer (12mo)

About

rathole is a Rust-based reverse proxy designed for NAT traversal. It is intended for situations where a machine behind a NAT needs to expose services such as SSH, and it works by connecting a client...

Source Code Docs

Community Ratings

No ratings yet

New this week

Read recap →

Weekly Recap — Nov 6, 2026 – Nov 13, 2026Nov 13, 2026

Features

High throughput
Low memory usage
Service tokens
Optional Noise encryption
TLS support
Hot reloading configuration
Client/server modes
Multiple services forwarding
TCP/UDP forwarding
TCP_NODELAY tuning

Details

Last Updated: Nov 13, 2026
Created: Dec 14, 2021
Install Methods: binarydockersource
Requirements: A server with a public IPA device behind NATRust toolchain to build from source
Minimum Requirements: Disk: ~500KiB
Default Port: 2333server listens for clients
Authentication: local
API: REST
Privacy & Independence: No Cloud Required
Deployment: Deployment: Container image available

Run rathole yourself

Pick how much you want to manage.

netcupBest match
Full control
A small server, then Docker Compose.
About 20 minutes with Docker
Get a netcup serveraffiliate(opens in a new tab)
Hetzner
Full control
A small server, then Docker Compose.
About 20 minutes with Docker
Get a Hetzner server(opens in a new tab)
DigitalOcean
Full control
A small server, then Docker Compose.
About 20 minutes with Docker
Get a DigitalOcean server(opens in a new tab)

1 more way to host

OVHcloudA small server, then Docker Compose.(opens in a new tab)

Some links earn us a commission. netcup pays us one and is our preferred VPS host.

Is this your project? Sponsor a listing

Alternatives to rathole

sish

4.8k

Open source SSH tunneling software for forwarding HTTP(S), WS(S), TCP, aliases, and SNI traffic using plain SSH.

Proxy ServersNetwork UtilitiesRemote Access+2

tailcat

9.1k

Tailcat is a userspace CLI and Go library that provides netcat-like connections, port forwarding, SSH, SOCKS5, and exit-node tunneling over Tailscale’s encrypted data plane without using Tailscale’s control plane.

Network UtilitiesRemote AccessProxy Servers

g3proxy

895

A project for building enterprise-oriented generic proxy solutions, including forward proxy, reverse proxy, load balancer, and NAT traversal components.

Proxy ServersPermissive LicenseNetwork Utilities+1

iodine

8.0k

Iodine tunnels IPv4 data through a DNS server, enabling connectivity when only DNS traffic is allowed.

Proxy ServersPermissive LicenseNetwork Utilities+2

Related Software

Pangolin

23.7k

Pangolin is an identity-based remote access platform that combines reverse proxy and VPN capabilities for secure access to private and public resources.

Web ServersRemote AccessCopyleft License+3

Open Core

Sshwifty

3.1k

Sshwifty is a web-based SSH and Telnet client that lets users access remote shells from a browser.

Remote AccessMobile terminalsCopyleft License+3

socks5-proxy-server

143

A Docker-based SOCKS5 proxy server with user management and a Telegram bot for administration.

Proxy ServersNetwork UtilitiesSelf Hosting Solutions+1

Warpgate

8.3k

A transparent bastion host for SSH, HTTPS, Kubernetes, MySQL, and PostgreSQL that records sessions and provides a built-in web admin UI.

Remote AccessProxy ServersAuthentication Services+2

HomeServerHQ

HomeServerHQ is an all-in-one home server infrastructure and management utility that installs and configures a home server, relay server, and supporting open source services.

Self Hosting SolutionsCopyleft LicenseWeb Servers+3

ShellHub

2.2k

ShellHub is an SSH gateway for centrally managing access to Linux devices and servers behind NAT and firewalls.

Remote AccessPermissive LicenseNetwork Utilities+2

4 Containers

Traefik

65.5k

Traefik is a modern HTTP reverse proxy and load balancer for deploying microservices.

Web ServersPermissive LicenseProxy Servers+2

2 Containers

Ferron