Bring your apps online
Fast, open source, and entirely under your control.
Tunnels
3 tunnels · 2 serving
Serve local apps
without exposing your network.
A public edge server serves your domain and runs
every firewall rule and auth check.
Your app stays on
localhost, reached only through a tunnel it dials
out to.
Use our managed edge network or host your own edge
Granular Access Control
Keep an app to yourself, invite people by email, protect it with a password, or open it to the world. Add an API token for scripts and webhooks. Unauthorized requests are blocked by the edge server and never reach your local host.
Private by default. Login with your email from anywhere.
Add anyone by email; they sign in with their own account.
Anyone with the shared password gets in, no account needed.
Give scripts and webhooks access with a bearer token API key.
Serve a site for anyone to access, no sign-in required.
Web Application Firewall
Apply rate limits and add custom rules to restrict access with IP allowlists, stop scrapers and bots, and prevent intrusion attempts. Rejected traffic is blocked at the edge and never reaches your local host. Write rules once and reuse across any app.
Observability & Analytics
Aggregate statistics on your service health and bandwidth consumption. Monitor your security posture and audit requests that were blocked by firewall rules and authentication policies.
Traffic Inspector
Watch API callbacks arrive in real time. Inspect payloads, response codes, latency, and retry attempts without sending sensitive traffic to a third party. Captures stay local to your machine.
Direct Connect
With Uplink running on both devices, the tunnel can be upgraded to an encrypted peer-to-peer link. Traffic flows straight between the two machines and never touches the edge. Lower latency and zero metered bandwidth.
The OpenTunnels Protocol.
A modern open source transport protocol for secure, high-performance tunnels.
QUIC + TLS 1.3
High performance multiplexing-optimized transport with a 1-RTT handshake (0-RTT on resume). TLS 1.3 encryption by default on every connection.
Channel binding (RFC 9266)
Every credential is welded to the exact TLS session it rides on. A captured token is cryptographically inert on any other connection.
Broad compatibility
HTTP, gRPC, WebSockets, and SSE on one encrypted QUIC connection, with each request riding its own stream, bound to the device Ed25519 identity.
Enforced tenant isolation
Tunnel credentials are bound to device public keys, edges route by that signed claim rather than the requested hostname.
No head-of-line blocking
Each request rides its own QUIC stream with its own flow control, so one slow transfer never stalls the others.
Written in Rust
Minimal reliance on external packages, well-tested memory-safe code, dependencies audited on every build.
Easy compatibility
for all of your projects and services.
Frontend dev servers, self-hosted apps, databases, game servers, AI models.
If it listens on a local port, you can publish it.
Web frameworks
- N Next.js
- V Vite
- A Astro
- R Remix
- S SvelteKit
- N Nuxt
- D Django
- R Rails
Self-hosted apps
- W WordPress
- P Plex
- J Jellyfin
- H Home Assistant
- N Nextcloud
- I Immich
- n n8n
- G Gitea
Databases & services
- P Postgres
- R Redis
- M MySQL
- s sshd / sftp
- M MongoDB
- G Grafana
- V Vaultwarden
- M Minecraft
Local AI
- O Ollama
- v vLLM
- l llama.cpp
- O OpenCode
- A Automatic1111
- L LM Studio
- C ComfyUI
- O Open WebUI
…and everything else that speaks HTTP, gRPC, WebSockets, or SSE.
Use Our Infrastructure
or Run Your Own.
Open source. MIT license. Host on your hardware or utilize our managed network.
Self-Hosted Edge Server
Free · Open source
Run your own edge on your own hardware.
Bring your own domain name, DNS configuration, and TLS certificates.
No SSO authentication, team features, advanced analytics, or security-event tracking.
Managed Edges
Preconfigured with seamless SSO authentication and Clickhouse-powered observability.
Free
- Unlimitted HTTPS encrypted apps
- 1 GB bandwidth / month
- Up to 10 Mbps transfer speeds
- Reserved internal subdomains
Dev
- Everything in Free
- 20 GB bandwidth / month
- Up to 100 Mbps transfer speeds
- Link 3 custom domain names
Pro
- Everything in Dev
- 1 TB bandwidth / month
- Up to 1 Gbps transfer speeds
- Link 20 custom domain names
Add a Team
Bring people in on top of any paid plan. Invite teammates and share your tunnels with the whole team in one click. No extra cost.
- Invite teammates & manage access
- Roles & permissions
- Audit logs & security events
- Shared apps and settings
Seats are free. You only pay for the plan underneath.
For teams and businesses.
Dedicated Edge Cluster
- Link unlimited custom domain names
- Dedicated compute and bandwidth for your team
- Up to 10 Gbps transfer speeds
- Unlimited bandwidth (5 TB included, then $0.05/GB)
- SOC 2 Type II infrastructure
- Advanced analytics and security features.
- Priority support & SLAs
Enterprise
- Deploy an edge fleet on your own infrastructure
- LDAP, SAML, and custom SSO providers
- ISO 27001 & SOC 2 Type II
- GDPR & HIPAA support, signed BAA
- Custom DPA & data-residency controls
- Compliance reporting & audit support
- Deployment and infrastructure consulting
Your first app online in minutes.
Install Uplink, chose a local port, and publish. That's it.