No Client Installation Required

Expose Localhost to the Internet. Securely.

The self-hosted solution for secure reverse tunneling that works with your existing SSH. No client installation, no extra software — just one command.

+--- user@local:~ ---+

[ VIEW ON GITHUB ][ READ THE DOCS ]

$ cat features.txt

Key Features

No Client Required

[OK]

--------------------------------

Works with the OpenSSH already on your machine. No downloads, no installations, no agents.

Device Flow Auth

[OK]

--------------------------------

Secure, browser-based authentication for every session. OAuth 2.0 device flow.

Rust Core

[OK]

--------------------------------

Built on russh and tokio for high-performance async concurrency and minimal overhead.

God Mode

[OK]

--------------------------------

Admins can monitor active connections and terminate suspicious tunnels instantly.

Virtual Ports

[OK]

--------------------------------

Smart port handling - bind to port 80, forward to any local port seamlessly.

Private & Secure

[OK]

--------------------------------

Data never leaves your infrastructure. TLS termination and end-to-end encryption included.

$ ./explain --architecture

How It Works

STEP 01

Terminal

================

Run a single ssh -R command — no client or agent to install.

STEP 02

Gatekeeper

================

Node.js web server initiates device flow authentication.

STEP 03

Tunnel

================

Rust server establishes high-performance stream connection.


┌─────────────┐      ┌─────────────┐      ┌─────────────┐
│  YOUR DEV   │      │  GATEKEEPER │      │   TUNNEL    │
│   MACHINE   │─────▶│   NODE.JS   │─────▶│    RUST     │
│  (ssh -R)   │      │  (auth)     │      │  (stream)   │
└─────────────┘      └─────────────┘      └─────────────┘
       │                                         │
       │                                         │
       └─────────── localhost:3000 ◀─────────────┘
                    EXPOSED AS
                 https://demo.youdomain

$ sudo ./install.sh

Self-Host in Minutes

Deploy your own tunnel server with Docker. Users connect with standard SSH — no client software required.

Docker Compose

$ docker-compose up -d

Docker

$ docker pull ghcr.io/ZingerLittleBee/EXLO:latest

From Source

$ git clone https://github.com/ZingerLittleBee/EXLO && cd EXLO && cargo build --release

+--- .env.example ---+

# Server Configuration
DOMAIN=your.domain
SSH_PORT=2222
HTTP_PORT=80
HTTPS_PORT=443

# Authentication
AUTH_PROVIDER=github
GITHUB_CLIENT_ID=your_client_id
GITHUB_CLIENT_SECRET=your_client_secret

# Database
DATABASE_URL=postgres://user:pass@localhost/fwd

# TLS (auto-generated if not provided)
TLS_CERT_PATH=/etc/ssl/certs/fwd.crt
TLS_KEY_PATH=/etc/ssl/private/fwd.key

>View Full Documentation--help

$ git commit -m "Add awesome feature"