chisel

Start server

$ chisel server --port [8080]

$ chisel server --authfile [users.json]

$ chisel client [server:8080] [local:3000:remote:80]

$ chisel client [server:8080] R:[remote:8001:local:80]

$ chisel client [server:8080] socks

$ chisel client https://[server] [8080:localhost:80]

chisel server [options]
chisel client [options] server remote...

chisel is a fast TCP/UDP tunnel transported over HTTP and secured via SSH. A single executable contains both client and server functionality. It uses WebSockets to multiplex connections, allowing multiple tunnels through a single HTTP connection.
The tool is useful for traversing firewalls, accessing services behind NAT, and creating reverse tunnels. It supports forward and reverse port forwarding as well as SOCKS5 proxy mode. Authentication can be configured with username/password pairs or an authentication file. Written in Go.

--port port

Listening port (default: 8080)

Listening interface

User authentication file

Single user authentication

Allow reverse tunneling

Keepalive interval

TLS key and certificate

--auth user:pass

Authentication credentials

Server fingerprint for verification

Keepalive interval

Useful for bypassing firewalls. WebSocket support varies by PaaS provider. Install: curl https://i.jpillora.com/chisel! | bash

ssh(1), socat(1), ngrok(1)