Quick
No account needed $0 per session
- Public HTTPS URL in one click
- 30 minute session
- ~500 MB per session
- Perfect for demos & testing
Free tier live — no credit card, ever
Your homelab, online in 30 seconds. No port forwarding.
eztunl gives your self-hosted apps, game servers, and SSH a secure public address — through one outbound connection. Works behind NAT, CGNAT, and routers you're not allowed to touch.
No signup needed for your first tunnel · 30 minutes, one click$ curl -fsSL https://eztunl.com/install.sh | sh $ eztunl http 3000 ✓ tunnel online forwarding https://brave-otter.edge0.eztunl.com → localhost:3000 $ eztunl tcp 25565 ✓ tunnel online forwarding edge0.eztunl.com:14832 → localhost:25565
End-to-end TLS encryption Works behind CGNAT Zero router configuration Linux · macOS · Windows · Docker
How it works
From localhost to live URL in three steps
Your agent dials out to our edge — visitors never touch your home IP. Traffic flows over an encrypted, multiplexed session.
1
Run one command
Install the agent on your machine, Pi, NAS, or in Docker, then run
eztunl http 8080. Outbound only — your router never knows.
2
We bridge the traffic
Visitors hit our edge over HTTPS or a dedicated TCP port. The edge relays each connection through your agent's encrypted tunnel.
automatic3
Share your link
A clean subdomain for web apps, a host:port for game servers
and SSH. Online the moment your agent connects.
Use cases
Made for what you actually self-host
HTTP with WebSocket passthrough for dashboards. Raw TCP for game servers and SSH. One tool for the whole homelab.
Home Assistant & dashboards
Check your cameras, lights, and sensors from anywhere over HTTPS — WebSockets included. Your router config stays untouched.
$ eztunl http 8123Minecraft & game servers
Get a public TCP address that points straight at your machine. Friends join instantly — even if your ISP put you behind CGNAT.
$ eztunl tcp 25565SSH & dev previews
Reach your box over SSH from anywhere, or share a local build with a client before it ever hits staging. Live in seconds.
$ eztunl tcp 22NAS & self-hosted apps
Jellyfin, Nextcloud, Gitea, Uptime Kuma — put any self-hosted service online securely without touching your firewall.
$ eztunl http 8096Webhooks & API testing
Give Stripe, GitHub, or Telegram a real public URL that hits your laptop. Debug webhooks locally instead of deploy-and-pray.
$ eztunl http 3000Raspberry Pi projects
A 10 MB static binary runs happily on a Pi Zero. Ship your weekend project to the internet without renting a VPS.
$ eztunl http 8080 Why eztunl
Retire the port-forwarding ritual
The old way
- Log into your router, hunt for the NAT page
- Expose your home IP address to the internet
- Doesn't work at all behind CGNAT
- Dynamic DNS breaks when your IP rotates
- Every open port is an attack surface
With eztunl
- One command — no router access needed
- Your home IP stays private, always
- Works behind any NAT, CGNAT, or LTE
- Stable subdomain that never changes
- Only the port you choose is reachable
Pricing
Start free. Stay free. Upgrade if you outgrow it.
Quick needs no account, Free needs no card. Paid tiers unlock when billing ships.
Free
Google or GitHub sign-in $0 forever
- 1 static HTTP + 1 TCP tunnel
- Memorable subdomain that stays yours
- ~5 GB bandwidth per month
- No session time limits
Hobbyist
Coming soon ~$4 /mo
- 3 static HTTP subdomains
- Bring your own domain (CNAME)
- ~100 GB bandwidth per month
- Priority routing over free tier
Pro / Gamer
Coming soon ~$8 /mo
- Everything in Hobbyist
- 2 dedicated static TCP ports
- High bandwidth & connection limits
- UDP for game servers (planned)
Install
Runs everywhere your homelab does
Static binaries for Linux, macOS, and Windows. A desktop app if you prefer clicking. A Docker image for the NAS crowd.
macOS / Linux — one line
curl -fsSL https://eztunl.com/install.sh | sh eztunl login eztunl http 8080
Docker — set and forget
docker run -d --restart=always --network host \ ghcr.io/aripnk/eztunl-agent --token YOUR_TOKEN
Windows & desktop app
Grab the CLI .zip or the desktop GUI from the
downloads page.
eztunl login eztunl http 8080
Pin a version
Reproducible installs for your provisioning scripts.
curl -fsSL https://eztunl.com/install.sh | sh -s -- v0.1.5
FAQ
Questions homelabbers ask us
How is this different from port forwarding?
Port forwarding opens a door in your router and exposes your home IP to the world. eztunl works the other way: your machine makes one outbound, encrypted connection to our edge, and visitors only ever see our servers. No router changes, no exposed IP, and it works even when your ISP uses CGNAT and port forwarding is impossible.
Do I need a public IP or a specific router?
No. Because the agent dials out (like a browser does), it works behind any NAT, CGNAT, hotel Wi-Fi, or LTE connection. If your machine can reach the internet, eztunl can put your service on it.
Is my traffic secure?
Yes. The tunnel between your machine and our edge is encrypted with TLS, and HTTPS is terminated with valid certificates on our edge. Your service is never exposed directly — visitors only reach the specific port you chose to share.
What happens when a Quick session expires?
The URL simply stops working after 30 minutes — nothing lingers. Want a permanent subdomain that survives restarts? The Free tier gives you one static HTTP and one TCP tunnel, forever, for $0.
Can I run it on a Raspberry Pi, NAS, or in Docker?
Yes. We ship static binaries for Linux, macOS, and Windows on both amd64 and arm64, a desktop app, plus a multi-arch Docker image — one docker run and your homelab is online.
Enjoying the free tier?
eztunl is built and run by one homelabber, with no ads and no VC. If it saved you a VPS or a weekend of fighting your router, a coffee helps keep the edges online.
Your homelab is one command away from the internet
Start with a free 30-minute tunnel — no account, no card, no config. If you like it, the Free tier is yours forever.