4 ms·
This is nice and for those who's asking, it's different from ngrok and the others in that you don't need a separate client, (almost) everyone has ssh installed.
by gnyman 10mo ago
This is nice and for those who's asking, it's different from ngrok and the others in that you don't need a separate client, (almost) everyone has ssh installed.
To the author, I wish you best of luck with this but be aware (if you aren't) this will attract all kind of bad and malicious users who want nothing more than a "clean" IP to funnel their badness through.
serveo.net [2] tried it 8 years ago, but when I wanted to use it I at some point I found it was no longer working, as I remember the author said there was too much abuse for him to maintain it as a free service
I ended up self-hosting sish https://docs.ssi.sh https://docs.ssi.sh instead.
Even the the ones where you have to register like cloudflare tunnels and ngrok are full of malware, which is not a risk to you as a user but means they are often blocked.
Also a little rant, tailscale has their own one also called funnel. It has the benefit of being end-to-end encrypted (in theory) but the downside that you are announcing your service to the world through the certificate transparency logs. So your little dev project will have bots hammering on it (and trying to take your .git folder) within seconds from you activating the funnel. So make sure your little project is ready for the internet with auth and has nothing sensitive at guessable paths.
[2] https://news.ycombinator.com/item?id=14842951 https://news.ycombinator.com/item?id=14842951
- resiros 10mo agoIt would be nice to have an open-source version that you can self-host. That would solve the abuse problem. Maybe with a service to create API keys.
- klipitkas 10mo agoYeah, this is the next step. I first wanted to understand if this gets any traction. I think I will provide a dockerized version for the server part that you can just run with a simple command and maybe some interface to create api keys and distribute them to your users.
- popalchemist 10mo agoFair enough from a business standpoint, but seeing as there are massive privacy/security risks involved in exposing your data to an opaque service, the open source component is probably a non-optional aspect of the value prop.
- rgbrgb 10mo agohow come? just because it's open source doesn't mean that they run that exact binary on their servers. ngrok does pretty well without open sourcing.
- popalchemist 10mo agoThe locus of trust moves, if you have the source, and trust is a factor for you, because you can simply self-host and know what you're running.
- PLG88 10mo agofwiw, ngrok started as open source
- cyberax 10mo agoWe're using pgrok for that in our organization. A small EC2 instance serves as the public endpoint.
- klipitkas 10mo agoThanks for the kind words. I hope I won't have to close this service in a few days due to abuse but its a weird world we live in.
- pcthrowaway 10mo agoDo you have funding to cover the paying the bandwidth costs which will ultimately result from this? Or if you're running this from a home network, does anyone know if OP should be concerned of running into issues with their ISP?
- kilobaud 10mo agoThe tunnel host appears to be a Hetzner server, they are pretty generous with bandwidth but the interesting thing I learned about doing some scalability improvements at a similar company [0] is that for these proxy systems, each direction’s traffic is egress bandwidth. Good luck OP, the tool looks cool. Kinda like pinggy. [0] https://localxpose.io https://localxpose.io
- klipitkas 10mo agoI can cover hundreds of PB of bandwidth per month if needed without paying a fortune.
- kilobaud 10mo agoCan you share more details? I know Hetzner offers unlimited bandwidth in some cases but I thought it limited only to servers with the 1Gbs uplink
- aamoscodes 10mo agoWork closet /s
- jjcm 10mo agoAs someone who has launched something free on HN before, the resulting signups were around 1/3rd valid users doing cool things and checking things out, and 2/3rds nefarious users.
- apitman 10mo agoA few other options as well: https://github.com/anderspitman/awesome-tunneling https://github.com/anderspitman/awesome-tunneling
- kej 10mo agoJust want to say that I appreciate you maintaining this list. It's one of those things I need to do every now and then, so having a place that gives me a current summary of the options is very handy.
- LelouBil 10mo agoOpenSSH is preinstalled on Windows as well, so I think it's not a stretch to say everyone has ssh now.
- sorz 10mo agoRandom thoughts: one can get user's ssh public keys from GitHub on the fly (from `https://github.com/<username>.keys`), so that it requires a valid GitHub account to use this service, without (extra) auth process.