▊
Bypass every firewall. Expose localhost:any to the public internet through Cloudflare's free edge. Zero open ports. Zero third-party binaries. Zero dollars.
Every packet. Every failure. Every culprit. Logged in real time.
Paste once. It detects your OS, downloads the exact binary, and launches the proxy.
DETECTING OS...
Your VPS firewall stays fully closed. The agent dials OUT. Nothing listens IN.
Domain:Port · Subdomain:22 · Subdomain:Random · Private IP. One engine, all modes.
What failed. Why it failed. Which node. When. Streamed live to your screen.
Sessions spawn on demand and self-destruct on disconnect. Zero persistent surface.
Rules live in Cloudflare KV. Hot-reload routing tables in milliseconds. No restarts.
One Go codebase compiled for Windows, macOS Intel/Silicon, and Linux.
Workers Free + KV Free + Pages Free. No Spectrum. No paid tunnels. No trials.
No cloudflared. No ngrok. No wrappers. Pure Go + TypeScript engineered from zero.
CSP transport, Go agent, Edge worker, KV vault, telemetry. SHIPPED.
The 2027 interface you are looking at right now. SHIPPED.
Unlimited VPS nodes under one vault. Per-node routing tables.
NetBird-parity 10.x.x.x addressing over the tunnel fabric.
Android/iOS clients with biometric vault unlock.
Yes. Workers free tier, KV free tier, Pages free tier. The engine was architected specifically to never touch a paid Cloudflare feature.
No. The agent dials OUT over 443. Your VPS firewall can stay 100% closed. That is the entire point.
cloudflared is Cloudflare's prebuilt binary. R6G is a custom-engineered Go + TypeScript stack with its own routing vault, telemetry matrix, and 4-method router. Nothing borrowed.
Any port. 22, 3306, 8080, 27015. The router is port-agnostic up to 65535.