TunnelTug exposes local HTTP services to the internet through QUIC tunnels.
| Port | Protocol | Purpose |
|---|---|---|
| 443 | TCP HTTPS, UDP HTTP/3 | Public ingress |
| 9000 | UDP QUIC | Tunnel control channel |
| 80 | TCP | ACME HTTP-01 (-prod only) |
tunneltug -mode server -prod \\ -domain tunneltug.com \\ -email ssl@tunneltug.com \\ -token \"$(openssl rand -hex 32)\"
Requires DNS A/AAAA records and open ports 80, 443/tcp, 443/udp, and control/udp.
tunneltug -mode client \\ -server tunnel.tunneltug.com \\ -domain tunneltug.com \\ -subdomain myapp \\ -local 3000 \\ -token \"\"
| Flag | Default | Description |
|---|---|---|
| -mode | client | server or client |
| -routing | subdomain | subdomain or direct |
| -control | 9000 | QUIC control port (UDP) |
| -public | 8080 | Public HTTP(S) port |
| -local | 3000 | Local app port (client) |
| -http3 | true | HTTP/3 on public ingress when TLS enabled |
| -prod | false | ACME TLS + production defaults |
TUNNELTUG_TOKEN → -token TUNNELTUG_DOMAIN → -domain TUNNELTUG_SERVER → -server TUNNELTUG_SUBDOMAIN → -subdomain
GET /_tunneltug/health
Returns JSON status, routing mode, and active tunnel count.