wstunnel WebSocket Tunnel on Ubuntu 24.04 LTS

Azure Networking

a secure websocket tunnel that carries tcp and udp traffic through restrictive firewalls and proxies

Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Overview

wstunnel forwards TCP, UDP, unix socket and SOCKS/HTTP proxy traffic over a standard WebSocket (or HTTP2) connection, so it looks like ordinary web traffic and passes through firewalls and proxies that would otherwise block it. It runs as a lightweight server on one host while clients connect from anywhere to forward whatever traffic they need, with static and dynamic tunnels in both forward and reverse directions.

Why the cloudimg image

cloudimg ships wstunnel secure by default: the server only accepts clients that present a per-VM shared secret, and both that secret and a self-signed TLS certificate are generated on first boot rather than baked into the image. The daemon runs as an unprivileged system user, the image is kept fully patched, and it is backed by a paired deployment guide and 24/7 support.

Common uses

  • Reach internal services through restrictive firewalls and proxies
  • Expose a local service via a reverse tunnel from a private network
  • Route application or SOCKS proxy traffic over an encrypted WebSocket