a secure websocket tunnel that carries tcp and udp traffic through restrictive firewalls and proxies
wstunnel forwards TCP, UDP, unix socket and SOCKS/HTTP proxy traffic over a standard WebSocket (or HTTP2) connection, so it looks like ordinary web traffic and passes through firewalls and proxies that would otherwise block it. It runs as a lightweight server on one host while clients connect from anywhere to forward whatever traffic they need, with static and dynamic tunnels in both forward and reverse directions.
cloudimg ships wstunnel secure by default: the server only accepts clients that present a per-VM shared secret, and both that secret and a self-signed TLS certificate are generated on first boot rather than baked into the image. The daemon runs as an unprivileged system user, the image is kept fully patched, and it is backed by a paired deployment guide and 24/7 support.