Localport

Your localhost, on the internet.

Localport exposes local services to the internet over secure tunnels. It supports HTTP, TCP, TLS, and mutual TLS, and operates through NAT, CGNAT, and corporate firewalls without port forwarding, router configuration, or a public IP.

This repository contains the Localport agent: the client process that runs on the host machine and maintains tunnel connections to the Localport network. The agent is the only component that runs in your environment, and it is released as open source under the Apache License 2.0. The remainder of the platform, including the edge network, control plane, and dashboard, is operated by Localport as a managed service.

Accounts and tunnels are managed at localport.io.

Features

• Protocols. HTTP, TCP, and TLS tunnels with automatic, browser-trusted HTTPS.
• Reserved addresses. Static subdomains and ports persist across sessions, keeping public links and webhook URLs stable.
• Mesh tunnels. A single token serves an entire fleet. Each device receives its own address and remains reachable by name behind CGNAT or cellular networks.
• Shared tunnels. One inbound request is delivered to every connected client, with a designated client returning the response.
• Locked tunnels. Mutual TLS with ECDSA P-256 certificates restricts access to authorized devices, with per-device revocation.
• Access control. IP allow lists and password protection on any tunnel.
• Data privacy. Traffic is never inspected, logged, or used for training, and each tunnel is pinned to a chosen region.
• Cross-platform. Prebuilt binaries for macOS, Linux, and Windows.

Installation

# macOS and Linux (Homebrew)
brew install localport/tap/localport

# macOS and Linux (install script)
curl -fsSL https://localport.io/install.sh | sh

# Windows (PowerShell)
irm https://localport.io/install.ps1 | iex

For manual installation, download a binary from the releases page. Platform-specific instructions are in the installation guide.

Usage

Create a tunnel in the dashboard to obtain a token, then run the agent against the local service. Complete command, flag, configuration, and protocol documentation is maintained on the documentation site:

• Quick start — first-tunnel walkthrough
• CLI reference — commands, flags, and environment variables
• Tunnel guides — by protocol (HTTP, TCP, TLS) and routing mode (mesh, shared, locked / mTLS)

Build from source

Requires Go 1.24 or newer.

git clone https://github.com/localport/agent.git
cd agent
make build
./bin/localport version

make build-all cross-compiles binaries for macOS, Linux, and Windows into bin/.

Documentation

• Product and guides: localport.io/docs
• Wire protocol: docs/PROTOCOL.md

Contributing

Issues and pull requests are welcome. For non-trivial changes, open an issue to discuss the approach before submitting. Run make test, make vet, and make lint before opening a pull request.

Security

Report security vulnerabilities privately through localport.io/contact. Do not open public issues for security reports.