Private Networks and Tunnels
rathole
Installs the pinned rathole release, writes /etc/rathole/config.toml (mode 640) for the chosen role and runs it as a sandboxed systemd service. The server role opens the tunnel port and the service port in ufw when ufw is active. Safe to run again.
What it does
Private Network and Tunnel Installers
What you will be asked
You fill these in during setup.
- Role of this server Requiredserver: this server has the public address and listens for the client. client: this server delivers a local service to the server.
- Shared token RequiredA secret both sides must know (16 to 64 letters and digits). Choose it on the server and enter the same value on the client.
- Tunnel port RequiredThe port the server listens on for the client connection (the control channel). Must be the same on both sides.
- Service port RequiredOn the server: the public port people connect to. On the client: the local port of the service to deliver (for example 443 for a proxy panel). Use the same number on both sides.
- Server address (client role only) OptionalThe public IP address or domain of the server side. Leave empty for the server role.