Localtonet Documentation
Localtonet opens an outbound, encrypted tunnel from your device and gives the service behind it a public address. Find out how to install the client, create every type of tunnel and manage them.
Get started in three steps
From a new account to a public address for a service on your device.
Get your AuthToken
Create a free account, then copy your AuthToken from My Tokens. The token connects a device to your account.
Create an accountStart the client
Install Localtonet on the device that runs your service and start it with your token.
localtonet --authtoken <YOUR_TOKEN>Create a tunnel
In the dashboard, open My Tunnels, choose a tunnel type, enter the local IP address and port of your service, select Create tunnel and then Start.
Tunnel typesTunnel types
Pick the tunnel that matches the protocol of your service.
HTTP / HTTPS
Give a local web app a public HTTPS URL, with automatic SSL and custom domains.
Read the guideTCP
Reach any TCP service from anywhere, with no port forwarding or static IP.
Read the guideTLS
Encrypted TCP with TLS passthrough, so your service keeps its own certificate.
Read the guideUDP
Forward UDP traffic to a local port for real-time, latency-sensitive services.
Read the guideUDP / TCP Mixed
One tunnel for services that need both TCP and UDP on the same port.
Read the guideFile Server
Share a local folder as a link anyone can open in a browser. No web server needed.
Read the guideProxy Server
Turn your computer or Android phone into an HTTP or SOCKS5 proxy endpoint.
Read the guideRotating Proxy
One rotating HTTP or SOCKS5 endpoint in front of a pool of devices from your token groups.
Read the guideMCP Gateway
Connect MCP clients and AI assistants to tools running on your device through a public gateway.
Read the guideInstall the client
Set up Localtonet on the device that runs your service.
Windows
Store app, desktop app, console client and Windows service.
macOS
Homebrew, manual install and launchd service.
Linux
Install script, archives for glibc and musl, systemd service.
DEB and RPM packages
Packages with ready-made tunnel and VPN services.
Android
Google Play or APK, sign in with QR code, PIN or token.
Termux
The console client on an ARM64 Android device.
Docker
Run the client in a container.
OpenWrt
Experimental packages for routers.
NAS and Home Assistant
Docker Compose and Home Assistant templates.
Zero-install SSH
Open a tunnel with your SSH client, no download.
Browse by topic
Every section of the documentation.
Tunnel Settings
- Settings reference
- Custom domains
- Access control
- Web Application Firewall
- Headers and rewrites
- Limits and expiration
Networking
Teams & Account
Automation
Guides and tutorials
Step-by-step walkthroughs from the Localtonet blog.
What is Localtonet #
Localtonet is a tunneling and proxy platform. It makes a service that runs on your computer, phone or private network reachable from the internet, without port forwarding and without a public IP address. It also works behind NAT and CGNAT.
You manage everything in the dashboard and run the Localtonet client on the device that hosts your service. You can start on the Free plan and add Balance when you need more. See Plans and Balance.
Core concepts #
| Term | What it means |
|---|---|
| Client | The Localtonet app on your device. It opens an outbound connection to Localtonet and passes traffic to your local service. It runs on Windows, macOS, Linux, Android and Docker. |
| AuthToken | A token that connects one device to your account. You start the client with it. Create a separate token for each device under My Tokens, and keep every token private. |
| Tunnel | A saved link between a public address and a local IP address and port on one of your devices. You create it in the dashboard, choose its type, and select Start to put it online. |
| Server region | The Localtonet server location that hosts the public address of a tunnel. You choose it when you create the tunnel. |
| Public address | What visitors connect to: an HTTPS URL for a web tunnel, or a hostname and port for other tunnel types. |
| Dashboard | The web panel at Dashboard where you manage tokens, tunnels, domains and your Balance. |
How it works explains how these parts fit together.
What you can do with it #
- Give a local web app, API or webhook receiver a public HTTPS URL with an HTTP tunnel.
- Reach SSH, RDP, databases and game servers from anywhere with TCP, UDP and UDP / TCP Mixed tunnels.
- Keep your own certificate on the service with a TLS tunnel.
- Share a folder as a link with a File Server tunnel.
- Turn a computer or an Android phone into an HTTP or SOCKS5 proxy with a Proxy Server tunnel, or pool several devices behind a Rotating Proxy.
- Use your own domain. See Custom domains.
- Decide who can reach a tunnel with access control, Single Sign-On and the Web Application Firewall.
- Open a shell on your own machine from the browser with Device Terminal.
- Connect your devices in a private network with VPN Manager.
- Automate tunnels with the API, the MCP server and Webhooks.
- Invite colleagues to a team and decide what each member may do with its tunnels in Team Management.
New here? The Quick start takes you from a new account to a working tunnel.
Get help
Did not find what you were looking for?
