HTTP, TCP and private RDP tunnels

Secure tunnels without exposing your private ports

DevProxy gives teams ngrok-like HTTP tunnels, raw TCP forwarding and private RDP relay with WebRTC P2P fallback, workspace isolation and auditable API tokens.

Create account View dashboard

No public RDP portWorkspace-scoped tokensP2P or encrypted relay

Host private RDPPowerShell

devproxy client host tcp --transport auto \
  --server https://control.devtunnels.ru \
  --token dpx_*** --name rdp --local 127.0.0.1:3389

Connect from another machinePowerShell

devproxy client connect tcp --transport auto \
  --host rdp.team.devtunnels.ru --local-port 3390

Viewermstsc :3390

Connector clientWebRTC P2P

DevProxy relay443 fallback

Host clientrdp.team

127.0.0.1:3389Windows RDP

Control plane443 only

Tunnel typesHTTP / TCP

TenancyWorkspace

Built for the tunnels developers actually use

Run local web apps, receive webhook callbacks, reach private TCP services, or access RDP through a connector client instead of a public internet port.

HTTP apps

Expose localhost sites through workspace hostnames with wildcard TLS.

Private RDP

Connect through 127.0.0.1 on the viewer machine without opening 3389 on the VPS.

Raw TCP

Use approved public TCP when a direct listener is really needed.

Teams

Separate tunnels by workspace and grant connector tokens explicitly.

Security

Security model that fits RDP

For private TCP mode the VPS only accepts authenticated WebSocket control traffic. The server validates workspace, tunnel name and grants, then relays bytes without understanding the application protocol.

Scoped API tokens are hashed and workspace-bound.
Private TCP connector access requires an explicit grant or workspace admin scope.
WebRTC can go direct when possible and falls back to relay when networks are hostile.
Audit events track account, token and tunnel lifecycle actions.

A SaaS control plane is already taking shape

The web app shares one i18n foundation for landing, billing and dashboard screens. Existing server APIs remain the source of truth.

Active tunnels12

Traffic84 GB

API tokens9

BillingPro

Pricing preview

Paid plans are a prototype for now, but the product path is visible in the interface.

Free

Random workspace slug, 3 tunnels, private relay access.

Start free

Pro

$12

Custom workspace slug, higher limits, approved public TCP.

Checkout coming soon

Business

$49

Multiple workspaces, audit retention, team administration.

Checkout coming soon

Questions

Does RDP go through HTTP?

No. RDP uses protocol-agnostic TCP frames over relay or WebRTC DataChannel.

Can the server start my local tunnel?

No. The local DevProxy client owns local ports and must be running or reconnecting.

Can I self-host it?

Yes. Docker Compose includes server, Postgres, Caddy and coturn.