ferro-labs

ferro-labs/ferrotunnel

Secure, embedded, High Performance API-first tunneling with public URLs, acting as a lightweight ingress and HTTP/3 proxy focused on low-latency forwarding

69 stars 8 forks 69 watchers Rust Apache License 2.0

frp grpc http http-proxy http2 http3 iot networking ngrok-alternative quic-protocol rathole relay reverse-proxy reverse-tunnel rust self-hosted tcp tunnel yocto-meta zero-trust

18 Open Issues Need Help Last updated: Jul 3, 2026

Open Issues Need Help

View All on GitHub

Replace std::process::exit with error propagation in the CLI about 4 hours ago

bug good first issue p3 audit

ferro-labs/ferrotunnel

69

Secure, embedded, High Performance API-first tunneling with public URLs, acting as a lightweight ingress and HTTP/3 proxy focused on low-latency forwarding

Rust

#frp#grpc#http#http-proxy#http2#http3#iot#networking#ngrok-alternative#quic-protocol#rathole#relay#reverse-proxy#reverse-tunnel#rust#self-hosted#tcp#tunnel#yocto-meta#zero-trust

Make builder TLS configuration fail loudly instead of silently no-op about 4 hours ago

bug good first issue p2 audit

ferro-labs/ferrotunnel

69

Secure, embedded, High Performance API-first tunneling with public URLs, acting as a lightweight ingress and HTTP/3 proxy focused on low-latency forwarding

Rust

#frp#grpc#http#http-proxy#http2#http3#iot#networking#ngrok-alternative#quic-protocol#rathole#relay#reverse-proxy#reverse-tunnel#rust#self-hosted#tcp#tunnel#yocto-meta#zero-trust

Horizontal scaling / HA: node-local session store with no cross-node stream forwarding 15 days ago

enhancement help wanted RFC

ferro-labs/ferrotunnel

69

Secure, embedded, High Performance API-first tunneling with public URLs, acting as a lightweight ingress and HTTP/3 proxy focused on low-latency forwarding

Rust

#frp#grpc#http#http-proxy#http2#http3#iot#networking#ngrok-alternative#quic-protocol#rathole#relay#reverse-proxy#reverse-tunnel#rust#self-hosted#tcp#tunnel#yocto-meta#zero-trust

H1/H2 ingress: chunked oversized body returns 502 not 413; streaming response path lacks per-frame timeout (follow-up to #132) 15 days ago

bug good first issue security rust p2 audit

ferro-labs/ferrotunnel

69

Secure, embedded, High Performance API-first tunneling with public URLs, acting as a lightweight ingress and HTTP/3 proxy focused on low-latency forwarding

Rust

#frp#grpc#http#http-proxy#http2#http3#iot#networking#ngrok-alternative#quic-protocol#rathole#relay#reverse-proxy#reverse-tunnel#rust#self-hosted#tcp#tunnel#yocto-meta#zero-trust

Add send timeouts to avoid frame-channel teardown hangs 16 days ago

bug good first issue p2 audit

ferro-labs/ferrotunnel

69

Secure, embedded, High Performance API-first tunneling with public URLs, acting as a lightweight ingress and HTTP/3 proxy focused on low-latency forwarding

Rust

#frp#grpc#http#http-proxy#http2#http3#iot#networking#ngrok-alternative#quic-protocol#rathole#relay#reverse-proxy#reverse-tunnel#rust#self-hosted#tcp#tunnel#yocto-meta#zero-trust

Track cleanup-task handles for clean server shutdown 16 days ago

bug good first issue p2 audit

ferro-labs/ferrotunnel

69

Secure, embedded, High Performance API-first tunneling with public URLs, acting as a lightweight ingress and HTTP/3 proxy focused on low-latency forwarding

Rust

#frp#grpc#http#http-proxy#http2#http3#iot#networking#ngrok-alternative#quic-protocol#rathole#relay#reverse-proxy#reverse-tunnel#rust#self-hosted#tcp#tunnel#yocto-meta#zero-trust

Back off on accept-loop errors instead of busy-spinning 16 days ago

bug good first issue p2 audit

ferro-labs/ferrotunnel

69

Secure, embedded, High Performance API-first tunneling with public URLs, acting as a lightweight ingress and HTTP/3 proxy focused on low-latency forwarding

Rust

#frp#grpc#http#http-proxy#http2#http3#iot#networking#ngrok-alternative#quic-protocol#rathole#relay#reverse-proxy#reverse-tunnel#rust#self-hosted#tcp#tunnel#yocto-meta#zero-trust

Isolate plugin panics in the registry 29 days ago

bug good first issue p2 audit

ferro-labs/ferrotunnel

69

Secure, embedded, High Performance API-first tunneling with public URLs, acting as a lightweight ingress and HTTP/3 proxy focused on low-latency forwarding

Rust

#frp#grpc#http#http-proxy#http2#http3#iot#networking#ngrok-alternative#quic-protocol#rathole#relay#reverse-proxy#reverse-tunnel#rust#self-hosted#tcp#tunnel#yocto-meta#zero-trust

Reuse the shared connection pool for gRPC streams 29 days ago

bug good first issue performance p2 audit

ferro-labs/ferrotunnel

69

Secure, embedded, High Performance API-first tunneling with public URLs, acting as a lightweight ingress and HTTP/3 proxy focused on low-latency forwarding

Rust

#frp#grpc#http#http-proxy#http2#http3#iot#networking#ngrok-alternative#quic-protocol#rathole#relay#reverse-proxy#reverse-tunnel#rust#self-hosted#tcp#tunnel#yocto-meta#zero-trust

Don't hold the H2 pool mutex across connect/handshake 29 days ago

bug good first issue performance p2 audit

ferro-labs/ferrotunnel

69

Secure, embedded, High Performance API-first tunneling with public URLs, acting as a lightweight ingress and HTTP/3 proxy focused on low-latency forwarding

Rust

#frp#grpc#http#http-proxy#http2#http3#iot#networking#ngrok-alternative#quic-protocol#rathole#relay#reverse-proxy#reverse-tunnel#rust#self-hosted#tcp#tunnel#yocto-meta#zero-trust

Survive transient accept() errors in HTTP/TCP ingress 29 days ago

bug good first issue p2 audit

ferro-labs/ferrotunnel

69

Secure, embedded, High Performance API-first tunneling with public URLs, acting as a lightweight ingress and HTTP/3 proxy focused on low-latency forwarding

Rust

#frp#grpc#http#http-proxy#http2#http3#iot#networking#ngrok-alternative#quic-protocol#rathole#relay#reverse-proxy#reverse-tunnel#rust#self-hosted#tcp#tunnel#yocto-meta#zero-trust

Spawn TCP virtual-stream handlers instead of awaiting them sequentially 29 days ago

bug good first issue p2 audit

ferro-labs/ferrotunnel

69

Secure, embedded, High Performance API-first tunneling with public URLs, acting as a lightweight ingress and HTTP/3 proxy focused on low-latency forwarding

Rust

#frp#grpc#http#http-proxy#http2#http3#iot#networking#ngrok-alternative#quic-protocol#rathole#relay#reverse-proxy#reverse-tunnel#rust#self-hosted#tcp#tunnel#yocto-meta#zero-trust

Install rustls crypto provider for embedded library TLS users 29 days ago

bug good first issue p3 audit

ferro-labs/ferrotunnel

69

Secure, embedded, High Performance API-first tunneling with public URLs, acting as a lightweight ingress and HTTP/3 proxy focused on low-latency forwarding

Rust

#frp#grpc#http#http-proxy#http2#http3#iot#networking#ngrok-alternative#quic-protocol#rathole#relay#reverse-proxy#reverse-tunnel#rust#self-hosted#tcp#tunnel#yocto-meta#zero-trust

Server::task is never assigned -> is_running()/shutdown()/double-start guard broken 29 days ago

bug good first issue p2 audit

ferro-labs/ferrotunnel

69

Secure, embedded, High Performance API-first tunneling with public URLs, acting as a lightweight ingress and HTTP/3 proxy focused on low-latency forwarding

Rust

#frp#grpc#http#http-proxy#http2#http3#iot#networking#ngrok-alternative#quic-protocol#rathole#relay#reverse-proxy#reverse-tunnel#rust#self-hosted#tcp#tunnel#yocto-meta#zero-trust

Make duplicate tunnel_id registration atomic (TOCTOU race) 29 days ago

bug good first issue p2 audit

ferro-labs/ferrotunnel

69

Secure, embedded, High Performance API-first tunneling with public URLs, acting as a lightweight ingress and HTTP/3 proxy focused on low-latency forwarding

Rust

#frp#grpc#http#http-proxy#http2#http3#iot#networking#ngrok-alternative#quic-protocol#rathole#relay#reverse-proxy#reverse-tunnel#rust#self-hosted#tcp#tunnel#yocto-meta#zero-trust

Client::start() can hang forever on initial connection failure 29 days ago

bug good first issue p2 audit

ferro-labs/ferrotunnel

69

Secure, embedded, High Performance API-first tunneling with public URLs, acting as a lightweight ingress and HTTP/3 proxy focused on low-latency forwarding

Rust

#frp#grpc#http#http-proxy#http2#http3#iot#networking#ngrok-alternative#quic-protocol#rathole#relay#reverse-proxy#reverse-tunnel#rust#self-hosted#tcp#tunnel#yocto-meta#zero-trust

Make gather_metrics() and init_metrics() panic-free 29 days ago

bug good first issue p2 audit

ferro-labs/ferrotunnel

69

Secure, embedded, High Performance API-first tunneling with public URLs, acting as a lightweight ingress and HTTP/3 proxy focused on low-latency forwarding

Rust

#frp#grpc#http#http-proxy#http2#http3#iot#networking#ngrok-alternative#quic-protocol#rathole#relay#reverse-proxy#reverse-tunnel#rust#self-hosted#tcp#tunnel#yocto-meta#zero-trust

Wire configured frame/limit settings into the codec 29 days ago

bug good first issue p3 audit

ferro-labs/ferrotunnel

69

Secure, embedded, High Performance API-first tunneling with public URLs, acting as a lightweight ingress and HTTP/3 proxy focused on low-latency forwarding

Rust

#frp#grpc#http#http-proxy#http2#http3#iot#networking#ngrok-alternative#quic-protocol#rathole#relay#reverse-proxy#reverse-tunnel#rust#self-hosted#tcp#tunnel#yocto-meta#zero-trust