Documentation

Create TLS Tunnels with Pinggy

Create a tunnel using a single command.

SSH CLI
Mac / Linux Windows Powershell Windows CMD

TLS tunnel does not provide any port. It present with a unique domain and SSL/TLS connection to be made to that domain at TCP port 443. In case of TLS tunnel, Pinggy does not terminate the SSL/TLS, instead it forward as it is to the client. The client needs to terminate SSL/TLS.

TLS tunnel ssh -p 443 -R0:localhost:8000 tls@free.pinggy.io
How a Pinggy TLS tunnel worksPinggy reads only the hostname (SNI) to route the connection and never decrypts it. Your server holds the certificate, so traffic stays encrypted from the client all the way to localhost:8000.PRIVATE NETWORKYour machinePINGGY EDGEPinggy*.a.pinggy.linkINTERNETlocalhost:8000Your clientsTLS on port 443ssh:443tls:443holds the certificateterminates TLSroutes by SNInever decryptsencrypted end to endno port in the URLencrypted end to end How a Pinggy TLS tunnel worksPinggy reads only the hostname (SNI) to route the connection and never decrypts it. Your server holds the certificate, so traffic stays encrypted from the client all the way to localhost:8000.PRIVATE NETWORKYour machinePINGGY EDGEPinggy*.a.pinggy.linkINTERNETlocalhost:8000holds the certificateroutes by SNI, never decryptsYour clientsTLS on port 443encrypted end to endssh :443tls :443encrypted end to end

Pinggy reads only the hostname (SNI) to route the connection and never decrypts it. Your server holds the certificate, so traffic stays encrypted from the client all the way to localhost:8000.