<story><title>Reverst: Reverse Tunnels in Go over HTTP/3 and QUIC</title><url>https://github.com/flipt-io/reverst</url></story><parent_chain><item><author>roshanj</author><text>This is great! I&amp;#x27;ve had this exact idea for a specific robotics use-case but never got around to implementing it: a fleet of robots that each expose an HTTP service for debugging purposes. These robots connect to the internet through cellular or hop around among a set of wifi access points, such that long-lived connections are often interrupted and each robot IP address intermittently changes.&lt;p&gt;Many other reverse proxy &amp;#x2F; tunneling solutions use TCP-based protocols or require the target hosts to be accessible by the proxy server, but in this case QUIC connection migration avoids the reconnection handshakes needed for dropped TCP connections, and your client-&amp;gt;server model allows the robots to register themselves from restrictive networks.&lt;p&gt;The only missing feature would be to allow some sort of auth plugin - perhaps as a sub-request made to an external auth service that contains the identifier of the client the request will be routed to, similar to nginx&amp;#x27;s auth_request (&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;nginx.org&amp;#x2F;en&amp;#x2F;docs&amp;#x2F;http&amp;#x2F;ngx_http_auth_request_module.html&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;nginx.org&amp;#x2F;en&amp;#x2F;docs&amp;#x2F;http&amp;#x2F;ngx_http_auth_request_module....&lt;/a&gt;)</text></item></parent_chain><comment><author>debarshri</author><text>Generally people use Zerotier for this kind of usecase in the industry. It is pretty robust.</text></comment>
<story><title>Reverst: Reverse Tunnels in Go over HTTP/3 and QUIC</title><url>https://github.com/flipt-io/reverst</url></story><parent_chain><item><author>roshanj</author><text>This is great! I&amp;#x27;ve had this exact idea for a specific robotics use-case but never got around to implementing it: a fleet of robots that each expose an HTTP service for debugging purposes. These robots connect to the internet through cellular or hop around among a set of wifi access points, such that long-lived connections are often interrupted and each robot IP address intermittently changes.&lt;p&gt;Many other reverse proxy &amp;#x2F; tunneling solutions use TCP-based protocols or require the target hosts to be accessible by the proxy server, but in this case QUIC connection migration avoids the reconnection handshakes needed for dropped TCP connections, and your client-&amp;gt;server model allows the robots to register themselves from restrictive networks.&lt;p&gt;The only missing feature would be to allow some sort of auth plugin - perhaps as a sub-request made to an external auth service that contains the identifier of the client the request will be routed to, similar to nginx&amp;#x27;s auth_request (&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;nginx.org&amp;#x2F;en&amp;#x2F;docs&amp;#x2F;http&amp;#x2F;ngx_http_auth_request_module.html&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;nginx.org&amp;#x2F;en&amp;#x2F;docs&amp;#x2F;http&amp;#x2F;ngx_http_auth_request_module....&lt;/a&gt;)</text></item></parent_chain><comment><author>screamingninja</author><text>Have you considered wireguard &amp;#x2F; tailscale?</text></comment>