NAT traversal built with Rust and Tokio
A lightweight, high-performance, and secure reverse proxy with a binary size of around 5MB. Securely expose local services behind a firewall to the public internet.
Features
- High performance: high performance, packet-loss resilient, high throughput, no GC pauses, and low memory usage
- Tunnel protocols: TCP, UDP, HTTP, HTTPS,SOCKS5 and more
- Transport protocols: TCP, KCP, WebSocket, QUIC, with TCP multiplexing support
- Security: Token-based tunnel authentication, TLS and mTLS encryption; HTTPS supports transparent forwarding and client-side TLS termination
- Cross-platform: Windows, Linux, macOS, FreeBSD, and more
- Operations: lightweight server-side Web admin UI and cross-platform native desktop client; supports config hot-reload and ACME automatic certificate issuance
Quick Start
Download the binary archive for your platform and extract it.
Server
# orbien-server.toml listen = "0.0.0.0:9527"
./orbien-server -c orbien-server.toml
Client
# orbien.toml server = "127.0.0.1:9527" [[tunnels]] name = "ssh" protocol = "tcp" service = "127.0.0.1:22" remotePort = 9000
./orbien -c orbien.toml
If you prefer not to use the CLI, try the Orbien-Desktop desktop native GUI client.
Benchmark
| Env | Details |
|---|---|
| Platform | macOS 26.2 · Darwin 25.2.0 · arm64 |
| Hardware | Apple M2 (8 cores) · 16 GB |
| Details | benchmarks |
To rule out various sources of interference, these benchmarks were run on local loopback. Compared with frp, Orbien's clearest advantage is lower and steadier memory usage under high concurrency.
