ngrok link

secure network tunnels for production workloads

Modern VPN Alternative

Integrate with on-prem customer networks without the configuration burden and operational complexity of operating VPNs.

Remote Device Admin

Instant console access to devices deployed in the field. Remotely troubleshoot problems when they occur with direct device access.

Scale Up

Scale from thousands to millions of tunnels without a NOC team because your tunnels recover automatically when networks, devices and servers fail.

Remote device management for IoT providers

Assign stable, secured, public addresses to any device with a connection to the internet without any changes to network configuration. Manage and debug your IoT devices remotely. Optionally give your customers access to the endpoints for their own remote management.

No New Protocols

Communicate with your devices over HTTP and other standard protocols leveraging your existing expertise and tooling.

Debug Problems in the Field

Get terminal access via SSH into devices that fail in the field for easy administration and debugging without dispatching a human technician.

Automate Device Provisioning

Automate device activation and integrate with ngrok. Reserve domains, issue new credentials, and query connected devices via a REST API.

Targeted Access to Customer Networks

Integrate your application with a customer’s on-prem software infrastructure with a secure channel between your networks. ngrok link provides independent encrypted links with targeted access to only the necessary service in your customer networks.

Reduce Operational Cost

Stop wasting time configuring and restarting clunky VPN tunnels for each of your integrations. ngrok works across all platforms with a simple YAML configuration file.

Automate with APIs

Automate tunnel activation and integrate with ngrok. Reserve domains, issue new credentials, and query online tunnel status all via REST API.

Authenticate and Encrypt

Whitelist access to your tunnel endpoints. Enforce ACLs for what tunnels a client may bind. Use TLS tunnels for end-to-end encryption with TLS client authentication.

Turbo-charged ngrok

ngrok link builds on top of the already powerful ngrok core. All of the ngrok features are part of ngrok link. That means HTTP, TCP, and TLS tunnels, reserved domains and addresses, tunnels over custom domains, the powerful ngrok client API and more are all included. ngrok link goes beyond that to makes ngrok fit naturally as a reliable, secure piece of your production infrastructure.



ngrok tunnels run using an optimized version of the technology that powers HTTP/2 so that your tunneled services load fast.

Credential Management

Issue separate authtokens for each ngrok client. If the device or integration is decommissioned, you can easily revoke these tokens. Each token can be created with permissions restrictions defining exactly what tunnel addresses it is allowed to bind on your account.

End-to-end Encryption

Tunnel sensitive information without trusting's servers by encrypting traffic end-to-end with TLS tunnels and keys that only you control, even over your own domains.

ngrok tls -hostname 443

Native OS service management

Manage and install ngrok as a native service on all major platforms. The same, simple command can instruct ngrok to install itself with launchd, Windows Services, upstart, or systemd.

ngrok service install -config C:\ngrok.yml

Advanced APIs for automation

Automate your integration with ngrok. Reserve domains, reserve addresses, query tunnel status, and issue new authtoken credentials all from a simple RESTful API.


IP whitelisting for tunnel endpoints

Exercise finer control over access to your tunnels by restricting which IPs or IP ranges can establish connections to your tunnel endpoints.

TLS Client Authentication

Leverage enterprise-grade authentication managed by TLS to enforce that only trusted clients may access sensitive tunnel endpoints.

Priority Support

Having a problem with ngrok? ngrok link accounts get answers and help faster!