Secure Tunnels
Unlike traditional proxies that require static IP addresses, ngrok enables your services to run anywhere—whether on your laptop, behind firewalls and NATs, within CI/CD environments, or on container platforms—without any need for complex networking configuration.
Just run a lightweight agent distributed as a standalone binary, open source SDK for your favorite programming languages, or a Kubernetes Operator to forward traffic from endpoints hosted on ngrok's global network to upstream services.
Connect to upstream services using any interface
A single binary with zero runtime dependencies, available for all major platforms, allowing you to operate with a simple, intuitive CLI.
It is packaged for distribution on the most popular package managers. You can run it as a system service so it starts when the machine boots up.
Manage traffic to your apps and APIs programmatically by embedding ngrok with a single line of code. Just like the ngrok agent, SDKs securely forward requests to your upstream services.
Configure the connection directly within your application, allowing you to define precise, API-driven contracts that dictate how your applications interact with the delivery layer. Eliminate hidden dependencies between your app and its delivery infrastructure.
Connect to services running in Kubernetes with the Kubernetes Operator, our open-source controller. It supports both Ingress CRDs as well as the new Gateway API.
You can also connect any service to your Kubernetes cluster in a secure, native fashion, making it appear local within your cluster.
The operator is built on top of our SDKs so it works in any Kubernetes cluster running anywhere including on a device at the edge, on your laptop, in EKS, GKE, OpenShift, K3s, or Minikube, in development and production environments.
More Secure Tunnel capabilities
- Customize the URL used by the agent to connect to the ngrok service for a more secure and branded experience.
- Ideal for connecting to external networks, such as customers' networks or IoT devices in partner environments.
- Request dedicated IP addresses for your connect URLs that are unique to your account.
- Explore and script the API using
ngrok apicommands. - Built into the ngrok agent.
- Automate ngrok workflows.
- Deliver services using ssh reverse tunneling (
ssh -R). - No need to install or run an ngrok agent.
- Ideal for connecting to devices with limited system resources.
- Suitable for remote, locked-down environments where downloads or installs aren’t allowed, such as during triaging issues.
- Get visibility into whether agents are online or offline.
- Track how long agents have been running.
- Stop, restart, update all agents directly from the dashboard.
- Control tunnel access with ACLs to enforce corporate security and compliance policies.
- Apply ACLs to authtokens to restrict tunnel creation based on specific security policies.
- Start, restart, or upgrade agents remotely using the dashboard or API.
- Configure Agent SDKs to listen for remote requests and perform additional actions as needed.
