@realfxw: When away from home, the most annoying things about trying to connect to your home NAS, adjust Ollama on your desktop, or start Moonlight streaming are: no public IPv4, complex large NAT environments, and fear of being constantly scanned by scripts when enabling router port mappings. Try this lightweight private networking tool written in Rust…
Summary
Lantunnel is a lightweight private networking tool written in Rust that allows users to securely access home NAS, remotely invoke Ollama, or stream games in environments without public IPv4 or complex NAT, using P2P direct connections and encrypted relays to avoid port exposure.
View Cached Full Text
Cached at: 09/11/26, 08:41 PM
When away from home, accessing your home NAS, adjusting the Ollama instance on your desktop, or initiating Moonlight streaming can be frustrating due to: no public IPv4 address, complex large-scale NAT environments, and the risk of router port mapping being constantly scanned and attacked by scripts across the internet.
Try Lantunnel, a lightweight private networking tool written in Rust, for a very smooth experience:
Completely告别 public network exposure: All devices actively initiate connections outwards; the router doesn’t need any inbound rules or mappings, and your home machines remain safely hidden behind NAT.
QUIC direct connection priority: Devices prioritize UDP hole punching for direct connection, maximizing your home upload bandwidth. When that fails, it automatically switches to encrypted relays. The relay only handles ciphertext, ensuring intermediaries cannot access plaintext.
Local minimal access: Don’t want to install a virtual network adapter to route all machine traffic? The client listens locally on SOCKS5 (127.0.0.1:1080) for on-demand access. It also supports exporting entire private subnets to directly access all devices on your home network.
Zero-barrier trial: http://lantunnel.app provides a permanent free Tunnel with unlimited direct connection traffic and 5 GB of encrypted relay data per month as an emergency buffer. To maximize your private bandwidth, you can also self-host a Gateway with a single command.
Project address: https://github.com/lantunnel/lantunnel
Lantunnel - Fast Private LAN Access
Source: https://lantunnel.app/ LANTUNNEL 2.0
Your private network, wherever you work.
Connect trusted Peers over encrypted Direct paths, with Relay fallback.
This Peer
Lantunnel Client
this.peer
Remote Peer
Lantunnel Client
remote.peer
One Client
Import a .peer profile and connect through the default UI or --headless.
P2P first
Direct first; encrypted Fleet Relay when needed.
Whole LAN access
Reach private services without exposing them publicly.
PRIVATE ACCESS
A clear path to the services you already run.
Direct First
Use Direct paths whenever P2P is available.
Encrypted Transport
Private paths stay encrypted; services stay on your network.
No Port Forwarding
No public URL or router port mapping required.
One Client
Use Lantunnel Client on every Peer, with the default UI or headless startup.
Simple Access
Connect from your laptop or desktop.
Advanced Proxy Access
Route approved CLI tools and automations to private LAN endpoints.
USE CASES
One private network, different kinds of work.
Game & Media Streaming
Stream Sunshine, Jellyfin, Plex, and other LAN media over Direct-first paths. Laptop or Desktop
Private AI & Developer Tools
Keep Ollama, Open WebUI, internal APIs, and developer tools on your LAN. Private AI or API service
Home & Office Services
Access NAS, Home Assistant, cameras, and dashboards without public exposure. NAS and private services
PRICING
Simple, per-Tunnel pricing.
One permanent Free Tunnel included. Add paid Tunnels when needed.
Free
Permanent Free Tunnel included $0
- Unlimited LAN devices behind each Client
- Unlimited direct peer-to-peer traffic
- Free self-hosted Gateway; traffic is unmetered
- Encrypted Fleet Relay fallback
- Best-effort support Get Started (https://lantunnel.app/register)
Home
Separate Home Tunnel, billed monthly $6.99/tunnel/month
- Unlimited LAN devices behind each Client
- Unlimited direct peer-to-peer traffic
- Free self-hosted Gateway; traffic is unmetered
- Encrypted Fleet Relay fallback
- Best-effort support Create Home Tunnel (https://lantunnel.app/register?plan=home)
Plus
Separate Plus Tunnel, billed monthly $14.99/tunnel/month
- Unlimited LAN devices behind each Client
- Unlimited direct peer-to-peer traffic
- Free self-hosted Gateway; traffic is unmetered
- Encrypted Fleet Relay fallback
- Best-effort support Create Plus Tunnel (https://lantunnel.app/register?plan=plus)
Business
Contracted Tunnels and capacity Contact us
- Named Tunnels and Peer capacity
- Fleet Relay allowance set by contract
- No self-service checkout
- Support defined by contract Talk to us (https://lantunnel.app/business)
Prices are in USD per Tunnel per month, before tax. Free/Home/Plus support is best effort, with no guaranteed response time; Business support is contractual.
Similar Articles
@DIYgod: Blog update "Whole-Home Privacy Gateway: Hiding Your Entire Family's IP with Two NAS Devices" https://diygod.cc/home-gateway/
DIYgod published a blog post detailing a whole-home privacy gateway setup using two NAS devices: a Surge primary gateway and an mihomo backup gateway achieve failover by floating a virtual IP via keepalived/arping, and the post compares real-world performance of WARP, self-hosted VPS exit nodes, and WireGuard vs. SS2022 protocols.
@shenxiankk: Here's a pretty creepy thing: That WiFi router at home? It's probably not as secure as you think. There's this open-sou…
介绍开源工具 Airgorah——一个用 Rust 编写、基于 Linux 的图形化 aircrack-ng 封装工具，可用于嗅探 WiFi 流量、识别设备、发起 deauth 攻击并抓取握手包破解密码，仅限在自己的网络上进行安全审计使用。
@Ylj158852: https://x.com/Ylj158852/status/2116779024064323705
This tutorial explains how to use Cloudflare Tunnel (cloudflared) to turn an old computer at home into a publicly accessible server without a VPS, public IP address, or port forwarding. It covers getting started with Quick Tunnel, long-term deployment with a named Tunnel, and common pitfalls.
@fhwofjow51260: I recommend an open-source Rust monitoring agent called monitor. The hub idles at 6.8 MiB, the agent at 1.8 MiB, and even with two hundred nodes online at once, it only uses 10.8 MiB and two percent of one CPU core. The design is extreme: the agent doesn’t listen on any ports or execute commands, so even if the dashboard is compromised, it still can’t take over…
Here’s a recommended open-source Rust monitoring probe: its agent is just 1.8 MiB, and even with 200 nodes online, it requires only 10.8 MiB. It adopts an extremely security-focused design: it does not listen on ports, execute commands, or write files, and includes neither a web terminal nor remote SSH. It supports a theme store and Telegram/Webhook notifications.
@VincentLogic: Discovered a powerful network monitoring tool for the terminal! With RustNet, you can monitor all network connections in real-time directly from the terminal. See at a glance which processes are secretly transmitting data and who is connecting to your server. The best part is seeing the application associated with each connection—something Wireshark can't do. You can view this directly over SSH without needing X11 forwarding…
Introduces RustNet, a terminal-based network monitoring tool developed in Rust. It supports real-time connection monitoring, process association, and traffic analysis, making it ideal for operations and security troubleshooting.