Expose Any TCP Service
Without Exposing Your IP

Orbit Tunnel lets you host Minecraft servers, game servers, and internal services behind firewalls and NAT —
securely, privately, and without port forwarding.

Why Orbit Tunnel?

No Port Forwarding

Keep your home or private network locked down. Only a single outbound tunnel connection is required.

Unlimited Players

Each player receives a dedicated TCP tunnel. Scales automatically — no pre-allocation required.

Real Client IP Support

Forward real player IPs using PROXY protocol (BungeeCord, Velocity, and compatible services).

Protocol Agnostic

Minecraft, game servers, databases, custom TCP apps — if it speaks TCP, it works.

Firewall Friendly

Your VPS only needs one inbound port. Your internal server needs zero.

Open & Transparent

Built with Node.js using raw TCP sockets. Simple, inspectable, and easy to extend.

How It Works

  1. Your server opens an outbound tunnel to Orbit
  2. Players connect to the Orbit public endpoint
  3. A dedicated tunnel is assigned per player
  4. Traffic is forwarded securely to your internal service
Player → orbit-host.net:25565

Orbit Tunnel VPS
↓ TCP Tunnel (7000)
Your Private Server (LAN / Home / Cloud)

Get Started in Minutes

Download the client, point it at your service, and your server is online instantly.

node client.js
→ Tunnel established
→ Players can connect