Rathole ▲ server running

Secure, high-performance reverse-tunnel server for NAT traversal

Rathole is headless — this page exists so Cloudron has a health endpoint and you have a landing spot. Configuration is file-based and hot-reloads on save: edit /app/data/server.toml with the Cloudron file manager to add or remove tunnel services. A random default_token was generated on first start; copy it from that file.

Port	Purpose
2333	Control channel — rathole clients connect here
5200–5299	Tunnel exit ports — one per `[server.services.*]` block
HTTP (this page)	Status/health only, gated by the Cloudron auth proxy

Client side (on the machine behind NAT), with a matching service block on the server:

[client]
remote_addr = "your-cloudron.example.com:2333"

[client.services.my_nas_ssh]
token = "<same token as the server>"
local_addr = "127.0.0.1:22"

Upstream docs: github.com/rathole-org/rathole