Intranet penetration built with Rust and Tokio

English  |  简体中文  |  Docs

A lightweight, high-performance, and secure intranet penetration tool with a binary size of around 5MB.

Features

• High performance: end-to-end zero-copy forwarding, low latency, high throughput, no GC pauses, and low memory usage
• Tunnel protocols: TCP, UDP, HTTP, HTTPS, and more
• Transport protocols: TCP, KCP, WebSocket, QUIC, with TCP multiplexing support
• Security: Token-based tunnel authentication, TLS and mTLS encryption; HTTPS supports transparent forwarding and client-side TLS termination
• Cross-platform: Windows, Linux, macOS, FreeBSD, and more
• Operations: lightweight Web admin UI and cross-platform desktop client for easy configuration and monitoring

Quick Start

Download the binary archive for your platform and extract it.

Server

# orbien-server.toml
listen = "0.0.0.0:9527"

./orbien-server -c orbien-server.toml

Client

# orbien.toml
server = "127.0.0.1:9527"

[[tunnels]]
name = "mysql"
protocol = "tcp"
service = "127.0.0.1:3306"
remotePort = 9000

./orbien -c orbien.toml

If you prefer not to use the CLI, try the Orbien-Desktop desktop native GUI client.

Benchmark

The chart below shows local loopback memory usage. Compared with frp, Orbien uses less memory and stays more stable.