Intranet penetration built with Rust and Tokio

English  |  简体中文  |  Docs

A lightweight, high-performance, and secure intranet penetration tool with a binary size of around 5MB.

Features

• High performance: end-to-end zero-copy forwarding, low latency, high throughput, no GC pauses, and low memory usage
• Proxy protocols: TCP, UDP, HTTP, HTTPS, and more
• Transport protocols: TCP, KCP, WebSocket, QUIC, with TCP multiplexing support
• Security: Token-based tunnel authentication, TLS and mTLS encryption; HTTPS supports transparent forwarding and client-side TLS termination
• Cross-platform: Windows, Linux, macOS, FreeBSD, and more
• Operations: lightweight Web admin UI and cross-platform desktop client for easy configuration and monitoring

Quick Start

Download the binary archive for your platform and extract it.

Server

# orbien-server.toml
bindAddr = "0.0.0.0"
bindPort = 9527

./orbien-server -c orbien-server.toml

Client

# orbien.toml
serverAddr = "127.0.0.1"
serverPort = 9527

[[proxies]]
name = "mysql"
type = "tcp"
localIP = "127.0.0.1"
localPort = 3306
remotePort = 6050

./orbien -c orbien.toml

If you prefer not to use the CLI, try the Orbien-Desktop desktop client — built with Tauri, under 10MB.

Benchmark

The chart below shows results from local loopback tests. Orbien keeps memory usage very low and stable.

Acknowledgements

This project draws architectural inspiration from frp. The desktop client's UI layout is inspired by frpc-desktop. Thanks to the open-source community.