Starts a tunnel which forwards all TCP traffic on a public port to a local address. This is extremely useful for exposing services that run non-HTTP traffic (ssh, sip, rdp, game servers, etc).

tls

Starts a tunnel listening for TLS traffic on port 443 with a specific hostname.

Documentation for bdy v1.20.0

Last modified on Apr 13, 2026

Getting Started

Examples

Start http tunnel on port 80
bdy agent tunnel http 80$

Start named http tunnel and serve local directory
bdy agent tunnel http -n name -s /path/to/dir$

Start http tunnel, whitelist ip and turn on on basic auth
bdy agent tunnel http https://myhost.com -w 1.1.1.1 -a user:pass$

Start tls tunnel on port 80
bdy agent tunnel tls 80$

Start tls tunnel and terminate tls at target
bdy agent tunnel tls 443 -i target$

Start tcp tunnel on port 22
bdy agent tunnel tcp 22$

Start named tcp tunnel with whitelist
bdy agent tunnel tcp 80 -n name -w 1.1.1.1/27$

Add tunnel to config
bdy tunnel config add http name 80$

Start agent tunnel from config
bdy agent tunnel start name$

List agent tunnels
bdy agent tunnel list$

Get agent tunnel status
bdy agent tunnel status tunnel-id$

Remove agent tunnel
bdy agent tunnel rm tunnel-id$