Starts a tunnel which forwards all TCP traffic on a public port to a local address. This is extremely useful for exposing services that run non-HTTP traffic (ssh, sip, rdp, game servers, etc).

tls

Starts a tunnel listening for TLS traffic on port 443 with a specific hostname.

Documentation for bdy v1.22.58

Last modified on Jun 9, 2026

Getting Started

Examples

start http tunnel on port 80
bdy agent tunnel http 80$

start http tunnel, whitelist ip and turn on on basic auth
bdy agent tunnel http https://myhost.com -w 1.1.1.1 -a user:pass$

start tls tunnel on port 80
bdy agent tunnel tls 80$

start tls tunnel and terminate tls at target
bdy agent tunnel tls 443 -i target$

start tcp tunnel on port 22
bdy agent tunnel tcp 22$

start named tcp tunnel with whitelist
bdy agent tunnel tcp 80 -n name -w 1.1.1.1/27$

add tunnel to config
bdy tunnel config add http name 80$

start agent tunnel from config
bdy agent tunnel start name$

list agent tunnels
bdy agent tunnel list$

get agent tunnel status
bdy agent tunnel status tunnel-id$

remove agent tunnel
bdy agent tunnel rm tunnel-id$