bdy tunnel tls

$bdy tunnel tls|TLS [options] [host:port]

Start a tunnel that forwards TLS traffic on port 443 for a hostname to a local address

ARGUMENTS

host:port

Target address to redirect traffic to. Host is optional and by default local machine. Port is by default 80 (optional)

OPTIONS

--context <name>

Connection and scope context: default, git, link or a saved name. Overrides the globally active context for this invocation.

--examples

Show only examples; with this flag --format accepts text, json or jsonl

--verbose

Show REST API requests, responses, timing and retries on stderr

-r, --region <region>

override default region ("eu", "us", "as")

-w, --whitelist <cidrs...>

Whitelist provided IP CIDRs. Use "*" to allow all

-n, --name <name>

Name of the tunnel

-t, --timeout <seconds>

Enforce connection timeout in seconds

-k, --key <key>

Path to a TLS key

-c, --cert <cert>

Path to a TLS PEM certificate

--ca <ca>

Path to a TLS PEM CA certificate for TLS auth

-i, --terminate <at>

Terminate TLS at "target", "agent", "region". By default TLS is terminated at "region"

--note <note>

Resource note

--agent-note <note>

Note for AI agents operating on this resource; stored as agent_note and meant to be read before acting on the resource

--token <token>

Token to authorize agent

--format <text|jsonl>

Output format: jsonl, text. JSONL CLI errors: {type:"error",error:{code,message,hint}}, exit 1. Default: text (choices: "text", "jsonl")

-h, --help

display help for command

Documentation for bdy v1.25.20

Last modified on Oct 14, 2026

Examples

Start tls tunnel on port 80
bdy tunnel tls 80$

Start tls tunnel and terminate tls at target
bdy tunnel tls 443 -i target$