Introduction
What are agents?
Agent is a lightweight daemon (bdy) installed on the server or endpoint device. It maintains a constant, encrypted outbound connection to the Buddy platform, without requiring any firewall ports to be opened.
Image loading...
What are tunnels?
Tunnel is a logical communication channel that maps an external FQDN (Fully Qualified Domain Name) to an internal IP address and device port. There are two types of tunnels:
- Ephemeral Tunnel: temporary tunnel, active until the end of the session.
- Persistent Tunnel: maintains a persistent, automatically renewed connection.
Image loading...
Tunnels provide end-to-end encryption, IP masking and port forwarding.
How do agents and tunnels cooperate?
- BDY CLI Installation - install the
bdy
CLI on your computer. - Agent Installation - copy the command from Buddy dashboard and run the
bdy
daemon on your server or endpoint environment. - Registering agent - agent establishes secure connection with Buddy controller.
- Tunnel configuration - you define the FQDN and map it to the internal IP address and port, either in the panel or via the CLI.
- Redirecting traffic - all HTTPS, TLS, or TCP traffic is transmitted through the Tunnel to the Agent, which forwards it to the local service.
Example use cases:
- Remote Raspberry Pi management: access the GUI on port 5000 via
pi.mydomain.com
. - Database access: secure connection to MongoDB instances in a private network.
- Secure API: publishing microservices without public IP
- Sharing test environment to customers before the final release.
Last modified on Jun 25, 2025