NodePass is an open-source, lightweight, enterprise-grade TCP/UDP network tunneling solution featuring an all-in-one architecture with separation of control and data channels, along with flexible and high-performance instance control. It supports zero-configuration deployment, intelligent connection pooling, tiered TLS encryption, and seamless protocol conversion. Designed for DevOps professionals and system administrators to effortlessly handle complex network scenarios.

Key Features

• Universal Functionality

  • Basic TCP/UDP tunneling and protocol conversion across diverse networks.
  • Compatible with port mapping, NAT traversal, and traffic relay.
  • Cross-platform, multi-architecture, single binary or container.

• Connection Pool

  • Supports TCP, QUIC, WebSocket, HTTP/2 pooling transport methods.
  • Eliminates handshake delays, boosts performance with 0-RTT support.
  • Auto-scaling with real-time capacity adjustment.

• Innovative Architecture

  • Integrated S/C/M architecture, flexible mode switching.
  • Full decoupling of control/data channels.
  • API-instance management, multi-instance collaboration.

• Multi-level Security

  • Three TLS modes: plaintext, self-signed, strict validation.
  • Covers development to enterprise security needs.
  • Hot-reload certificates with zero downtime.

• Minimal Configuration

  • No config files required, ready to use via CLI.
  • Optimized for CI/CD and containers.
  • Advanced parameters like timeouts and rate limits.

• Performance

  • Intelligent scheduling, auto-tuning, ultra-low resource usage.
  • Stable under high concurrency and heavy load.
  • Load balancing, health checks, self-healing and more.

• Visualization

  • Rich cross-platform visual frontends.
  • One-click deployment scripts, easy management.
  • Real-time monitoring, API-instance management, traffic stats.

Quick Start

• Start a server with TCP connection pooling:

nodepass server \
  --tunnel-port 10101 \
  --target-addr 127.0.0.1 \
  --target-port 3000

• Start a client for minimal 0-RTT tunneling:

nodepass client \
  --tunnel-addr server.address \
  --tunnel-port 10101 \
  --target-addr 127.0.0.1 \
  --target-port 3000

• Enable TLS security with self-signed certificate:

nodepass server \
  --tunnel-port 10101 \
  --target-addr 127.0.0.1 \
  --target-port 3000 \
  --tls 1

• Launch a master for multi-instance management:

nodepass master \
  --tunnel-port 10101 \
  --tls 2 \
  --crt master.crt \
  --key master.key

Documentation

Explore the complete documentation to learn more about NodePass:

• Installation Guide
• Usage Instructions
• Configuration Options
• CLI Reference
• API Reference
• MCP Reference
• Examples
• How It Works
• Troubleshooting

See also DeepWiki for AI-powered documentation.

Ecosystem

The NodePassProject organization develops various frontend applications and auxiliary tools to enhance the NodePass experience:

• NodePassDash: A modern NodePass management interface that provides master management, instance management, traffic statistics, history records, and more.

• NodePass-ApplePlatforms: A service-oriented iOS/macOS application that offers a native experience for Apple users.

• NodePanel: A lightweight frontend panel that provides visual tunnel management, deployable on Vercel or Cloudflare Pages.

• npsh: A collection of one-click scripts that provide simple deployment for API or Dashboard with flexible configuration and management.

Donation

• EVM: 0x2ea4Ea9425BEe897ED74fC5512bd13ABC7100000

• TRX: TCqbhDHoBFKRVwibe4tb7xNjtgnmkJXGR6

• SOL: BwZuvh13BQWhYSh31dEZiy8avqZwMFfdSwfawTiMv7Bw

Sponsorship

A DDoS mitigation solution that works and doesn't over estimate capabilities, since the product speaks for itself.

_{Visit GatewaySentry to learn more.}

License

• Project NodePass is licensed under the BSD 3-Clause License, which applies to the source code only.

• The NodePass name, logo, and official project identity are not covered by the code license and may not be used without explicit authorization.

Disclaimer

This project is provided "as is" without any warranties. Users assume all risks and must comply with local laws for legal use only. Developers are not liable for any direct, indirect, incidental, or consequential damages. Secondary development requires commitment to legal use and self-responsibility for legal compliance. Developers reserve the right to modify software features and this disclaimer at any time. Final interpretation rights belong to developers.

---

© 2026 NodePassProject. All rights reserved.