antoniomika/sish

sish is a tool that lets you expose a service running on your local computer to the public internet using SSH, the same protocol used for secure remote server access. The idea is similar to commercial tunneling services: you run something on your own machine, and sish gives you a publicly accessible URL or port without you needing to configure your router or open firewall rules. The difference is that sish is open source and designed to be self-hosted on your own server, so you are not dependent on a third-party service. Connecting requires no custom software. You use the standard ssh command that ships with every Mac, Linux, and most Windows systems. A single command like "ssh -R 80:localhost:8080 yourserver.com" is enough to create a public HTTPS address pointing at your local app. You can also expose raw TCP services, not just web apps, which makes it useful for things like sharing a local SSH server, a database port, or any other network service. For operators running sish for multiple users, the tool includes access control options: connections can be restricted by SSH key, random ports can be enforced to prevent conflicts, and private TCP aliases can be created that are only reachable through authenticated SSH connections rather than being publicly exposed. It also supports TLS routing by SNI, which means it can forward encrypted traffic to different backends without decrypting it. sish is written in Go and is distributed as Docker images and pre-built binaries. The self-hosting setup in the README uses Docker and requires a domain name pointed at the server. A managed version is available at tuns.sh for users who want to try the tool without running their own server. Documentation covering forwarding types, CLI options, and an FAQ is published at docs.ssi.sh.