rstream — Cybersecurity

What is rstream?

rstream is a secure tunneling platform that lets you expose local or private services to the internet or internal networks without opening inbound ports. It uses lightweight agents that maintain outbound-only connections, while identity, access policy, and observability are handled at the edge. This means you can make development servers, internal tools, or production workloads reachable securely, without the complexity of a VPN.

What problem does it solve?

Traditional network exposure often requires VPNs or risky port forwarding, which can be complex and insecure. rstream eliminates inbound exposure by keeping your upstream services truly private. It enforces identity-based access at the edge, so requests are authenticated and authorized before they reach your services. This reduces attack surface and simplifies secure connectivity for distributed teams and remote access.

Who is it for?

rstream is ideal for developers, DevOps teams, and organizations that need secure remote access to internal tools, fleet connectivity, or production services. It works for both HTTP and non-HTTP workloads, supporting protocols like TCP, TLS, DTLS, and QUIC. It is particularly useful for zero-trust networking scenarios, local development, and exposing APIs or databases to authorized clients without opening ports.

Real use cases

Common uses include exposing a local webhook endpoint during development, providing secure SSH access to internal servers, sharing a staging environment with a client, or connecting devices in the field to a central control plane. With its outbound-only agent model, rstream fits into existing infrastructure without changing your stack.

• Published Endpoints — Expose HTTP and non-HTTP services globally without opening inbound ports; agents maintain outbound tunnels.
• Private Tunnels — Connect to services via client-only tunnels addressed by name, ideal for internal access and fleet connectivity.
• Identity-Based Edge Policy — Enforce identity and access control at the entrypoint using rstream Auth, scoped tokens, mTLS, and IP/Geo restrictions.
• Multi-Protocol Support — Use one model for HTTP/1.1, HTTP/2, HTTP/3, TCP, TLS, DTLS, and QUIC, covering diverse workloads.
• Global and Regional Routing — Choose a global entrypoint across regions or lock to a fixed region for predictable latency and compliance.
• Built-in Observability — Connection logs and metrics provide visibility into edge decisions, throughput, latency, and errors.

rstream pricing: from $49/mo.

Basic — Free

Includes HTTPS tunnels, WebSocket support, registered WebTTY servers, 24-hour WebTTY logs, 24-hour connection logs, token-protected access, fine-grained access tokens, 5 GB bandwidth per month, and 2 simultaneous tunnels.

Pro — $49/month (limited launch offer, normally $99/month)

Everything in Basic, plus global and regional routing, private tunnels, 30-day WebTTY and connection logs, TLS/QUIC/DTLS endpoints, published TCP tunnels and reserved addresses, custom domains, rstream Auth (interactive HTTP auth), mTLS, tunnel access, challenge mode (HTTP), IP and Geo access policies, project webhooks, analytics, email support, 200 GB bandwidth per month, and 50 simultaneous tunnels. Limited offer locked forever for early users.

Enterprise — Custom

Everything in Pro, plus dedicated runtime clusters, optional dedicated or on-premises control plane, workspace-level billing, unlimited enterprise projects, unlimited bandwidth and tunnels, Workspace Protection (trusted browsers and devices), Workspace Recovery Kit, activity audit logs and exports, server source code audit or escrow, and dedicated support. Contact sales for pricing.

Integrator Edition — Custom

Commercial partner edition for integrators, MSPs, and infrastructure platforms. Includes source access under contract, customer environment deployment rights, partner-operated runtime infrastructure, white-label and private-label options, product adaptation rights, secure tunnels, WebTTY, policy, logs, and APIs, and partner enablement. Contact sales.

Self-Hosted — Free

Run the rstream Engine Community Edition in your own infrastructure. Includes standalone engine, direct JWT agent authentication, static TLS certificate configuration, Prometheus metrics, but no hosted dashboard or managed support.

Find the right tool for you with our AI advisor →