orbien

NAT traversal built with Rust and Tokio

A lightweight, high-performance, and secure intranet penetration tool with a binary size of around 5MB.

Features

• High performance: high performance, packet-loss resilient, high throughput, no GC pauses, and low memory usage
• Tunnel protocols: TCP, UDP, HTTP, HTTPS,SOCKS5 and more
• Transport protocols: TCP, KCP, WebSocket, QUIC, with TCP multiplexing support
• Security: Token-based tunnel authentication, TLS and mTLS encryption; HTTPS supports transparent forwarding and client-side TLS termination
• Cross-platform: Windows, Linux, macOS, FreeBSD, and more
• Operations: lightweight Web admin UI and cross-platform desktop client for easy configuration and monitoring

Quick Start

Download the binary archive for your platform and extract it.

Server

# orbien-server.toml
listen = "0.0.0.0:9527"

./orbien-server -c orbien-server.toml

Client

# orbien.toml
server = "127.0.0.1:9527"

[[tunnels]]
name = "ssh"
protocol = "tcp"
service = "127.0.0.1:22"
remotePort = 9000

./orbien -c orbien.toml

If you prefer not to use the CLI, try the Orbien-Desktop desktop native GUI client.

Benchmark

To rule out various sources of interference, these benchmarks were run on local loopback. Compared with frp, Orbien's clearest advantage is lower and steadier memory usage under high concurrency.

License

• Apache License 2.0

Contact

• Issues: issues
• Community: discord