TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Ngrok: Secure tunnels to localhost

468 pointsby pvsukale3about 8 years ago

36 comments

Lazareabout 8 years ago
A lot of people seem to be a bit confused about the point of ngrok, why it&#x27;s useful, how much it costs, etc. Let me try and help out. :)<p>For me, the killer feature for ngrok is testing&#x2F;developing webhooks. You install ngrok in your dev environment, start it up, then point the stripe&#x2F;slack&#x2F;whatever webhook your working on at the generated URL.<p>ngrok will 1) proxy that request through to your dev environment 2) log the request 3) log the response 4) let you replay previous requests. It could not be more helpful for developing webhook handlers, and has literally saved me <i>hours</i> of work in the last couple of months alone.<p>Finally, the free tier is all you need for that; it gives you a unique ngrok subdomain which changes every time you start the tunnel and some (generous) usage caps, both of which are fine for this usage.<p>People pointing out the potential security issues are correct, but that&#x27;s an argument to be careful and think about what you&#x27;re doing. Besides, what&#x27;s your proposed alternative? Because most of the obvious ones have equally troubling issues.
评论 #14280010 未加载
评论 #14285909 未加载
评论 #14283556 未加载
评论 #14282345 未加载
评论 #14279468 未加载
tmp98112about 8 years ago
Makes me sad to see all the negativeness towards this service, which clearly works and serves a need some people have.<p>Yes, there are alternatives, but I hate when people jump to dismiss service like this, without fully considering what issues the proposed alternatives have. Obviously it is ok to mention the alternative options, but that can be made in constructive way.<p>Let&#x27;s celebrate the fact that somebody has built and released something and even seems to have a business model to support it. Instead of complaining about 5-20 bucks per month, try to figure out how you could channel some of your corporate multimillion IT budget to this fellow hacker. Wouldn&#x27;t it be great if building and running this kind of small solutions would be actually a viable way of making living?
packetizedabout 8 years ago
Literally the most terrifying service for any security-minded operations-focused person. Wonderful tool, interesting and useful in a dizzying array of aspects - but dear lord, I&#x27;ve had some real horrific moments when users told me that they installed it to allow access to their (private) repos for testing.
评论 #14279522 未加载
评论 #14279650 未加载
inconshreveableabout 8 years ago
Hiya there folks - I&#x27;m the creator of ngrok, happy to answer any questions
评论 #14279474 未加载
评论 #14278894 未加载
评论 #14279347 未加载
评论 #14279180 未加载
评论 #14278864 未加载
评论 #14280502 未加载
评论 #14279542 未加载
评论 #14279077 未加载
评论 #14281805 未加载
评论 #14278868 未加载
评论 #14279740 未加载
评论 #14283373 未加载
评论 #14279396 未加载
评论 #14279106 未加载
yeldarbabout 8 years ago
Happy paying ngrok user here.<p>Love it for developing anything using webhooks and also hybrid mobile apps (I have my app pull the JS from the Dev box I&#x27;m working on via ngrok without having to rebuild the app or deploy the code anywhere).<p>It significantly speeds up my workflow!
评论 #14279064 未加载
评论 #14278945 未加载
评论 #14279377 未加载
评论 #14279065 未加载
jeremejevsabout 8 years ago
Nice tool, but without committing for annual billing (which I don&#x27;t intend to do, not for the first year of usage) it&#x27;s $10 a month. My internet connection, my mobile plan, my Photoshop &amp; Lightroom subscription, a huge collection of music (Spotify), 3K~5K movies and TV shows (Netflix), etc., all cost approximately the same. I mean, sure, $120 a year is pocket change for somebody using Ngrok professionally, but that&#x27;s still super disproportional, compared to, say, monster of a piece of software like Photoshop. I&#x27;d probably subscribe for $2, but otherwise, IMO, frp [0] on a $3 VPS [1] is better value, with the extra benefit of being FOSS and having zero limits.<p>[0] <a href="https:&#x2F;&#x2F;github.com&#x2F;fatedier&#x2F;frp" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;fatedier&#x2F;frp</a><p>[1] <a href="https:&#x2F;&#x2F;www.scaleway.com&#x2F;pricing" rel="nofollow">https:&#x2F;&#x2F;www.scaleway.com&#x2F;pricing</a>
评论 #14279364 未加载
评论 #14279254 未加载
评论 #14279840 未加载
评论 #14280547 未加载
评论 #14279373 未加载
kyborenabout 8 years ago
PSA: if you want to provide remote access to a local service, but don&#x27;t want the potentially-terrifying security implications, use Tor Authenticated Onion Services (AKA &quot;HiddenServiceAuthorizeClient&quot; [0]).<p>On a machine on the LAN, install Tor and set up an authenticated onion service, and point it to the desired endpoint. In order to access the service, clients need a manually-loaded encryption key (and Tor, of course). Without this key, nobody will be able even to <i>discover</i> your endpoint, let alone actually connect to it.<p>[0]: <a href="https:&#x2F;&#x2F;gitweb.torproject.org&#x2F;torspec.git&#x2F;tree&#x2F;rend-spec.txt" rel="nofollow">https:&#x2F;&#x2F;gitweb.torproject.org&#x2F;torspec.git&#x2F;tree&#x2F;rend-spec.txt</a>
评论 #14280070 未加载
yasn77about 8 years ago
I prefer the implementation of <a href="http:&#x2F;&#x2F;localhost.run" rel="nofollow">http:&#x2F;&#x2F;localhost.run</a><p>To me it seems a lot cleaner, simply use SSH rather than download any app
评论 #14279612 未加载
评论 #14279886 未加载
YPCrumbleabout 8 years ago
A fantastic open-source javascript alternative is localtunnel (<a href="https:&#x2F;&#x2F;github.com&#x2F;localtunnel&#x2F;localtunnel" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;localtunnel&#x2F;localtunnel</a>). I&#x27;ve used this more often than ngrok after ngrok became a paid service.
评论 #14281045 未加载
评论 #14280636 未加载
saintfiendsabout 8 years ago
Their 1.x is open source: <a href="https:&#x2F;&#x2F;github.com&#x2F;inconshreveable&#x2F;ngrok" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;inconshreveable&#x2F;ngrok</a><p>This is a similar open source alternative: <a href="https:&#x2F;&#x2F;github.com&#x2F;fatedier&#x2F;frp" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;fatedier&#x2F;frp</a><p>Both written in Go.
bespoke_engnrabout 8 years ago
I see some people arguing that &quot;you should use a dev&#x2F;staging environment with a public IP&quot; instead of having ngrok tunneling traffic directly to your local dev box.<p>When you&#x27;re editing HTML&#x2F;CSS, you don&#x27;t have to run a deploy script before checking how your markup renders. Ngrok gives people writing web services the same convenience when dealing with requests from a 3rd party on the Net.<p>It is the equivalent of saving your HTML&#x2F;CSS source files and instantly seeing the changes when you reload your browser.<p>I just wrote a little proof-of-concept Alexa app that crawls HumbleBundle (&#x27;Bundled Goods&#x27;, very much beta quality at the moment) and ngrok was invaluable for developing it quickly.
pfistaabout 8 years ago
Ngrok is the coolest tool I use on a pretty consistent basis. Developing webhooks locally is usually what I use it for, and the web interface replay capability is amazing. The creator gave a great talk on why he built it and how it progressed over the years: <a href="https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=F_xNOVY96Ng" rel="nofollow">https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=F_xNOVY96Ng</a>
49531about 8 years ago
I&#x27;ve used ngrok for a while now, and I love it. I used it just last night to test out some webrtc stuff I was doing. Was able to get friends from around the world on video chat served from localhost within seconds.<p>It&#x27;s also super handy when building webhooks, you can use the unique URL to test out apis without having to deploy anything. I can&#x27;t rave about it enough.
DAddYEabout 8 years ago
A lot of negativity but I found this tool super useful when developing for Alexa and test out my scripts. Keep it going guys!
xg15about 8 years ago
The title of this submission makes it sound like a selling-fridges-to-eskimos scam product - you need to read quite a bit to find out what&#x27;s it actually about and that it solves (or simplifies) an actual use-case.<p>I think a better comparision is with DynDNS services: It sets up a public host connected to your own machine - but unlike DynDNS, the host doesn&#x27;t point to your machine&#x27;s IP directly. Instead, requests are routed through a proxy&#x2F;tunnel, so your machine can be kept behind a firewall and is <i>only</i> available through the public host.<p>(I figure, the proxy allows for some more neat tricks, such as restricting ports&#x2F;urls&#x2F;etc or holding requests open while your machine changes IPs.)
yannisabout 8 years ago
For a part-time programmer Mechanical Engineer, it is such a gratifying task to use ngrok. I first came across it a couple of years back. Great Project, great development, open sourced and well written in go. <a href="https:&#x2F;&#x2F;github.com&#x2F;inconshreveable&#x2F;ngrok&#x2F;tree&#x2F;master&#x2F;src&#x2F;ngrok" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;inconshreveable&#x2F;ngrok&#x2F;tree&#x2F;master&#x2F;src&#x2F;ngr...</a><p>It takes two seconds to deploy an application in the evening from my kitchen table, check it also on my mobile and the next day access it from work also and show it to co-workers.<p>Call it &quot;usability&quot; for Engineers!
leesalminenabout 8 years ago
I&#x27;ve been on the free tier for a while and have been meaning to upgrade to show support for such a great service. Seeing this post this morning reminded me. Upgraded for the year!
nbrempelabout 8 years ago
Ngrok is one of the most valuable development tools in my toolbox.
评论 #14281688 未加载
samchengabout 8 years ago
It&#x27;s possible to roll your own ngrok clone via SSH tunnels, a publicly-available server somewhere, and autossh. This is basically ssh-tunnel-as-a-service.
评论 #14278923 未加载
ausjkeabout 8 years ago
Never used it, what&#x27;s the difference between ngrok and using DMZ with port-forwarding? are they the same thing? What&#x27;s the technical advantage other than it is easy to use? I can port-forwarding easily on my router to expose whatever port to the public, why do I need ngrok?<p>With a DDNS + Port-forwarding you can easily have what Ngrok provides? or am I missing something?
评论 #14280314 未加载
stevemk14ebrabout 8 years ago
3 important questions:<p>1) My university blocks LogMeInHamachi which is the main tool i&#x27;ve tried to get around hosting behind a NAT. Will this likely be blocked too, or is it not possible to tell without trying<p>2) Is there any costs associated with this. Do i ever need to pay<p>3) Does the person connecting to my server also require a special client or does this appear to them as any standard connection would.
评论 #14278917 未加载
评论 #14278948 未加载
vhost-about 8 years ago
I really like ngrok. I use it a lot. I just really dislike how the TCP tunnels work. With HTTP you get a unique subdomain which makes it harder for people to just scan and connect. With TCP, it&#x27;s always 0.tcp.ngrok.io, so you can just scan that domain and connect to anything that&#x27;s open.
评论 #14279087 未加载
roylezabout 8 years ago
I used to use Ngrok, then I discovered ultrahook which gives me a persistent endpoint, for free.
评论 #14278953 未加载
JohnnyConatusabout 8 years ago
Love ngrok. The ngrok npm package makes it easy to put into a local dev startup, too.
joantuneabout 8 years ago
I have been using this for quite a while and it&#x27;s really useful. Even though I have VPSs available, where I could make a SSH tunnel, this is simply way more convenient, so I end up using ngrok a lot for development
sandGorgonabout 8 years ago
I&#x27;m a happy paid user. If I had one request, it is for a different pricing and better management for groups of users.<p>People like me would like to buy 5-10 licenses and manage them centrally.<p>Define shared endpoints and individual endpoints,etc
nejdetckenobiabout 8 years ago
long time ngrok user here. used several times to show my prototypes to the others. It&#x27;s simpler than deploying on heroku (or anywhere actually), and is without restrictions ofc because you use your own hw.
stefanhuberabout 8 years ago
Use a hidden service! I manage many intranet servers over tor. You have no problems with nat or firewalls and it is free!<p>Ok it is slower, but for many things like ssh it&#x27;s great...
adamsonabout 8 years ago
I&#x27;ve been using this for web server testing since 2012. It&#x27;s probably the paid tool that&#x27;s given me the most bang for my buck in terms of hours saved
andkonabout 8 years ago
I love this product page so much! Great illustrations, a wonderful balance of levity and clarity about ngrok&#x27;s purpose.
andreiwabout 8 years ago
Cool. Where&#x27;s the ARM64 linux build? That&#x27;s more important than the legacy 32-bit ARM builds (i.e. ARM servers)
PacketPaulabout 8 years ago
How much is the paid service? You could roll your own for around $15&#x2F;month using an Amazon EC2 T2 micro instance.
评论 #14279247 未加载
评论 #14280089 未加载
prodicusabout 8 years ago
Awesome! OT but can anyone suggest some free tools using which I can make similar diagrams. They look pretty cool :)
jonthepirateabout 8 years ago
docker run -ti -e &#x27;PROXY_TO_ADDR=<a href="http:&#x2F;&#x2F;www.example.com&#x2F;&#x27;" rel="nofollow">http:&#x2F;&#x2F;www.example.com&#x2F;&#x27;</a> jonthepirate&#x2F;ngrok:latest<p>^ that expression will expose a local docker powered web server, assuming www.example.com is the local dns name on your docker network. Enjoy.
stummjrabout 8 years ago
Ngrok is just awesome! A huge shout out to the developers!
zAy0LfpBZLC8mACabout 8 years ago
Yet another needless cost of not switching to IPv6 already ...
评论 #14280138 未加载