StartTunnel

A self-hosted WireGuard VPN optimized for creating VLANs and reverse tunneling to personal servers.

Think of it as a “virtual router in the cloud.” Use it for private remote access to self-hosted services, or to expose services to the public Internet without revealing your server’s IP address.

• Clearnet hosting like Cloudflare Tunnels, but you control the server
• Private access like Tailscale, but fully self-hosted
• Dead simple — one command to install, manage everything from the CLI or web UI
• Open source — audit it, fork it, own it

Guides

• Installing — Set up StartTunnel on a VPS
• Subnets — Create isolated VLANs
• Devices — Add servers, phones, and laptops to a subnet
• Port Forwarding — Expose ports on your VPS’s public IP
• Updating / Uninstalling — Update to the latest version or decommission your VPS
• CLI Reference — Manage StartTunnel from the command line

Learn More

• How StartTunnel Works — Architecture deep-dive, comparison to Cloudflare and Tailscale, security model
• Source Code — StartTunnel lives in the StartOS monorepo
• Report Bugs — Open an issue on GitHub