Repository files navigation

A program to expose UDP services running behind NAT to the internet via a secure tunnel. I created this so I could expose a Minecraft server when I couldn't port forward.

To start, generate a configuration file template:

ratnat config-gen<path>

# Generated keysecret-key=000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f# The ip of the ratnat serverserver-ip=# The port used by the ratnat tunneltunnel-port=# The port of the internal service running behind NATinternal-port=# The port to expose the service on# Users can connect to server-ip:external-portexternal-port=

The completed configuration file needs to be copied to both the client (machine running behind the NAT) and the server (machine with the public IP).

ratnat client<config-file>

ratnat server<config-file>

The client and tunnel are mutually authenticated using a shared secret key. All traffic across the tunnel is encypted with a session key using ChaCha20-Poly1305.