Zero-configuration reverse SSH tunnels for your entire fleet. No port forwarding, no VPN to plan, no third-party binaries on your hardware. Just the tools already on your machines, controlled through one API.
From a few customer servers to thousands of edge devices, sshreach.me removes the static-IP, port-forwarding and VPN headaches that block scaling.
Provision 5,000 devices per dedicated server. Auto-register on first boot via API, push updates to the whole fleet, then close every tunnel.
Maintain customer Linux boxes on dynamic IPs without DDNS or open ports. Onboard a new client in minutes — not a network migration.
Expose a local webhook to Stripe, PayPal, GitHub or Slack with one tunnel. Share staging environments with clients in seconds.
Reach Windows PCs (VNC) and Linux servers in small offices on ADSL or consumer ISP connections. No static IP required.
Built-in dropbear support for low-memory targets. Raspberry Pi, OpenWrt, custom embedded distros — if it has SSH, it works.
Open tunnels on demand from your CI/CD or cron, run your script, close the tunnel. Idle tunnels auto-close — no permanent exposure.
Your server creates the outbound tunnel — we just provide the endpoint and the control plane. No inbound ports, no firewall rules to negotiate with the client's IT.
Sign up, pick a plan based on client count and bandwidth.
Bring your own keypair or generate one in our dashboard. Keys never leave you.
A plain Python script. Auditable, replaceable, no compiled binaries.
systemd, init.d, Windows service — pick your poison.
Web UI for humans. REST API for automation across thousands of devices.
Forward port 22, VNC, HTTP, or any port on paid plans. Tunnel auto-closes on idle.
Tunnels use the SSH keypair you control. Even if a forwarding server were compromised, traffic would be opaque.
Create clients, open/close tunnels, list devices, download config — all scriptable. Unlimited calls on paid plans.
Dedicated plans support source-IP restrictions on top of key auth. Only your ops network can reach the tunnel endpoints.
Forwarding endpoints in California, Texas, Ontario, Newark, England, Germany, India, Singapore and Japan.
The client is a plain Python script — read it, fork it, write your own. No proprietary binaries on your hardware.
Tunnels collapse automatically when not in use — nothing exposed longer than it has to be. Smaller attack surface, lower spend.
All paid plans include team access. Hand-off ops without sharing passwords or root keys.
Windows 7 – 11, macOS, RHEL, Ubuntu, Debian, Fedora, Arch, openSUSE, Raspbian, OpenWrt — if it ships SSH, it works.
Start on a shared forwarding server. Graduate to a dedicated server when you outgrow it — same client script, same API.
Also available: extended €1/mo trial · 20-client (€10) · 40-client (€20) · custom plans up to 250 clients on shared
Get a tunnel up in five minutes, or speak to us about a dedicated forwarding server for your fleet. No long contract, no setup call required.