v0.4.2 · self-hosted · single-user · MIT

Your local services,
reachable on https://

A self-hosted gateway that exposes local Postgres databases and HTTP APIs through a secure tunnel, with resource-scoped keys and per-request logs.

Open gatewayView on GitHub
$ curl -fsSL get.locallink.dev | sh·no port forwarding·no cloud account
gateway.kestrel.io
tunnel · 14m 22s uptime

Host agentmacbook-pro-m4

$locallink up
→connecting togateway.kestrel.io…
✓tunnel established// WSS, AES-256-GCM
$locallink exposepostgres-main--port5432
✓registeredpostgres-main// 2 keys
$locallink exposeinternal-api--urlhttp://localhost:3000
✓registeredinternal-api// 1 key
$locallink status
2 resources·3 keys·healthy
$

Live requestslast 6 · auto

14:32:18POST/r/pgmain/queryll_pk_8h2j200
14:32:17POST/r/internal-api/jobsll_pk_8h2j200
14:32:15GET/r/internal-api/healthll_pk_8h2j200
14:32:14POST/r/admin-api/usersll_sk_4xv9200
14:32:13POST/r/pgmain/queryll_ci_n0vR401
14:32:12POST/r/pgmain/queryll_pk_8h2j200
tunnel liverequests/24h12,163p50 latency28msresources2→gateway.kestrel.io

// What it does

A gateway, not a tunnel.

Ngrok gives you a URL. LocalLink gives you a URL plus the access control and observability you'd build around it anyway.

Secure tunneling

01

Host agent opens an outbound encrypted WebSocket to your gateway. No port forwarding, no firewall changes, no public IP needed.

localhost
WSS · AES-256
gateway

Resource management

02

Register a Postgres connection string or HTTP service by name. Gateway URLs stay stable across host restarts.

postgres-maindatabase
internal-apihttp
admin-apihttp

Scoped API keys

03

Issue keys scoped to specific resources. Rotate or revoke them from the dashboard when access changes.

productionll_pk_8h2jaQ7mB4nXc1vR••••pgmain
ci-runnerll_ci_n0vR8tKwL2sP3aZ••••revoked

Request observability

04

Every proxied request recorded: timestamp, method, path, status, latency, key. Filter, tail, export to your logging stack.

32:18POST/r/pgmain/query42ms
32:17POST/r/internal-api/jobs184ms
32:13POST/r/pgmain/query401
32:07POST/r/admin-api/import500

// 60 seconds

Get the agent running.

Three commands. The gateway runs on a $5 VPS (or your homelab); the agent runs on your laptop.

01.Install the agent

Single binary, Mac / Linux / WSL.

$curl -fsSL get.locallink.dev | sh

Installs locallink to /usr/local/bin.

02.Open the tunnel

Authenticate once, stays connected.

$locallink login gateway.kestrel.io

Opens an outbound WebSocket. No firewall rules to change.

03.Expose a resource

Name it, point at a port, you're live.

$locallink expose postgres-dev --port 5432

Reachable at /r/postgres-dev with an auto-generated key.

Already running an instance?

Open the gateway dashboard to manage resources, rotate keys, and tail the request log.

Read the docsOpen gateway