Expose any service.
Secure public HTTPS.
Global delivery.

Anycast Connect creates a secure reverse tunnel from your local machine to a public URL on our global anycast network. No firewall changes. TLS included.

How it works

1

Install the CLI and create a tunnel

curl -fsSL https://agents.anycast.com/install.sh | sh
2

Start the tunnel

any tunnel --token agt_xxx --port 8080 --subdomain myapp
3

Your service is live

Available at myapp--you.fwd.anycast.com with TLS on our global anycast network.

Features

Public HTTPS instantly

Get a secure public URL for any local port. TLS termination at the edge with a wildcard certificate.

IP-based access control

Restrict tunnel access to VPN ranges or specific CIDRs. Allow/deny rules evaluated at the edge.

Global delivery

Tunnels terminate at the nearest of 4+ edge locations via BGP anycast routing. Lowest latency for your users.

Zero config

One command to create a tunnel. No firewall changes, no port forwarding, no cloud hosting required.

Use cases

Expose a local AI service for external access
Share a dev environment with teammates on VPN
Connect a local webhook receiver to production
Run an agent that serves an API publicly