orbien-org/orbien

NAT traversal built with Rust and Tokio

A lightweight, high-performance, and secure reverse proxy with a binary size of around 5MB. Securely expose local services behind a firewall to the public internet.

Features

• High performance: high performance, packet-loss resilient, high throughput, no GC pauses, and low memory usage
• Tunnel protocols: TCP, UDP, HTTP, HTTPS,SOCKS5 and more
• Transport protocols: TCP, KCP, WebSocket, QUIC, with TCP multiplexing support
• Security: Token-based tunnel authentication, TLS and mTLS encryption; HTTPS supports transparent forwarding and client-side TLS termination
• Cross-platform: Windows, Linux, macOS, FreeBSD, and more
• Operations: lightweight server-side Web admin UI and cross-platform native desktop client; supports config hot-reload and ACME automatic certificate issuance

Quick Start

Download the binary archive for your platform and extract it.

Server

# orbien-server.toml
listen = "0.0.0.0:9527"

./orbien-server -c orbien-server.toml

Client

# orbien.toml
server = "127.0.0.1:9527"

[[tunnels]]
name = "ssh"
protocol = "tcp"
service = "127.0.0.1:22"
remotePort = 9000

./orbien -c orbien.toml

If you prefer not to use the CLI, try the Orbien-Desktop desktop native GUI client.

Benchmark

Env	Details
Platform	macOS 26.2 · Darwin 25.2.0 · arm64
Hardware	Apple M2 (8 cores) · 16 GB
Details	benchmarks

To rule out various sources of interference, these benchmarks were run on local loopback. Compared with frp, Orbien's clearest advantage is lower and steadier memory usage under high concurrency.

License

• Apache License 2.0

Contact

• Issues: issues
• Community: discord