TunnelMesh documentation

TunnelMesh documentation

TunnelMesh is a self-hosted tunneling platform with a built-in admin console, OIDC single sign-on, TOTP multi-factor authentication, revocable trusted devices, scoped service tokens, RBAC, Agent policy, audit logs, and observability.

Start here

• Quick start
• Architecture overview
• Cluster architecture
• Docker deployment
• Security policy

By component

• Server administration
• Single sign-on and MFA — English guide
• 单点登录与两步验证 — 中文完整参考
• Agent
• Client

Operations

• Configuration
• Observability
• Security hardening (English)
• Troubleshooting
• Schema upgrades

Project context

• Why TunnelMesh needs a control plane
• Comparison with other tunneling models
• Roadmap