Orbien

What it is

Orbien is a reverse proxy and NAT traversal tool written in Rust with Tokio, shipped as a binary of about 5MB. It has a server (orbien-server) and a client (orbien). It also has a native desktop GUI client, Orbien-Desktop, and a lightweight server-side web admin UI. It runs on Windows, Linux, macOS and FreeBSD.

How it works

The client connects out to the server and registers tunnels. The server then opens a public port for each tunnel and forwards traffic back to the internal service. The page lists TCP, UDP, HTTP, HTTPS and SOCKS5 tunnel types. Transports are TCP (with multiplexing), KCP, WebSocket and QUIC. For HTTPS it supports transparent forwarding or client-side TLS termination. The server supports config hot-reload and ACME automatic certificate issuance.

What to do

The page gives a minimal setup. Server config:

# orbien-server.toml
listen = "0.0.0.0:9527"

./orbien-server -c orbien-server.toml

Client config, which exposes a local SSH daemon on remote port 9000:

# orbien.toml
server = "127.0.0.1:9527"
[[tunnels]]
name = "ssh"
protocol = "tcp"
service = "127.0.0.1:22"
remotePort = 9000

./orbien -c orbien.toml

Caveats

• The quickstart configs show no token and no TLS or mTLS settings, although the page says token authentication and TLS/mTLS are supported. The page does not show how to configure them here, so a copy of the example gives an unauthenticated listener on 0.0.0.0:9527.
• The only comparison with frp is a claim of lower and steadier memory use under high concurrency. It was measured on local loopback, and the page gives no figures, versions or methodology.
• The page does not mention audit status, a release version or a security track record.