PRIVATE CONNECTIONS. CLEAR CONTROL.BEYOND VPN
← All guides
FEATURE GUIDE

Share a local service with port forwarding

Create a public endpoint for a service on your connected computer, with explicit approval and a controllable lifetime.

What you can share

Port forwarding is available with subscriptions and Pay as you go on supported direct Normal routes. Both TCP and UDP are supported. Forwarded upload and download traffic use the connection owner's PAYG balance. Bypass and multihop routes do not provide consumer port forwarding.

Create a request

Start the service first and check that it accepts connections on 127.0.0.1 at the chosen port. A service listening only on IPv6 localhost is insufficient.

  1. Connect the consumer app using an eligible direct Normal route.
  2. Open Settings → Port forwarding, or Devices → Port forwarding on the website.
  3. Choose TCP, UDP or both, enter the local service port, and select a duration.
  4. Submit the request. Accept it in the client when prompted, or use the client's configured approval policy.
  5. Wait for an active mapping and copy its public endpoint. A submitted or pending request is not ready to use.

Use the assigned endpoint

The server assigns an available random public port from 49152–65535. It can differ from your local port and may change after reconnecting. For example, a local service on port 25565 might receive 198.51.100.20:52345. An IPv6 endpoint uses brackets, such as [2001:db8::20]:52345. These are illustrative addresses; share the endpoint actually displayed.

Duration and access

No time limit removes the selected duration timer. Disconnecting, stopping sharing, quota exhaustion or loss of authorization still ends forwarding. Reserved and occupied ports remain unavailable. Keep the local service running and protect it with its own authentication.