LRO

LRO (Link for Remote Operations) connects two machines that sit behind NAT or a firewall, so you can reach a service on a remote machine as if it were running locally. You install a lightweight agent on each side; both agents connect outbound to the LRO relay, so no inbound ports, port forwarding or router changes are required on either end.

Each agent runs in one of three roles: client - the remote network where the service lives; support - the machine you sit at, where a local listener is opened; or dual, both at once. Once a tunnel is up you point your normal tools at a local port: ssh, an RDP or VNC viewer, a database client, a browser for a router, NAS or IoT web panel, or USB-over-IP for a remote device.

Tunnel traffic is end-to-end encrypted between the two agents with per-tunnel keys, so the relay only ever moves ciphertext it cannot read. Encryption is always on and cannot be turned off. Agents authenticate to the server with a Noise XK handshake and can be revoked or re-keyed per device.

Agents run on Linux, Windows, macOS and Android. There is also an Android SSH terminal with the agent built in, so a phone can open a tunnel and connect to it in one app. Teams and organisations get shared endpoints, per-user permissions and access control, plus live tunnel and traffic monitoring.

Pricing is a low per-agent subscription plus metered traffic, so agents that sit idle cost close to nothing. New accounts start with a free balance, which is enough to install both agents and run a first tunnel before paying.