Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
localtunnel
Advanced tools
The localtunnel npm package allows you to expose your localhost to the world for easy testing and sharing. It creates a publicly accessible URL that proxies all requests to your locally running webserver.
Expose local server to the internet
This feature allows you to expose a local server running on a specific port to the internet by creating a tunnel. The code sample demonstrates how to create a tunnel to a local server running on port 3000 and log the public URL to the console.
const localtunnel = require('localtunnel');
(async () => {
const tunnel = await localtunnel({ port: 3000 });
// the assigned public url for your tunnel
// i.e. https://abcdefgjhij.localtunnel.me
console.log(tunnel.url);
tunnel.on('close', () => {
// tunnels are closed
});
})();
Specify subdomain
This feature allows you to request a specific subdomain for your tunnel, making the URL easier to remember and share. The code sample shows how to request a tunnel with a custom subdomain.
const localtunnel = require('localtunnel');
(async () => {
const tunnel = await localtunnel({ port: 3000, subdomain: 'mycustomsubdomain' });
console.log(tunnel.url);
})();
Close the tunnel
This feature allows you to programmatically close the tunnel when you are done with it. The code sample demonstrates how to close the tunnel.
const localtunnel = require('localtunnel');
(async () => {
const tunnel = await localtunnel({ port: 3000 });
console.log(tunnel.url);
// When you are done with the tunnel
tunnel.close();
})();
Ngrok is a popular tool that provides similar functionality to localtunnel. It creates secure tunnels to localhost and offers features like custom domains, reserved subdomains, and encrypted tunnels. Ngrok also has a paid version with additional features.
Serveo is an SSH server just for remote port forwarding. It works using existing SSH functionality, so there's no need to install a client. However, as of my knowledge cutoff in 2023, Serveo has been temporarily disabled due to phishing abuse.
localtunnel exposes your localhost to the world for easy testing and sharing! No need to mess with DNS or deploy just to have others test out your changes.
Great for working with browser testing tools like browserling or external api callback services like twilio which require a public url for callbacks.
npx localtunnel --port 8000
npm install -g localtunnel
yarn add localtunnel
When localtunnel is installed globally, just use the lt
command to start the tunnel.
lt --port 8000
Thats it! It will connect to the tunnel server, setup the tunnel, and tell you what url to use for your testing. This url will remain active for the duration of your session; so feel free to share it with others for happy fun time!
You can restart your local server all you want, lt
is smart enough to detect this and reconnect once it is back.
Below are some common arguments. See lt --help
for additional arguments
--subdomain
request a named subdomain on the localtunnel server (default is random characters)--local-host
proxy to a hostname other than localhostYou may also specify arguments via env variables. E.x.
PORT=3000 lt
The localtunnel client is also usable through an API (for test integration, automation, etc)
Creates a new localtunnel to the specified local port
. Will return a Promise that resolves once you have been assigned a public localtunnel url. options
can be used to request a specific subdomain
. A callback
function can be passed, in which case it won't return a Promise. This exists for backwards compatibility with the old Node-style callback API. You may also pass a single options object with port
as a property.
const localtunnel = require('localtunnel');
(async () => {
const tunnel = await localtunnel({ port: 3000 });
// the assigned public url for your tunnel
// i.e. https://abcdefgjhij.localtunnel.me
tunnel.url;
tunnel.on('close', () => {
// tunnels are closed
});
})();
port
(number) [required] The local port number to expose through localtunnel.subdomain
(string) Request a specific subdomain on the proxy server. Note You may not actually receive this name depending on availability.host
(string) URL for the upstream proxy server. Defaults to https://localtunnel.me
.local_host
(string) Proxy to this hostname instead of localhost
. This will also cause the Host
header to be re-written to this value in proxied requests.local_https
(boolean) Enable tunneling to local HTTPS server.local_cert
(string) Path to certificate PEM file for local HTTPS server.local_key
(string) Path to certificate key file for local HTTPS server.local_ca
(string) Path to certificate authority file for self-signed certificates.allow_invalid_cert
(boolean) Disable certificate checks for your local HTTPS server (ignore cert/key/ca options).Refer to tls.createSecureContext for details on the certificate options.
The tunnel
instance returned to your callback emits the following events
event | args | description |
---|---|---|
request | info | fires when a request is processed by the tunnel, contains method and path fields |
error | err | fires when an error happens on the tunnel |
close | fires when the tunnel has closed |
The tunnel
instance has the following methods
method | args | description |
---|---|---|
close | close the tunnel |
Clients in other languages
go gotunnelme
C#/.NET localtunnel-client
See localtunnel/server for details on the server that powers localtunnel.
MIT
FAQs
Expose localhost to the world
The npm package localtunnel receives a total of 0 weekly downloads. As such, localtunnel popularity was classified as not popular.
We found that localtunnel demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.