Skip to content

Latest commit

 

History

2 Commits

Folders and files

NameName
Last commit message
Last commit date
 
 

Repository files navigation

trqsh — QUIC-first tunnels to localhost

release npm PyPI license downloads

A public HTTPS URL for anything on your machine, in one command. QUIC-first · HTTP · TCP · UDP · real TLS · a proper interactive console · fully open source.


This repo hosts the release artifacts for the trqsh CLI — prebuilt binaries, checksums, and packages, published by GoReleaser straight from CI. The source lives in uzcreator/trqsh; this repo stays a clean, download-only release list with nothing else mixed in.

Install

curl -fsSL https://trqsh.uz/install.sh | sh
Channel Command
Shell (macOS/Linux) curl -fsSL https://trqsh.uz/install.sh | sh
npm npm i -g @trqsh-uz/trqsh
PyPI pip install trqsh
Homebrew brew install uzcreator/tap/trqsh
Scoop (Windows) scoop install trqsh
winget (Windows) winget install trqsh.trqsh
apt / dnf download the .deb/.rpm from Releases
Manual grab your platform's archive from Releases
trqsh login        # sign in through your browser
trqsh http 3000    # → a public HTTPS URL for localhost:3000

trqsh http 3000 opening a live tunnel

Why trqsh

  • QUIC-first, TCP fallback — built on HTTP/3's transport from the ground up, not HTTP/1.1 wearing a marketing label; falls back automatically where UDP is blocked.
  • Every protocolhttp, tcp, and udp tunnels, not just HTTP.
  • A real console, not a log spinner/pin traffic, /pin status, and friends keep live panels on screen while you keep working, with command history, autocomplete, and a scrolling transcript.
  • Real TLS — Let's Encrypt via CertMagic, not a self-signed cert with a browser warning.
  • Background tunnels (-d) that outlive your terminal, reserved subdomains, custom domains, and a live request inspector.
  • Signed, verifiable releases — every download is checksummed and the checksum file itself is cosign-signed in CI (see Security below).
  • A native desktop app too, for anyone who'd rather click than type (releases separately from uzcreator/trqsh under desktop-v* tags).
  • Fully open source (Apache-2.0) — read every line, self-host the whole edge + control plane instead of trusting a black box.

The console

Bare trqsh (or trqsh http 3000) opens an interactive, slash-command console — type / to browse everything it can do, pin live panels above the prompt, and keep an eye on traffic without leaving the terminal:

the trqsh console: welcome banner, an active tunnel, and pinned traffic + status panels

Commands

Command Does
/http <port> Expose a local HTTP port
/tcp <port> / /udp <port> Expose a local TCP/UDP port
/start Start every tunnel from your config file at once
/ls List running tunnels
/open <id> Open a tunnel's public URL in your browser
/qr [id] Show a QR code for a tunnel URL — open it on your phone
/copy [id] Copy a tunnel URL to the clipboard
/requests Show recently captured requests
/pin <traffic|tunnels|status> / /unpin Keep (or remove) a live panel on screen
/stop <id|all> / /down Stop a tunnel, or the whole daemon
/subdomains [reserve|release] Manage reserved subdomains
/domains [add|verify] Manage custom domains
/whoami / /login [key] / /logout Account, plan, usage; sign in via browser
/config Show configuration
/update [check] Check for / install a newer trqsh in place
/uninstall Remove trqsh's local data
/version / /clear / /help / /quit The usual suspects

Run /help inside the console any time for the current full list.

Download URLs

Every asset follows the same pattern, so you can script around it directly if none of the wrappers above fit:

https://github.com/uzcreator/trqshcli/releases/download/v<version>/trqsh_<version>_<os>_<arch>.<ext>

<os>darwin|linux|windows, <arch>amd64|arm64, <ext> = zip on Windows else tar.gz. A checksums.txt (SHA-256) sits beside every release.

Security

Every release ships a checksums.txt that every install wrapper verifies before it ever execs the binary. The checksum file itself is keyless-signed with cosign via GitHub Actions' OIDC token at build time — no signing key exists to leak or to trust blindly. Verify a download came from this repo's CI, not just that it matches whatever checksums.txt claims:

cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-identity-regexp 'https://github.com/uzcreator/trqsh/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  checksums.txt

Links

Website · Source & desktop app · npm · PyPI · Issues

Author

trqsh is created and maintained by Otabek Hamroqulov — GitHub @Hamroqulovv. Licensed Apache-2.0.

About

No description, website, or topics provided.

Resources

Stars

0 stars

Watchers

0 watching

Forks

Releases

Packages

Contributors