Features

Core

TCP & HTTP Tunnel Relay

Expose any local service — web apps, APIs, databases, game servers — through a secure tunnel with automatic subdomain routing. Supports both TCP (raw sockets, any protocol) and HTTP (with header injection, host rewriting, and WebSocket passthrough).

Automatic subdomain URLs: workspace-tunnel.interveon.com
TLS termination via your reverse proxy (NGINX, Cloudflare, Caddy)
Auto-reconnect with exponential backoff
Per-tunnel access control: public/private toggles, IP whitelists, password protection

File Management

Full-Featured File Manager

Browse, upload, download, preview, and search files on any connected machine through an intuitive browser-based file manager. No FTP, no SCP, no command line needed.

Streaming transfers of any file size with automatic resume on connection drops
File preview: images, video, audio, and text files with encoding detection
Drag & drop upload, folder upload, multi-select with bulk operations
ZIP download for multiple files with auto-resume support
File search across the remote filesystem
Public share links with expiry and download tracking

Remote Access

Browser-Based Terminal

Open a full interactive shell session on any connected machine. Powered by xterm.js with PTY support — run vim, top, htop, and any terminal application as if you were sitting at the machine.

Full PTY with colors, cursor movement, and resize
Cross-platform: macOS (zsh), Linux (bash), Windows (PowerShell)
Graceful fallback when native PTY bindings aren't available

Remote Access

Remote Desktop

View and control any connected machine's screen in real time. WebRTC peer-to-peer video on WiFi and LAN, with automatic HTTP relay fallback for mobile 5G and VPN connections. No client install needed for the viewer.

Low-latency screen capture with VP8 encoding at up to 15fps
Full mouse control: movement, left/right/middle click, scroll wheel
Keyboard forwarding with modifier keys (Ctrl, Shift, Alt)
Quality presets (auto, low, medium, high) with live switching
Multi-viewer: multiple users watch the same desktop simultaneously with one shared ffmpeg capture
Three control modes per tunnel: Shared (all control), View Only (one controller), Takeover (one controller, others can take over)
Works on macOS, Windows, and Linux
Automatic fallback: P2P → HTTP relay — works on any network
Peer-to-peer on WiFi/LAN — video never touches the server

Developer Tools

Request Inspector

See every HTTP request flowing through your tunnels in real time. Like a built-in network tab for your tunnel traffic. Filter by tunnel, method, or status code. Click any request for full headers and timing details.

Real-time request table with method, path, status, duration, size, IP
Color-coded methods and status codes
Filter by method (GET/POST/PUT/DELETE) and status class (2xx/3xx/4xx/5xx)
Detailed view with request and response headers

Analytics

Traffic Analytics & Monitoring

Understand your tunnel traffic with per-tunnel analytics. Request volume over time, bandwidth usage, response time percentiles, status code distribution, top paths, and top IPs.

Response time percentiles: average, p50, p95, p99
Status code distribution: 2xx, 3xx, 4xx, 5xx counts
Per-tunnel or workspace-wide filtering with date range selection
Bandwidth monitoring with daily breakdown charts

Security

Access Control & API Keys

Protect your tunnels and automate your workflows with comprehensive security controls.

Per-tunnel IP whitelist and blacklist
Password-protect any tunnel (HTTP Basic Auth)
API keys for programmatic access (Authorization: Bearer ivn_...)
Rate limiting per tunnel (requests per minute) with 429 responses
Session management: view and revoke active sessions across devices
Email verification and password reset with SMTP
Audit logging: track admin actions with user, timestamp, and IP

Platform

Multi-User Workspaces & Plans

Organize tunnels into isolated workspaces with role-based access control. Assign plans with bandwidth and tunnel limits. Manage users, permissions, and billing from a centralized admin panel.

Granular permissions: tunnels, terminal, desktop, files, short links, and more
Plans with configurable bandwidth, tunnel limits, and feature access gates
Webhooks: receive POST notifications on tunnel connect/disconnect and other events with HMAC signing
Encrypted backups with scheduled automation, SFTP remote upload, and selective restore (individual workspaces/users)
Multi-node architecture: scale horizontally by adding relay nodes
Workspace migration between nodes with zero downtime

Deployment

Single-File Client

The thin client is a single JavaScript file — no dependencies, no Docker, no installation. Download it, run it, and your machine is connected. Auto-updates when a new version is available.

One file: node interveon-client.js
Lightweight footprint — tunnels, terminal, and file sharing in one process
Cross-platform: macOS, Linux, Windows
--install creates a native background service (launchd, systemd, Task Scheduler)
ffmpeg auto-downloaded on first run for remote desktop — native ARM64 and Intel builds
Automatic version checking and update notifications