The real interface — a remote Grafana mapped to localhost:47000
Every service your fleet hosts, made reachable — mapped to a local port through the mesh, with nothing forwarded and nothing public. Then your own ports, exposed under names only your fleet can see.
One click maps any remote service to a local port through the mesh proxy. Web services get an Open button straight to your browser; a bare TCP service gives you a copyable localhost: address to point your own client at. The local address is monospace and one tap away.
HTTP, SSH, Postgres, Redis, gRPC, WebSockets — the proxy tunnels at layer 4 and never parses your protocol. A connection the client upgrades to a WebSocket keeps flowing both ways for its whole life, exactly as it would direct. The proxy just carries the bytes.
The collapsible "Your ports" list shows exactly what this machine is listening on. Expose advertises a service to your fleet under a name you choose — HTTP services suggest the page <title>. Nothing leaves this machine until you say so.
Mapped, unmapped, just-copied, exposed — and the two empties. Each row tells you exactly what it is and what you can do with it next.
Lit row, a local address, and Open / Copy / ✕. The tunnel's live.
Not yet proxied here — a "local-only" tag and a single Map.
Copy flashes green to "✓ Copied" for a beat, then settles back.
A Your-ports row, named and lit, with Stop and the "1 exposed" badge.
Nothing exposed anywhere yet — the message tells you both ways to fix it.
This machine isn't listening on anything. Start a server and it shows up.