Tunnel
A tunnel is a small program, flowplane-tunnel, that you run on a machine inside your network. It lets your agents reach systems that are not on the internet: internal apps, an ERP on a Windows server, a NAS, Home Assistant, a private API, your own MCP server.
- Outbound only. The tunnel only makes outbound connections. You open no port, set up no port forward and need no VPN.
- Only what you allow. The tunnel reaches only the hosts and networks you list with
-allow. - Same rules. A call through the tunnel gets the same permissions, approvals and log as a call to a cloud app.
- Your code stays with you. Custom connectors run inside your tunnel.
The allow list
Section titled “The allow list”-allow takes these forms. Repeat it for each entry:
| Form | Example |
|---|---|
HOST |
homeassistant.lan |
HOST:PORT |
homeassistant.lan:8123 |
CIDR |
10.0.0.0/24 |
CIDR:PORT |
10.0.0.0/24:443 |
Put IPv6 addresses in brackets when you add a port. An allow-all entry such as 0.0.0.0/0 or * is refused.
Lost or replaced machine
Section titled “Lost or replaced machine”Use Disconnect on the tunnel in the console, then enrol a new one. Never copy the tunnel’s state directory to another machine.
- Install the tunnel.
- Enrol and run it.
- Reach a private HTTP API or your own MCP server through it.