Self-Hosted Mesh Tunneling

End-to-End Encryption

X25519 key exchange with ChaCha20-Poly1305 encryption. Transit nodes relay traffic they cannot decrypt - zero trust by design.

Multi-Hop Mesh Routing

Automatic route propagation across arbitrary topologies. Traffic flows through chains, trees, or full mesh networks with CIDR-based exit routing.

Flexible Transports

QUIC for performance, HTTP/2 for blending with HTTPS, or WebSocket for traversing corporate proxies and restrictive firewalls.

No Root Required

Runs entirely in userspace as a single binary. No kernel modules, no elevated privileges. Deploy on containers, VMs, or bare metal.

SOCKS5 Interface

Standard SOCKS5 proxy for transparent integration. Route SSH, browsers, curl, and any TCP application through the mesh.

Remote Operations

Execute commands and transfer files across the mesh. Interactive shell with command whitelisting and authenticated file upload/download.

Use Cases

Secure Remote Access

Access internal resources from anywhere without traditional VPN infrastructure. End-to-end encryption ensures transit nodes never see your traffic.

Multi-Site Connectivity

Connect data centers, offices, and cloud regions through a self-healing mesh. Automatic route propagation handles topology changes.

Firewall Traversal

Reach networks behind restrictive firewalls using HTTP/2 or WebSocket transports that blend with normal HTTPS traffic.

Red Team Operations

Purpose-built for authorized security assessments. OPSEC-hardened with configurable protocol identifiers and topology encryption.

Learn more

Quick Example

1. Initialize and Run

# Initialize agent
./muti-metroo init -d ./data

# Run with config
./muti-metroo run -c config.yaml

2. Connect via SOCKS5

# Use curl through the mesh
curl -x socks5://localhost:1080 https://internal.example.com

# SSH through the mesh
ssh -o ProxyCommand='nc -x localhost:1080 %h %p' user@host

Build Your First Mesh