Keyboard shortcuts

Press ← or → to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

Remote Access

Remote connections let you reach your server from outside your local network — when traveling, at work, or on any other network. StartOS supports several strategies for remote access, each with different tradeoffs for speed, privacy, and setup complexity. These strategies will not work from the same LAN as your server; for that, see Local Access.

VPN, Tor, Holesail, and Clearnet

  • VPN — Extends your local network to anywhere in the world. Your device gets a secure tunnel to your server as if it were on the same LAN. Requires either a router with VPN server capability or a StartTunnel gateway, and trusting your Root CA.

  • Tor — Access your server via .onion addresses from anywhere. No router configuration, DNS, or Root CA trust required. Connections are slower and occasionally unreliable. Requires installing the Tor service from the marketplace.

  • Holesail — Direct peer-to-peer encrypted tunnels with no port forwarding, static IPs, or Root CA trust required. Once connected, speeds are comparable to VPN. Works behind restrictive networks and CGNAT. Requires installing the Holesail service from the marketplace.

  • Clearnet — Standard domain-based access on the public Internet. Requires a gateway, a domain name, and DNS configuration. Typically used for public hosting, but can be combined with authentication for private use.